On Sun, Mar 30, 2008 at 12:15 PM, Grant Peel <gpeel@xxxxxxxxxxxxx> wrote: > > > Hi all, > > As mentioned in previous emails, I am trying to deny access via SetEnvIf > statements in my httpd.conf (to block smap bots / email harvesters etc. > > I have two questions: > > 1. My server has several hundred VirtualHost directives. When the SetEnvIf > statements are just placed in the main server config, will the block those > referrers from the VirtualHosts as well? Yes, if placed in a <Directory> or <Location> section that is not overridden inside the <VirtualHost>s. See: http://httpd.apache.org/docs/2.2/sections.html#mergin > > 2. How can I set logging to see if SetEnvIf statements are doing what I > intended them to do? For your access log, use a log format that reports the user agent (such as the combined log format). Then you can just make sure the response code is 403 for the appropriate user agents. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx