Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of carmel_ny@hotmail.com
 designates 65.55.111.101 as permitted sender)
Message-ID: <BLU0-SMTP695161FCA538F07DA3D83393CC0@phx.gbl>
Date: Mon, 14 Mar 2011 14:12:01 -0400
From: Carmel <carmel_ny@hotmail.com>
To: users@httpd.apache.org
Reply-To: users@httpd.apache.org
Organization: seibercom.net
Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAJFBMVEUeH4oAAI3//v8LDHmw
 s8gyNZ/b3ej7+vn+/v////+PjIc8Plaj/TnQAAACNElEQVQ4jaXUvW/aQBQAcFtKGZLFT+YY
 3D1SR9SKoRMncE3IggU4kicGi1JYOgQwyYrgnLlSzhsoNkTuVJEp+ef6ztiAoV3aJ+QPfufn
 s987S/5fQvoXYPjztmfc514Ks+5JfGUCfrzt4+VabF+jwEV4DGEXN8N4p16sPLxHX07/V3qX
 yfF5D2H6K4V8j9NkyAphvkjBembD5PDFk3zeTzP1jcksyaV9w+d4ELmUoOp8N2p8uQVyhTAT
 uawnKNH2mie5lJp48mscUcbJUvg0mR6APwAoye9AMyWozY4gAh0vcxa5FJ4TKCuODESWtfkB
 8AEQSupUXNIYH8FSC2w8X3eMBNbbVJpJ7MgECO5yJ9DUEWCYkzNAlsRsgwLQ1GkWqELbkDOh
 1bUzoHagYkNh9MXlK/MQoA42gTxz2bhPM2DJedm8MZx6cNfJgEZJ5cmwPp5FZ/Ye8O2qTrFV
 dgOrHkZRBoheJiGrRquwAhnQ6GeTePPerWVmQelAQ5lwNqtvQd2lcooAV74/zR1BIRS19fy5
 ru+B/8ReW9pYKMPjt609zDaitHHTGOO+Zu7gHvsKE7XbeE1QVuJXomIFuZgUJdXQdhpqEELc
 /e8RLjfi+cQ01yMdWot8UcCVxEWHEkcUrsDGuhaIEoM9kfgAR6jxHcmEV7tNURAl8KTHN9iF
 McKGFHGO62O62UMpbmlVuogQ7ndL8zXCiLeBy3xpfrqaXS/+AHDG4o8AvhuPeezD/3xL/hy/
 Adjlg2odglF2AAAAAElFTkSuQmCC
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Subject: [users@httpd] Configuring <Limit GET HEAD POST> in httpd.conf file.

I apologize if this has been answered before. I have had a running
Apache server now for several months. I am constantly getting bombarded
with attempts by IPs from China trying to gain access to my network.
I do not need users from China to have access to my server. I would like
to use something like the list that follows to stop it. Unfortunately,
I am not sure exactly where in my httpd.conf file I should put this so
it works correctly. I have a very basic conf file and am not using
virtual users although I do have SSL working.

This list originates from: <http://www.countryipblocks.net/>

<Limit GET HEAD POST>
order allow,deny
# Country: CHINA
# ISO Code: CN
# Total Networks: 1,927
# Total Subnets:  308,311,808
deny from 1.12.0.0/14
deny from 1.24.0.0/13
deny from 1.45.0.0/16
deny from 1.48.0.0/15
#more entries
#
allow from all
</Limit>

Thanks!

-- 
Carmel ✌
carmel_ny@hotmail.com

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
__________________________________________________________________

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org