Office Depot Inc?

[keyplyr]

205.***.90.5 - - [12/Nov/2003:08:47:17 -0800] "GET /example.html HTTP/1.0" 403 556 "http://search.msn.com/results.aspx?q=term+terms&FORM=SMCRT" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; Mozilla/4.0 (compatible; M$IE 5.5; Windows NT; Office Depot, Inc.))"

Is this Windows NT software that was purchased at Office Depot?

I block MS Office users, But it is also blocking this guy and others:

RewriteCond %{HTTP_USER_AGENT} MS.*Office [NC,OR]
RewriteCond %{REQUEST_URI} MSOffice [NC]
RewriteRule !^forbidden\.html$ - [F]

If so, I could just add an anchor like this?

RewriteCond %{HTTP_USER_AGENT} MS.*Office[b]$[/b] [NC,OR]
RewriteCond %{REQUEST_URI} MSOffice[b]$[/b] [NC]
RewriteRule !^forbidden\.html$ - [F]

Thanks

[edited by: jdMorgan at 6:52 pm (utc) on Nov. 12, 2003]
[edit reason] Masked IP address [/edit]

[jdMorgan]

> Is this Windows NT software that was purchased at Office Depot?

No, it's a user FROM Office Depot. They have added their name to "brand" their browsers.

Can't help with the pattern - I don't block MSOffice, and don't have that user-agent logged for reference.

Jim

[keyplyr]

Well, would it be logical to add the "$" (as exemplified above) so the Office Depot, Inc UA would not match RewriteCond?

Thanks

[jdMorgan]

That depends entirely on what the *two* user-agents are - the "good" and the "bad" -- You want to allow the one without permitting the other. So what does the full "MS Office" user-agent string look like?

Jim

[keyplyr]

I don't know what the full "MS Office" user-agent string looks like. I will have to wait till one comes along I guess. I just figured you would know - LOL.