ban ".NET CLR 1.1.4322"

[vacuity]

how can i ban someone who's identified e.g. by:

82.194.62.17 - - [19/Jan/2005:23:29:31 +0100] "GET / HTTP/1.1" 302 284 "http://www.referrerspammingurl.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)"

i want to ban anyone using ".NET CLR 1.1.4322", since i've noticed all it is connected to is spam.
but when i write in my .htaccess file

RewriteCond %{HTTP_USER_AGENT} ^.NET CLR 1.1.4322.* [NC,OR]

it gives me an error. how can i do it correctly? i'm not really advanced at this.

[wilderness]

how can i ban someone who's identified e.g. by:
82.194.62.17 - - [19/Jan/2005:23:29:31 +0100] "GET / HTTP/1.1" 302 284 "http://www.referrerspammingurl.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)"

i want to ban anyone using ".NET CLR 1.1.4322", since i've noticed all it is connected to is spam.
but when i write in my .htaccess file

RewriteCond %{HTTP_USER_AGENT} ^.NET CLR 1.1.4322.* [NC,OR]

I believe your better off banning the IP in this instance.
The UA quite common.

I'll provide it both ways:

RewriteCond %{HTTP_USER_AGENT} 1\.1\.4322)$ [NC,OR]

or IP;

RewriteCond %{REMOTE_ADDR} ^82\.194\.(3[2-9]¦[45][0-9]¦6[0-3])\. [OR]

Please note the "[OR]" needs removing or adding depending upon its loaction in your htaccess.
You also need to make corrections for the way the forum displays the pipe character.

Don

[vacuity]

thank you for your help.
banning IP's seems to not help in case of referrer spammers. they're changing them over and over again. and not too many people are using NT 5.2 combined with that other addition.

[Lord Majestic]

i want to ban anyone using ".NET CLR 1.1.4322", since i've noticed all it is connected to is spam.

Very unwise move -- .NET CLR 1.1.4322 will be present in any IE (90%+ of the market) that is on a machine with .NET FrameWork installed. I think this framework became part of Service Pack 2, so its very widespread -- you will ban innocent people.