Tell them to run fail2ban too.
Since it's only useful to retreive the EPG once a day, I ban every IP with too many requests in a certain time. If you have multiple boxes behind NAT, just have them collect the EPG an hour apart to avoid the ban.
To give an impression of scale:
I have 47696 IP's currently in my ban list, Out of 3337993 requests. Some details:
pkts bytes target prot opt in out source destination
105K 6299K REJECT all -- * * 87.196.132.248 0.0.0.0/0 reject-with icmp-port-unreachable
122K 7313K REJECT all -- * * 89.95.46.201 0.0.0.0/0 reject-with icmp-port-unreachable
120K 7208K REJECT all -- * * 178.166.7.127 0.0.0.0/0 reject-with icmp-port-unreachable
109K 6546K REJECT all -- * * 84.90.169.116 0.0.0.0/0 reject-with icmp-port-unreachable
118K 7052K REJECT all -- * * 213.22.122.16 0.0.0.0/0 reject-with icmp-port-unreachable
117K 6996K REJECT all -- * * 37.189.229.97 0.0.0.0/0 reject-with icmp-port-unreachable
113K 6777K REJECT all -- * * 84.91.98.237 0.0.0.0/0 reject-with icmp-port-unreachable
119K 7123K REJECT all -- * * 84.73.83.29 0.0.0.0/0 reject-with icmp-port-unreachable
123K 7369K REJECT all -- * * 37.189.254.210 0.0.0.0/0 reject-with icmp-port-unreachable
120K 7186K REJECT all -- * * 84.90.40.41 0.0.0.0/0 reject-with icmp-port-unreachable
120K 7218K REJECT all -- * * 89.114.33.186 0.0.0.0/0 reject-with icmp-port-unreachable
102K 6114K REJECT all -- * * 82.224.43.140 0.0.0.0/0 reject-with icmp-port-unreachable
121K 7278K REJECT all -- * * 89.155.49.214 0.0.0.0/0 reject-with icmp-port-unreachable
120K 7212K REJECT all -- * * 81.13.137.239 0.0.0.0/0 reject-with icmp-port-unreachable
123K 7351K REJECT all -- * * 88.219.157.156 0.0.0.0/0 reject-with icmp-port-unreachable
202K 12M REJECT all -- * * 89.154.176.103 0.0.0.0/0 reject-with icmp-port-unreachable
211K 13M REJECT all -- * * 188.251.13.3 0.0.0.0/0 reject-with icmp-port-unreachable
110K 6574K REJECT all -- * * 84.91.21.167 0.0.0.0/0 reject-with icmp-port-unreachable
113K 6788K REJECT all -- * * 176.79.134.169 0.0.0.0/0 reject-with icmp-port-unreachable
111K 6618K REJECT all -- * * 84.91.119.199 0.0.0.0/0 reject-with icmp-port-unreachable
246K 15M REJECT all -- * * 84.91.208.86 0.0.0.0/0 reject-with icmp-port-unreachable
171K 10M REJECT all -- * * 193.91.35.252 0.0.0.0/0 reject-with icmp-port-unreachable
169K 10M REJECT all -- * * 79.169.39.206 0.0.0.0/0 reject-with icmp-port-unreachable
210K 13M REJECT all -- * * 178.166.64.136 0.0.0.0/0 reject-with icmp-port-unreachable
243K 15M REJECT all -- * * 89.154.142.236 0.0.0.0/0 reject-with icmp-port-unreachable
241K 14M REJECT all -- * * 95.95.20.72 0.0.0.0/0 reject-with icmp-port-unreachable
177K 11M REJECT all -- * * 78.130.68.229 0.0.0.0/0 reject-with icmp-port-unreachable
332K 20M REJECT all -- * * 84.91.121.158 0.0.0.0/0 reject-with icmp-port-unreachable
241K 14M REJECT all -- * * 188.93.193.64 0.0.0.0/0 reject-with icmp-port-unreachable
263K 16M REJECT all -- * * 89.180.4.149 0.0.0.0/0 reject-with icmp-port-unreachable
199K 12M REJECT all -- * * 88.214.171.251 0.0.0.0/0 reject-with icmp-port-unreachable
183K 11M REJECT all -- * * 82.236.5.85 0.0.0.0/0 reject-with icmp-port-unreachable
186K 11M REJECT all -- * * 84.101.241.80 0.0.0.0/0 reject-with icmp-port-unreachable
313K 19M REJECT all -- * * 46.127.223.233 0.0.0.0/0 reject-with icmp-port-unreachable
709K 35M REJECT all -- * * 188.37.99.166 0.0.0.0/0 reject-with icmp-port-unreachable
So you see there are IP's with a rediculous amount of requests!
332K requests from a single IP? You got to be kidding, there is nothing normal about this anymore...
Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Ultimate (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)
Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.
Many answers to your question can be found in our new and improved wiki.