{"action":"created","issue":{"url":"https://api.github.com/repos/friendica/friendica/issues/1326","labels_url":"https://api.github.com/repos/friendica/friendica/issues/1326/labels{/name}","comments_url":"https://api.github.com/repos/friendica/friendica/issues/1326/comments","events_url":"https://api.github.com/repos/friendica/friendica/issues/1326/events","html_url":"https://github.com/friendica/friendica/issues/1326","id":55736234,"number":1326,"title":"zrl URL parameter spam DoS misuse","user":{"login":"kkretsch","id":1115638,"avatar_url":"https://avatars.githubusercontent.com/u/1115638?v=3","gravatar_id":"","url":"https://api.github.com/users/kkretsch","html_url":"https://github.com/kkretsch","followers_url":"https://api.github.com/users/kkretsch/followers","following_url":"https://api.github.com/users/kkretsch/following{/other_user}","gists_url":"https://api.github.com/users/kkretsch/gists{/gist_id}","starred_url":"https://api.github.com/users/kkretsch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kkretsch/subscriptions","organizations_url":"https://api.github.com/users/kkretsch/orgs","repos_url":"https://api.github.com/users/kkretsch/repos","events_url":"https://api.github.com/users/kkretsch/events{/privacy}","received_events_url":"https://api.github.com/users/kkretsch/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-01-28T10:05:32Z","updated_at":"2015-02-01T16:06:49Z","closed_at":null,"body":"I just got a bunch (thousands) of requests (from vietnam) like that pattern:\r\n\r\n\"GET /profile/k_kretschmann?zrl=http://example.com\r\n\r\nWhen I try that request with a target domain I have access to, I can see these requests originating from my friendica installation:\r\n\r\n11.11.11.11 - - [28/Jan/2015:10:59:21 +0100] \"GET /.well-known/host-meta HTTP/1.1\" 404 7900 \"-\" \"Friendica 'Ginger' 3.3.2-1175; http://f.example.com\"\r\n11.11.11.11 - - [28/Jan/2015:10:59:21 +0100] \"GET / HTTP/1.1\" 200 16381 \"-\" \"Friendica 'Ginger' 3.3.2-1175; http://f.example.com\"\r\n11.11.11.11 - - [28/Jan/2015:10:59:21 +0100] \"GET /feed/ HTTP/1.1\" 200 11184 \"-\" \"Friendica 'Ginger' 3.3.2-1175; http://f.example.com\"\r\n11.11.11.11 - - [28/Jan/2015:10:59:40 +0100] \"GET /.well-known/host-meta HTTP/1.1\" 404 7900 \"-\" \"Friendica 'Ginger' 3.3.2-1175; http://f.example.com\"\r\n11.11.11.11 - - [28/Jan/2015:10:59:40 +0100] \"GET / HTTP/1.1\" 200 16381 \"-\" \"Friendica 'Ginger' 3.3.2-1175; http://f.example.com\"\r\n11.11.11.11 - - [28/Jan/2015:10:59:40 +0100] \"GET /feed/ HTTP/1.1\" 200 11184 \"-\" \"Friendica 'Ginger' 3.3.2-1175; http://f.example.com\"\r\n\r\nMy fear is I could be used as a DoS reflector. With just a small request I create lots of traffic for my server and the external one. How can we disable this behaviour?\r\n"},"comment":{"url":"https://api.github.com/repos/friendica/friendica/issues/comments/72370624","html_url":"https://github.com/friendica/friendica/issues/1326#issuecomment-72370624","issue_url":"https://api.github.com/repos/friendica/friendica/issues/1326","id":72370624,"user":{"login":"annando","id":844208,"avatar_url":"https://avatars.githubusercontent.com/u/844208?v=3","gravatar_id":"","url":"https://api.github.com/users/annando","html_url":"https://github.com/annando","followers_url":"https://api.github.com/users/annando/followers","following_url":"https://api.github.com/users/annando/following{/other_user}","gists_url":"https://api.github.com/users/annando/gists{/gist_id}","starred_url":"https://api.github.com/users/annando/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/annando/subscriptions","organizations_url":"https://api.github.com/users/annando/orgs","repos_url":"https://api.github.com/users/annando/repos","events_url":"https://api.github.com/users/annando/events{/privacy}","received_events_url":"https://api.github.com/users/annando/received_events","type":"User","site_admin":false},"created_at":"2015-02-01T16:06:48Z","updated_at":"2015-02-01T16:06:48Z","body":"I added a cache mechanism for the \"probe_url\" function. That means that repeated calls won't probe the systems over and over again - only once."}}