.htaccess problems

... and massive referrer log spam problem

[trillianjedi]

Hi,

I hope somewhere here can tell me why this just doesn't seem to be working:-

order deny,allow
deny from some.spam.er
allow from all

Where the IP is appearing in logs as (examplified):-

host-12-12-12-12.some.spam.er

I have over 100 Apache threads running for this guy who is intent on spamming my membership base (he won't succeed anyway).

The IP range in there varies (this guy has too many IP's for me to block one at a time).

Is the IP being spoofed perhaps?

Thanks,

TJ

[trillianjedi]

OK, I'm officially stumped, I can't even get an IP or IP range block to work.

Any idea on what I'm doing wrong, or is this just totally unstoppable?

order deny,allow
deny from 10.10.10.*
deny from 10.10.10.10
allow from all

Just doesn't do a thing.....

I've tracked the IP's to a server hosting co. in Australia.

Is it worth reporting to anybody? Police? I've wasted about 6 hours on this problem today...

TJ

[Birdman]

I believe you need to reverse the order.

From: mod_access [httpd.apache.org] (in the "Order" section)

Deny,Allow
The Deny directives are evaluated before the Allow directives. Access is allowed by default. Any client which does not match a Deny directive or does match an Allow directive will be allowed access to the server.

Try:

order Allow,Deny
Allow from all
Deny from some.spam.er

Hope that gets you fixed up :) Cheers!

[jdMorgan]

TJ,

Order is backwards, 10.10.10.* is invalid syntax, and the directives are mis-capitalized.

Try:

Order Allow,Deny
Deny from 10.10.20.0
Deny from 10.10.10.
Deny from 123.456.78.9/16
Deny from 123.456.0.7/255.255.255.0
Allow from all

The first form is a single specific IP address.
The second is a partial IP, covering 10.10.10.0 - 10.10.10.255
The third is a network/CIDR specification covering 10.10.0.0 - 10.10.255.255
The last is a network.netmask pair covering 10.10.10.0 - 10.10.10.255

Ref: [httpd.apache.org...]

Jim

[edit] Thanks, Birdman! [/edit]

[trillianjedi]

I don't believe it, it's working!

Thanks guys - you're brilliant.

I was in such a bad mood earlier - apologies to anyone here if I bit your head off!

Thanks!

TJ