UNIX for Dummies Questions & Answers

I've got a problem site that I need to block all referrers, but if possible, I'd really like to ban all ip's at the same time so that they can't figure out a way around it.

Any ideas?

You don't say which OS we're talking about but you might be able to modify your firewall to block that IP or IP range. You can also use the /etc/hosts.deny file and put them in there.

Carl

it's apache

That's fine. Apache on what?

Some OS's (like Linux or BSD) have firewalls as part of the default installation. You can set up a quickie firewall rule to block the IP address.

OpenBSD firewall example from my web server:

Code:

# cat /etc/pf.conf
# External interface and address
ext_if="vr0"
ext_ad="xx.xx.xx.xx/32"

# in general, block all incoming connections
block in on $ext_if

# block all net idiots
block in quick on $ext_if inet proto tcp from [badipaddr] port = 80

# let all outbound traffic go
pass out quick on $ext_if inet from ($ext_if) to any flags S/SA keep state

# let everyone else access the web server
pass in quick on $ext_if inet proto tcp from any to ($ext_if) port = 80 flags S/SA modulate state

I believe you can use your /etc/hosts.deny file to block access to your web server. As you can see, I use my firewall for that so I'd have to do a little search before I could present an example for you. Try googling on hosts.deny.

Oh and of course, don't use my pf.conf file without knowing what every rule does. I've clipped out a bunch of rules so I can show you a little example.

Carl

duh.. i'm on linux

What I want to do is verify if they're coming from said domain, than automatically ban them but with the biter being that their ip gets stored for further blocking so that they don't just try coming in without a referrer or a different referrer.

Am I making sense? I might not be because I'm unfamliar with it all. What I have read is using the htaccess file in combination with the cgi-bin. Have you heard of that?