Today was not a good day. Based on my faith in the expertise of the people on this board - after parsing log files this afternoon - I sent the following to my current (nameless) host provider:
I have been discussing with tech support for a couple months or more how to block certain IP addresses from accessing my main domain, *****, and the domains I host under it. Depending on who I talk to - the response is different every time. Something like musical chairs.
Last response said that I should get a dedicated server, as I asked about mod_rewrite. She said it was not installed when the boxes were set up, so could not be done now. She suggested a dedicated server. I think that translates to, "We don't want to bother. Go away. Or give us more money".
Here's what I'm dealing with: I have client sites with images being stolen and hotlinked all over the internet. Hundreds of times. Not once or twice, but hundreds of times every week. Maybe a thousand or more. I am SICK of it.
Now, with mod_rewrite, I could do rewrite conditions that would prevent this, and also ban a lot of bots and spiders I don't need crawling around. That is my intention. I'm not trying to do anything subversive, but I am tired of being strangled with the limitations I am faced with.
Adding the addresses to .htaccess, the way the boxes are set up now, DOES NOT WORK. Period. It has no effect - in fact - it doesn't even work. I added lots of IPs to my banned list. They cruise in, and continue to come and go as they choose. I banned *myself* - just for kicks - and was looking through sites without missing a beat. Verdict: .htaccess as it is currently configured on this box is totally impotent. Needs Viagra.
So where does that leave me? I already do my own conf files - because half the time the techs set the domains up wrong to begin with. I submit which folder it's to go in - they always do the default install of (htdocs) - so then I go in and tweak it. Then I tweak the names it automatically assigns the cgi-bins - and the default cgi-bin locations. No big deal, I'm used to it. But I do this myself. Haven't blown it up yet, have I?
Currently, I already have a zillion things going on in my cgi-bins. I have my own error tracking. I have scripts that do all kinds of things - which I wrote. But, most importantly, I have a bunch of domains I have no time to move to another server - being plundered by people all over the internet. And I'm helpless.
No, I don't need or want a dedicated server. mod_rewrite, despite what some of your techs have told me, is not pure evil, straight from Hell. Other webmasters I know say it's about a five minute install, plus some additional tweaking. They do rewrite conditions all day long. Without blowing anything up, without begging and pleading, and without a dedicated server. Want names? I'll give you some.
If it's the matter of time to install the mod - fine - I'll pay what's reasonable. That's not an issue. (In fact, I was led to believe a month or so ago this might even happen. I was filled with joy.) What I am having an issue with is a host provider that does nothing to help me, and I'm stuck with a box full of clients getting raped every day because I can't do a thing about it.
Am I not polite? Do I call and scream at your techs? Does any of this seem to matter at all to anyone? NO. But it matters to me. I would very much appreciate this meeting a swift resolution.