Re: .htaccess file

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]




> -----Original Message-----
> From: centos-bounces@xxxxxxxxxx [mailto:centos-bounces@xxxxxxxxxx] On
> Behalf Of Albert McCann
> Sent: Sunday, August 28, 2016 2:01 PM
> To: 'CentOS mailing list'
> Subject: Re:  .htaccess file
> 
> > -----Original Message-----
> > From: centos-bounces@xxxxxxxxxx [mailto:centos-bounces@xxxxxxxxxx]
> On
> > Behalf Of TE Dukes
> > Sent: Sunday, August 28, 2016 10:36 AM
> 
> > My home system on a DSL line is getting worn out by bad behavior robots.
> 
> > Awhile back, I created a .htaccess file that block countries by IP
blocks.
> > Its 2MB in size.
> 
> ...
> > So, today, I tried following the directions for apache.org website,
> > https://httpd.apache.org/docs/current/howto/htaccess.html to move the
> > .htaccess
> 
> What version of CentOS are you using?
> 
> For 7.x, and I think 6.x, there is a much simpler way of doing this, using
> mod_geoip from the Epel repository.
> 
> It rejects all unwanted HTTP connections using 403 responses. Here's an
> example geoip.conf file, which is what I'm using:
> 
> ----
> <IfModule mod_geoip.c>
>   GeoIPEnable On
>   GeoIPDBFile /usr/share/GeoIP/GeoIP.dat MemoryCache
>   GeoIPOutput Env
> # Proxies
>   SetEnvIf GEOIP_COUNTRY_CODE A1 BlockCountry #Country blocks
>   SetEnvIf GEOIP_COUNTRY_CODE TR BlockCountry
>   SetEnvIf GEOIP_COUNTRY_CODE IR BlockCountry #... more countries using
> the two char country code </IfModule>
> ----
> On C7 this file goes here /etc/httpd/conf.d/geoip.conf
> 
> Make sure that /etc/httpd/conf.modules.d/10-geoip.conf loads the library
> file, and is not remarked out with a #.
> 
> There is more info on mod_geoip here (but use the installation from Epel)
> though:
> 
> http://dev.maxmind.com/geoip/legacy/mod_geoip2/
> 
> I run a server for personal family purposes, and use this to block many of
the
> places my family doesn't live...
> 
> Al McCann
> Certe, Toto, sentio nos in Kansate non iam adesse.
[Thomas E Dukes] 
Thanks,

I'll take a look at that as well. I am getting hit on several services but
httpd is getting the majority.

Thanks!!

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux