If you want to make sure that your site can be manipulated agentically by Meta's Muse, do not block traffic from ASN AS32934, because if you did that, it might make it impossible for the Muse agents to reach your site.
🤡
If you want to make sure that your site can be manipulated agentically by Meta's Muse, do not block traffic from ASN AS32934, because if you did that, it might make it impossible for the Muse agents to reach your site.
🤡
@mcdanlj is that an ip range or something that would show up in headers?
I'd definitely like to keep as many clankers away as possible
@bimmer It's an Autonomous System number, an entity that controls IP addresses. It's not a fixed range; AS's buy and sell IP ranges all the time. So it's not a simple static firewall rule. Sorry.
@mcdanlj dang
@bimmer @mcdanlj however, you can use the tools documented by @alex ¹ ² to dynamically grab the IPs currently owned by an ASN and shovel that info directly into your firewall.
¹: https://social.alexschroeder.ch/@alex/statuses/01K54J70TVE946JKARGQJ3JJGM
@gnomon @bimmer @mcdanlj If you feel like looking at some scripts, they are collected here: https://alexschroeder.ch/admin/
Some of them, like asn-find, are Python scripts using the pyasn library. You get to download an updates database for local use every now and then, mapping ASN to IP address ranges and so.
asn.fish uses dig and a DNs lookup.
asn-ban.fish is how I add things to fail2ban jails and all that.
In any case, a place to dig in. Happy to answer questions. 😄
@mcdanlj asn is a network name for IP range, it will not show up anywhere in the request
Maybe ISPs could have it as a dales argument? We block Facebook