# HG changeset patch
# User IBBoard <dev@ibboard.co.uk>
# Date 1481976076 0
# Node ID 4f9bc88a426a302c5a67f4080f1150d4d8ca560d
# Parent  765e72629b3e156fcc5d5016f7b4a697ae5304e6
Firewall Baidu's new Brazillian IP range for being to agressive

diff -r 765e72629b3e -r 4f9bc88a426a manifests/templates.pp
--- a/manifests/templates.pp	Fri Nov 11 21:04:13 2016 +0000
+++ b/manifests/templates.pp	Sat Dec 17 12:01:16 2016 +0000
@@ -112,7 +112,16 @@
 		dport => [ 80, 443 ],
 		proto => tcp,
 		action => 'reject',
-	}		
+	}
+	firewall { '099 Blacklist Baidu Brazil':
+		#Baidu got a Brazilian netblock and are hitting us hard
+		#Baidu doesn't honour "crawl-delay" in robots.txt
+		#Baidu gets firewalled
+		source => '131.161.8.0/22',
+		dport => [ 80, 443 ],
+		proto => tcp,
+		action => 'reject',
+	}
 	firewallchain { 'GREATFIREWALLOFCHINA:filter:IPv4':
 		ensure => present,
 	}