Block IP range?

[keyplyr]

Seems like I'm always asking this same question. Sorry, do it so seldom I forget how.

Would this:

RewriteCond %{REMOTE_ADDR} ^64\.71\.1(2-9)(89¦01)\.

effectively block this range? Thanks.

64.71.128.0 - 64.71.191.255

[keyplyr]

In addition to this range: 64.71.128.0 - 64.71.191.255
I also need to block this range: 65.19.134.0 - 65.19.134.31

Thanks

[bobothecat]

Don't feel bad, I can't remember it either - glad you asked first :)

[keyplyr]

anyone?

[keyplyr]

This is what I came up with:

RewriteCond %{REMOTE_ADDR} ^64\.71\.1(2[89]¦[3-8][0-9]¦9[01])\. [OR]
RewriteCond %{REMOTE_ADDR} ^65\.19\.134\.(0¦[12][0-9]¦3[01])$ [OR]

[Matt Probert]

If you can, use IPTABLES and block the IP range from the server, otherwise they will stil have accessed the server, and Apache will be slowing down checking *every* connection just to reject those few.

Matt

[keyplyr]

Thanks Matt but I'm hosted on a shared server.

[encyclo]

You'd be best using mod_access [httpd.apache.org] rather than mod_rewrite. It's much simpler:

Order Allow,Deny
Allow from all
Deny from 64.71.128/191
Deny from 65.19.134.0/31

(The above is untested and done from memory ;)

[keyplyr]

Thanks encyclo, however the way host is set up (load balanced apache server clusters using BSD) mod_access alters the log data, i.e. screws with the referrers. Don't ask me why.