httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Angela Barone <>
Subject Re: [users@httpd] Deny by IP address unsuccessful
Date Mon, 29 Apr 2013 18:11:24 GMT
On Apr 27, 2013, at 2:25 PM, Jim Albert wrote:
> Is your .htaccess at the proper directory level with the resource you want to block?
> If there are .htaccess files at sublevels that could be your problem.
> Is .htaccess readable by your apache user?
> Is Apache configured for AllowOverride with at minimum Limit at the appropriate level?

Hi Jim,

	All excellent points, but everything is in order.

	I may have stumbled upon something.   Our ISP has CloudFlare turned on for this domain and,
after a lot of searching, it appears that CloudFlare changes the IP address of the visitor
(I may not be wording that correctly).  Using a PHP scripts, HTTP_X_FORWARDED_FOR gives me
my proper IP address while REMOTE_ADDR is blank.  Unfortunately, I still can't block myself.
 I've tried:

RewriteCond %{HTTP_X_FORWARDED_FOR} !!=
RewriteCond %{HTTP_X_FORWARDED_FOR} ^69\.163\.150\.25$
RewriteCond %{REMOTE_ADDR} !!=
RewriteCond %{REMOTE_ADDR} ^69\.163\.150\.25$

	Am I going about this all wrong?

Thank again,
View raw message