IP separation in mod_access

How to seperate the specific IP addresses in mod_access

[dpoperngr]

I've never done a mod_access before and need to deny specific IPs access. So, if I want to catalogue them and enter each one into the mod_access how do I separate them, commas?

ie: deny from 000.00.00.0,000.01.00.0,201.200.00.0

[jdMorgan]

dpoperngr,

Welcome to WebmasterWorld!

You can use spaces to separate individual IP addresses.

Deny from 000.00.00.0 000.01.00.0 201.200.00.0

And by all means, try to use ranges when possible to combine contiguous IP addresses and keep your filesize smaller.

Jim

[dpoperngr]

jd, I've tried several syntaxes for the command and don't seem to be able to get it right because its not blocking the IPs. I've tried a continuous string seperated by spaces, stacking the IPs with carraige returns.

Both of these have not worked:

<Files *>
order deny,allow
deny from 24.97.174.130 62.245.231.130 65.165.84.11
</Files>
<Files .htaccess>
deny from all
</Files>

order deny/allow
deny from 24.97.174.130 62.245.231.130 65.165.84.11
allow from all

[jdMorgan]

How about trying the simplest format, one IP at a time?

<Files *>
Order Deny,Allow
Deny from 24.997.174.130
Deny from 62.945.231.130
Deny from 65.965.84.11
</Files>
<Files .htaccess>
deny from all
</Files>

If that does not work, contact your host and ask them if mod_access is loaded and available to you.

Note: IP addresses have been obscured.

Jim

[dpoperngr]

Thanks JD, your format is simpler in that it doesn't require a long string of IPs separated by spaces.

I'm confused, is the <file> open and closure necessary ie:
<file *>
</file>

[jdMorgan]

The <Files> containers are needed because you have defined two different cases; the ".htaccess file" case and the "all other files" case. Without the containers, mod_access would accept the last directives found, and deny access to all files.

Jim

[dpoperngr]

jd, the * is a substitute for "all" right?

[jdMorgan]

Check here: [httpd.apache.org...]

Jim