Bug#207415: apt-listbugs usage against master

[Adam Heath <doogie@debian.org>]

Package: apt-listbugs
Severity: critical

On Tue, 26 Aug 2003, Adam Heath wrote:

> I was noticing increased load on master.  While trying to track that down, I
> noticed a large percentage of requests(48k of 116k) from something called
> apt-listbugs.
>
> It appears the maintainer has exported the entire spool/db-h, as
> ~taru/public_html/apt-listbugs/db-h.  I'm only seeing requests for .status,
> and a few index files, but I was rather surprised to see such a high
> percentage.
>
> Is it possible we can come up with a better way of doing this?
>
> ps: I don't think apt-listbugs is causing increased cpu load, unless by
> allowing users to see bugs, it lets them launch their browser, to see the
> actual page.

Ok, I was wrong.  It is causing increased load.  The 48k lines above is *just*
for *.status, and a few index files.  It does *not* include any cgi requests,
as those are done by way of querybts.

Because of the way the actual bug reports are queried, it's not possible to
block the requests for the cgis.  However, I am going to be blocking requests
for the .status files, which should solve the problem.

This increased load(both bw and cpu) started a week ago.  It is even heavier
today, most likely because it may have recently entered testing.

ps: this bug is critical, as it is causing a minor DoS against master.