Danie: I presume that you meant to imply that my DENY list should then follow ALLOW FROM ALL? Given that my directives aren't denying anything they shouldn't, but only failing to deny a few things they should, I guess I'm not understanding why I would need to change the ordering in the way you suggested. Could you explain it further? Mark -------- Original Message -------- Subject: Re: <directory> and deny directives From: Danie Qian <daniel@xxxxxxxxxxxxxxxx> To: users@xxxxxxxxxxxxxxxx Date: Thursday, September 13, 2007 08:31:24 PM > > ----- Original Message ----- From: "Mark A. Craig" <mark.a.craig@xxxxxxxxx> > To: <users@xxxxxxxxxxxxxxxx> > Sent: Thursday, September 13, 2007 6:57 PM > Subject: <directory> and deny directives > > >> My little humble blog has been getting way too much attention from >> comment spammers, and I'd like to begin cutting them off. I've >> identified the hostnames they use to snoop for details to construct >> fake referer data, and now I want to cut them off. I thought I could >> do it like this: >> >> <Directory "C:/www/blog"> >> Options None >> AllowOverride None >> #Order allow,deny >> #Allow from all >> order deny,allow >> deny from .svservers.com >> deny from .static.theplanet.com >> deny from .goo.ne.jp >> deny from .cable.casema.nl >> deny from -xbox.dedi.inhoster.com >> deny from .knology.net >> deny from .pppoe.mtu-net.ru >> deny from .barak-online.net >> deny from .barak.net.il >> deny from .keymachine.de >> deny from .hostingprod.com >> deny from .client.bresnan.net >> deny from 210.240. >> deny from .dsl.ip.tiscali.nl >> deny from .qwerty.ru >> deny from .t-ipconnect.de >> </Directory> >> >> There's only one problem: it's not working! The log still shows >> visits from these hostnames. What am I missing? Do I need to add >> "/*" to the end of the <Directory> directive, or do subdirectories >> implicitly inherit the same directives? >> >> Mark >> >> >> > > you should use > > Order allow,deny > Allow from all > > instead of > > order deny,allow > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|