Forum

Hello,

Recently we are seeing a lot of ddos attacks using Wordpress pingback vulnerability which allows the attacker to send requests to target server using lots of Wordpress blogs.

Is there a way to block useragent "Wordpress" from accessing any site behind hiawatha?

Thanks
Andrew

You can use the Header UrlToolkit option for that:

UrlToolkit {
    ...
    Header User-Agent .*wordpress.* DenyAccess
}

Thank you, Hugo, this will not work in reverse proxy mode?

No, the reverse proxying is done before UrlToolkit rule processing. This should be done by the destination webserver.