Re: <directory> and deny directives

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Owen:

Actually, the partial matches do seem to work... see my reply to Joshua. It's only the first DENY that I can clearly see doesn't work (so far). I got the idea to do it that way from this page (see about mid-page):

http://www.hostingmanual.net/other/htfun.shtml

Mark

-------- Original Message  --------
Subject: Re:  <directory> and deny directives
From: Boyle Owen <Owen.Boyle@xxxxxxx>
To: users@xxxxxxxxxxxxxxxx
Date: Friday, September 14, 2007 12:07:41 AM

-----Original Message-----
From: Mark A. Craig [mailto:mark.a.craig@xxxxxxxxx]
<Directory "C:/www/blog">
   Options None
   AllowOverride None
   #Order allow,deny
   #Allow from all
   order deny,allow
   deny from .svservers.com

This is just a guess, but I wouldn't put in the leading dots in the
domain names, if I were you. It's not done like that in the docs and, if
I guess rightly (without bothering to check the code), apache just does
a DNS lookup on the "deny from" argument. If so, then it will not
resolve with a leading dot.


   deny from .static.theplanet.com
   deny from .goo.ne.jp
   deny from .cable.casema.nl
   deny from -xbox.dedi.inhoster.com

Also, partial matches won't work (so say the docs).

Rgds,
Owen Boyle


   deny from .knology.net
   deny from .pppoe.mtu-net.ru
   deny from .barak-online.net
   deny from .barak.net.il
   deny from .keymachine.de
   deny from .hostingprod.com
   deny from .client.bresnan.net
   deny from 210.240.
   deny from .dsl.ip.tiscali.nl
   deny from .qwerty.ru
   deny from .t-ipconnect.de
</Directory>

There's only one problem: it's not working! The log still shows visits from these hostnames. What am I missing? Do I need to add "/*" to the end of the <Directory> directive, or do subdirectories implicitly inherit the same directives?

Mark



you should use

Order allow,deny
Allow from all

instead of

order deny,allow




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux