Help - Search - Members - Calendar
Full Version: .Htaccess Blocking Guide
B.I.S.S. Forums > Internet Security Forum > B.I.S.S. Security Guides
evcz
"deny" rule on htaccess support only blocking from netmask/enteir ranges..

u can block 155.155.155.*

or 155.155.155/16

but u can't block 155.155.155.15-155.155.155.142 rolleyes.gif


a way to block personalized ranges maybe:

CODE
RewriteCond %{REMOTE_ADDR} ^155\.155\.155\.(1[5-9]¦[2-9][0-9]¦1[0-3][0-9]¦14[0-2])$



but a rewrite tha use a huge blocklist slow down the server a lot (i think) sad.gif

i'll make some test... to find a way to generate automatically a rewrite base htacces based on bluetack lists....

i want to see how an enormouse htaccess (1mb) slow down the server... i think it can kill it sad.gif
Darksat
Hey EVSC
I think you could block individually, I realise it makes your HTTACCESS file huge but I dont think it will affect your server performance that much, besides I cant think of a reason why you would want to block some of a c class and not the rest.
evcz
hello, i didn't fully understand your reply, btw now i'm using "phpipblocker" (you can find it in this forum) to do that work, not htaccess wink.gif
Darksat
Or do it at a firewall level if you have a firewall on your server.
Moore
The htacess file really has a lot of great uses besides just blocking IP's.

Would be good to hear back from anyone who wants to share with us what they use a htaccess file for on their server.

I am working on updating this guide with some ultimate htaccess files examples I have come across on the net.
Moore
----
Apcahe Docs:

http://httpd.apache.org/docs/2.2/howto/htaccess.html


Apache 1.3:
http://httpd.apache.org/docs/1.3/mod/mod_access.html
http://httpd.apache.org/docs/1.3/mod/core....#accessfilename

----

This page pretty much covers all the .htaccess goodness you could ever hope for :

http://perishablepress.com/press/2006/01/1...taccess-tricks/

The only stupid thing about it is the name they gave the title of the page... rolleyes.gif

----

.htaccess guides:

http://www.javascriptkit.com/howto/htaccess.shtml
http://www.clockwatchers.com/htaccess_intro.html

----
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.