Re: Deny by IP address unsuccessful

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Apr 27, 2013, at 2:25 PM, Jim Albert wrote:
Is your .htaccess at the proper directory level with the resource you want to block?

If there are .htaccess files at sublevels that could be your problem.

Is .htaccess readable by your apache user?

Is Apache configured for AllowOverride with at minimum Limit at the appropriate level?

Hi Jim,

All excellent points, but everything is in order.

I may have stumbled upon something.   Our ISP has CloudFlare turned on for this domain and, after a lot of searching, it appears that CloudFlare changes the IP address of the visitor (I may not be wording that correctly).  Using a PHP scripts, HTTP_X_FORWARDED_FOR gives me my proper IP address while REMOTE_ADDR is blank.  Unfortunately, I still can't block myself.  I've tried:

RewriteCond %{HTTP_X_FORWARDED_FOR} !!=69.163.150.25
RewriteCond %{HTTP_X_FORWARDED_FOR} ^69\.163\.150\.25$
RewriteCond %{REMOTE_ADDR} !!=69.163.150.25
RewriteCond %{REMOTE_ADDR} ^69\.163\.150\.25$

Am I going about this all wrong?

Thank again,
Angela

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux