💾 Archived View for freeside.wntrmute.net › log › 2020 › 20201214.gmi captured on 2022-01-08 at 13:40:25. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2021-12-05)
-=-=-=-=-=-=-
So, for the past week I've been battling an issue of running out of disk space. I was thinking the server had happened to collect a large amount of cruft; I've had this server for at least five years [a] and as you might imagine, it's been used for a bunch of different things [b] and accumulated a fair amount of random data.
Well, it turns out that the disk was being taken up by Adguard logs.
Specifically, other people using my server to try to carry out amplification attacks. The domain in question is an SEO domain, so I'll happily block it, but at the same time it means I need to look into better ways to control access to the server. I might set up something that dynamically adds firewall rules for whatever server I'm on based on some kind of authentication. Really what I should do is figure out how to do client cert authentication for DNS over TLS, and set this up as a DoT server. Is client auth for DoT a thing? I don't know.
It did get me to start my own blocklist, which is mostly just news sites.