Block users that flood google or other sites
-
Hi,
I'm getting locked out of Google too often, because some of the users are running bots and crap that floods Google.
I checked on my computer the software I caught one of them using, and it looks like regular HTTP packages, so I'm not sure how to block it.
Blocking the access to install 3rd party apps isn't an option, the workstations already like that but the main problem is WIFI users with their own laptops they kind of able to do whatever they want on port 80 and 443.
The router is a basic one that act just like an access point, pfSense still managing DNS and most of the stuff.
Unfortunately my division's budget right now doesn't allow me to get any paid solution, so I'm asking for your advice on that :)
Many (many) thanks!
-
I am not sure it will work for what you are trying to do, but you can create a rule for 80 and 443 with advanced options to limit the number of states and new connections. You could also put snort on there and that might also help catch and temporarily block access to computers with these problems.