Re: <directory> and deny directives

"Mark A. Craig" <mark.a.craig@xxxxxxxxx> · Fri, 14 Sep 2007 00:52:13 -0700

Owen:

Actually, the partial matches do seem to work... see my reply to Joshua.  It's 

only the first DENY that I can clearly see doesn't work (so far).  I got the 

idea to do it that way from this page (see about mid-page):

http://www.hostingmanual.net/other/htfun.shtml

Mark

-------- Original Message  --------
Subject: Re:  <directory> and deny directives
From: Boyle Owen <Owen.Boyle@xxxxxxx>
To: users@xxxxxxxxxxxxxxxx
Date: Friday, September 14, 2007 12:07:41 AM

-----Original Message-----

From: Mark A. Craig [mailto:mark.a.craig@xxxxxxxxx] 

<Directory "C:/www/blog">
   Options None
   AllowOverride None
   #Order allow,deny
   #Allow from all
   order deny,allow
   deny from .svservers.com

This is just a guess, but I wouldn't put in the leading dots in the
domain names, if I were you. It's not done like that in the docs and, if
I guess rightly (without bothering to check the code), apache just does
a DNS lookup on the "deny from" argument. If so, then it will not
resolve with a leading dot.

   deny from .static.theplanet.com
   deny from .goo.ne.jp
   deny from .cable.casema.nl
   deny from -xbox.dedi.inhoster.com

Also, partial matches won't work (so say the docs).

Rgds,
Owen Boyle

   deny from .knology.net
   deny from .pppoe.mtu-net.ru
   deny from .barak-online.net
   deny from .barak.net.il
   deny from .keymachine.de
   deny from .hostingprod.com
   deny from .client.bresnan.net
   deny from 210.240.
   deny from .dsl.ip.tiscali.nl
   deny from .qwerty.ru
   deny from .t-ipconnect.de
</Directory>

There's only one problem: it's not working!  The log still shows 

visits from these hostnames.  What am I missing?  Do I need to add 

"/*" to the end of the <Directory> directive, or do subdirectories 

implicitly inherit the same directives?

Mark

you should use

Order allow,deny
Allow from all

instead of

order deny,allow

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx