Hi Mark, while I would encourage you to keep looking into Anubis something you can do to buy yourself some more time is to block user agents that are almost certainly fake. One of your examples shows what claims to be MSIE 9 running on Windows CE. Actual patrons are not running anything with Windows 9X, NT 3/4/5, or CE, all of which you're likely to find single requests per IP in your logs (and mostly wouldn't even be able connect to modern TLS). Also blocking anything claiming to be Chrome or Firefox with a version less than 100 (several years old by now) will make a huge difference without actually impacting real users. Though that one may need to be narrowed down to just Windows and macOS if you have some locations using old Linux machines (usually Raspberry Pi's) running older versions of Chrome, because it can't keep itself up to date as easily on Linux. Good luck! Jason -- Jason Boyer Senior System Administrator Equinox Open Library Initiative JBoyer@equinoxOLI.org +1 (877) Open-ILS (673-6457) https://equinoxOLI.org/ On Fri, Jul 11, 2025 at 8:22 AM Mark Alexander <marka@pobox.com> wrote:
Excerpts from Thomas Klausner's message of 2025-07-11 07:24:22 UTC:
See a bit more info in our blog post here: https://www.koha-support.eu/using-anubis-with-koha/
This is helpful, but I'm puzzled by this line from the SSL configuration example:
AssignUserID <
This looks like it's missing something. I'm assuming it should be the same as the equivalent line from the localhost:80 configuration example:
AssignUserID <instancename>-koha <instancename>-koha
-- My object is to save the world, while still leading a pleasant life. --Ashleigh Brilliant
_______________________________________________
Koha mailing list http://koha-community.org Koha@lists.katipo.co.nz Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha