How to block the web proxy server

[Jason200784]

I want to block people using the web proxy server to visit my webiste. In the home directory, I add this to the .htaccess file,

RewriteEngine on
RewriteCond %{HTTP_REFERER} ^http(s)?://(www\.)?a-bad_proxy.com.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http(s)?://(www\.)?a-bad_proxy.com.*$ [NC]
RewriteRule .* www.google.com [L]

but it doesn't works. I can still using the web proxy www.ciaproxy.com to visit my website.

What's the problem?

Thanks in advance!

[edited by: jdMorgan at 12:51 am (utc) on July 20, 2008]
[edit reason] examplified proxy domain. [/edit]

[jdMorgan]

Change the rule to

RewriteRule .* - [F]

Flush your browser cache before each test -- and especially after visiting your own site without using a proxy. Otherwise, your browser will happily show you a previously-cached local copy of your pages, and no requests will be sent to your server.

Do you have any other working RewriteRules? If not, be aware that there are several 'set-up' directives which you did not show, and which may be required to enable mod_rewrite on your server.

Jim

[Key_Master]

Don't be surprised if it still doesn't work. Anonymous proxies rarely leave a giveaway referrer. A better idea is to ban the IP address.

[Jason200784]

---

System: The following message was spliced on to this thread from: http://www.webmasterworld.com/apache/3702615.htm [webmasterworld.com] by encyclo - 4:30 pm on July 19, 2008 <small>(utc -4)</small>

---

The web proxy server is www.a-bad_proxy.com and the ip is 72.233.47.236. In the home directory, I add this to the .htaccess file,

Order Deny,Allow
Deny from 72.233.47.236
Deny from a-bad_proxy.com
Deny from www.a-bad_proxy.com

But it doesn't work.

What's the problem?

Thanks in advance!

[edited by: jdMorgan at 12:52 am (utc) on July 20, 2008]
[edit reason] obscured proxy domain. [/edit]

[janharders]

block the IP 72.233.44.194, that's the one it seems to use for the outgoing connections.

[jdMorgan]

That's Layered Technology's range, and you might consider blocking the whole thing if you never get any legitimate traffic from them. Most everything I've looked up in their IPs is a server. Do a Whois lookup to find the relevant address ranges.

Jim

[Vivo]

Rdns "the planet" and add there ip range too but to be honest blocking proxies will become a full time job if you go that way.And reffers are easly spoofed so you can't go that way.

Whats the reason you wish to block them?

[Vivo]

OK I am guessing the reason is content theft or hijacking.

If so then as soon as you block that proxy there move on to the next. There are solutions but they are very time consumming to set up and they do little more than prevent proxies copying content or hijacking. In other words they offer "no pay back". Half the problem is people that suffer this are too whitehat so lets put a greyhat on instead.

Ok instead of banning redirect them to a tarpit. This will use up all there resources and leave them with a wacking great bandwidth bill at then end of the month.

[janharders]

>>Ok instead of banning redirect them to a tarpit. This will use up all there resources and leave them with a wacking great bandwidth bill at then end of the month.

It'd be a great idea, if you weren't with them in the tarpit, also keeping resources on your server busy. and same story for the bandwidth-bill. Also, I've noticed that quite a few of these web-proxy-sites are "deactivated due to billing issues" sooner or later. Thus, the only one that really pays a bill is you.

But in general, I agree, if you just ban them, they might use the next proxy to scrape your site. You could silently rewrite their requests to some dummy-page that does not have your original content on it.