Re: <directory> and deny directives

"Danie Qian" <daniel@xxxxxxxxxxxxxxxx> · Thu, 13 Sep 2007 23:31:24 -0400

----- Original Message ----- 

From: "Mark A. Craig" <mark.a.craig@xxxxxxxxx>

To: <users@xxxxxxxxxxxxxxxx>
Sent: Thursday, September 13, 2007 6:57 PM
Subject:  <directory> and deny directives

My little humble blog has been getting way too much attention from comment 

spammers, and I'd like to begin cutting them off.  I've identified the 

hostnames they use to snoop for details to construct fake referer data, 

and now I want to cut them off.  I thought I could do it like this:

<Directory "C:/www/blog">
   Options None
   AllowOverride None
   #Order allow,deny
   #Allow from all
   order deny,allow
   deny from .svservers.com
   deny from .static.theplanet.com
   deny from .goo.ne.jp
   deny from .cable.casema.nl
   deny from -xbox.dedi.inhoster.com
   deny from .knology.net
   deny from .pppoe.mtu-net.ru
   deny from .barak-online.net
   deny from .barak.net.il
   deny from .keymachine.de
   deny from .hostingprod.com
   deny from .client.bresnan.net
   deny from 210.240.
   deny from .dsl.ip.tiscali.nl
   deny from .qwerty.ru
   deny from .t-ipconnect.de
</Directory>

There's only one problem: it's not working!  The log still shows visits 

from these hostnames.  What am I missing?  Do I need to add "/*" to the 

end of the <Directory> directive, or do subdirectories implicitly inherit 

the same directives?

Mark

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

you should use

Order allow,deny
Allow from all

instead of

order deny,allow 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx