IP ranges in .htaccess

[Jordo needs a drink]

Can you block ip ranges in the .htaccess like

deny from ###.###.###.### - ###.###.###.###?

I thought you could, but I have ip's accessing a site, that are in the range I blocked.

[SteveWh]

Yes you can, but not using that format. Search for "CIDR" or "netmask".

[coopster]

Details on how to do so can be found in the Apache manual pages under the Allow [httpd.apache.org] directive.

[trillianjedi]

I don't mean to take this off track, but blocking a range of IP's, if for the long term, is much more efficiently handled in IPtables (or your firewall if this is a Windows server).

TJ

[jdMorgan]

> off track

... but most Webmasters are on shared virtual hosting, and have no access to IPtables, firewalls, or anything beyond the limited .htaccess controls -- Which is why we do a big business here in .htaccess issues, and relatively little in server config discussion.

As stated above, the documentation for the Allow directive in mod_access enumerates the various methods for specifying IP address ranges.

Jim