Blocking "dual proxies"

[helleborine]

I've been blocking my web stalker from viewing my websites in htaccess by blocking his specific browser/computer/os combination. Thank you all for showing me how to do this.

The nutjob is back under this disguise today:

123.45.678.9 - - [17/Jun/2005:04:50:01 -0500] "GET /style_images/1/nav.gif HTTP/1.1" 200 73 "http://www.mydomain.com/index.php?showtopic=6" "Dual Proxy"

What now?

[jdMorgan]

I assume this is a continuation of this thread [webmasterworld.com].

If so, just make another RewriteCond with this user-agent name in the pattern, and use [NC,OR] on the end of the first one.

Dual proxy is used by some ISPs such as satellite internet service providers. There's nothing inherently "bad" about Dual Proxy. So, be careful that you're sure about this.

Jim

[helleborine]

jdMorgan,

My oh my, are we observant! ;-) Yes, it is a contination...

Thanks!

[helleborine]

I did this...

RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^Mozilla\/5.0\ \(Macintosh;\ U;\ PPC;\ en-US;\ rv:1.0.2\)\ Gecko\/20030208\ Netscape\/7.02 [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Dual\ \Proxy [NC]
RewriteRule .* - [F]

And it worked! Woo-hoo! No 500 error.

[jdMorgan]

There are several extra and several missing backslashes in those patterns. I'd suggest:

RewriteCond %{HTTP_USER_AGENT} ^Mozilla/5\.0\ \(Macintosh;\ U;\ PPC;\ en-US;\ rv:1\.0\.2\)\ Gecko/20030208\ Netscape/7\.02 [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Dual\ Proxy [NC]

or you could try quoted strings, since you are not creating or using back-refererences to the patterns:

RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02" [NC,OR]
RewriteCond %{HTTP_USER_AGENT} "^Dual Proxy" [NC]

Jim

[wilderness]

Hey Jim,

"RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02" [NC,OR]"

seems excessive to me ;)

How about?
RewriteCond %{HTTP_USER_AGENT} 7\.02$ [NC,OR]

Don

[jdMorgan]

It's a specific user he's after. Also, it's not up to me, since I'm just addressing the question as posted.

Jim

[helleborine]

Thank you, I have altered the files accordingly. This fellow I'm trying to block is a major headache...

[kgun]

Helleborine:

"I've been blocking my web stalker from viewing my websites in htaccess by blocking his specific browser/computer/os combination. Thank you all for showing me how to do this".

And that is secure?

Myself, I use three browsers, a dynamic IP adress.

But I am an amateur on this field.

[helleborine]

kgun,

luckily for me, my 'stalker' doensn't.