Hacker News Reader

Maybe tarpit[1] the connections? By rejecting them quickly you help them move on, but if you instead make the pages load as slowly as possible that would waste a lot of their time.

1. https://en.wikipedia.org/wiki/Tarpit_(networking)

View on HN

I thought this same thing. Figuring out who/when to tarpit might be a little tricky, but here's the basic approach for a Debian system via iptables: https://sysadminblog.net/2013/08/debian-iptables-tarpit/

Came here to suggest that, too. Here’s a tutorial on doing it with the pf firewall:

https://home.nuug.no/~peter/pf/en/bruteforce.html

Reply on news.ycombinator.com