Based on concerns and dealing with issues raised here over time (which from reading is systemic across the web the last few months) and facing new waves of this stuff. I tested Login Only, but noticed these AI bot waves hitting all kinds of discourse resources/paths, and potentially getting served …

[이미지] agemo: hitting all kinds of discourse resources/paths, and potentially getting served a page/contents Which paths specifically? anything that gets hit should redirect to login. [이미지] agemo: Can anyone confirm if Login Only is a total block or not? Yes, login only means the only …

As posted in the linked topic, for e.g.: ...stylesheets/docker_manager_abc123.css In some simple testing I followed the links various traffic was seeking, and I was able to pull down the css or js files and who knows what else, when discourse was in Login Only mode.

Oh I see, yes that’s expected… those are static assets used to render the app, they are often cached for performance and don’t contain sensitive post information.

Ok I understand the but maybe true lockdown needs to be deeply and quickly considered, for technical reasons I can’t think of other than leaving no threads that can be yanked DDoS level. I’ve just seen nearly 3K unique URL request targeting specifically uploads/default/original/3X/c/.../...some.jpe…

Maybe https://meta.discourse.org/t/secure-uploads/meta/140017 could help you on this?

Thanks for pointing that out. I was not aware of it, but yea a BIG maybe, I don’t know if I have the time and resources to implement right now.

Searching meta I have discovered the below option here and have activated: Prevent anonymous users from downloading attachments. Maybe this will block such requests or help to some degree.

로그인 전용 - 실제로 로그인 없이 모든 트래픽 접근을 차단하나요?

지원

awesomerobot (Kris) 12월 15, 2025, 11:19오후 6

아마도 https://meta.discourse.org/t/secure-uploads/meta/140017 이 도움이 될 수 있을 것 같습니다.

글		댓글	조회수
login_required even redirects robots.txt to /login Bug	2	1063	10월 15, 2015
Seeing anonymous user and crawler traffic, even though site is private Data & reporting	3	987	9월 9, 2021
Anonymous views suddenly very high Data & reporting	48	1964	12월 10, 2025
Login and Logout Errors from Cache Settings Conflict with Cloudflare Support cloudflare	31	732	1월 7, 2025
Login Modal not shown when login page is accessed directly in a private forum Feature	15	2168	5월 9, 2019

로그인 전용 - 실제로 로그인 없이 모든 트래픽 접근을 차단하나요?

Related topics