bluedragonz / bad-bot-blocker

Block bad, possibly even malicious web crawlers (automated bots) using htaccess.
356 stars 91 forks source link

Make the rules compatible with Apache 2.4 with mod_authz #9

Open kijin opened 10 years ago

kijin commented 10 years ago

Hi @bluedragons,

Your bad bot list is wonderful, but unfortunately the "deny from" syntax is not compatible Apache 2.4 with mod_authz. The old syntax is supported by mod_access_compat, but since that's just a compatibility layer, not all Apache 2.4 servers will have it installed by default.

I made some changes to make the rules work with mod_authz. Thanks to a trick found by the Drupal folks a while ago, it also works with earlier versions of Apache.

One problem is that SetEnvIf does not take CIDR ranges, so the Cyveillance ranges had to be translated into clunky regexps. This seems to work fine in my testing, but it's a bit ugly.

Thanks.

KS