httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sander Holthaus - Orange XL" <i...@orangexl.com>
Subject Re: [users@httpd] Deny HEAD Request
Date Sat, 25 Jan 2003 14:38:09 GMT
As fas as I know, you cannot do this, since Apache considers HEAD and GET as
the same. (eg. enableing GET will also enable HEAD), but I'm not quite sure.

Try
    <Limit HEAD>
    Order deny,allow
    Deny from all
    </Limit>

But what I don't understand is: http://www.mydomain.com/something.html/HEAD
Is this the actual URL they trying to request? If that so, then this has not
much to do with the HEAD-request method in HTTP. Perhaps you can give us a
few examples fro, your access-log.

Also not that there are quite a few valid sites/user-agents and bots that
use the HEAD-method. Perhaps you should look at another direction for
blocking those unwanted requests?

Kind Regards,
Sander Holthaus

----- Original Message -----
From: "Sadananda B Rai" <srai@zeomega.com>
To: <users@httpd.apache.org>
Sent: Saturday, January 25, 2003 8:23 AM
Subject: [users@httpd] Deny HEAD Request


> Hello all,
>
>          One of my site which is running on apache is getting more traffic
> from the unknown sites. I think they are trying to test validity of URLS
> using HEAD type requests block. Is there any way I can deny all HEAD type
> http requests?. I get a request like
> http://www.mydomain.com/something.html/HEAD . I tried using Location tag.
> But it didn't work for me. Can anyone please help me as the earliest....
> Thanks in advance.
>
> Sadananda B Rai
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message