- To: Rick Welykochy <rick@xxxxxxxxxxxxx>
- Subject: Re: [SLUG] Deny http access to a domain
- From: Sonam Chauhan <sonamc@xxxxxxxxx>
- Date: Thu Dec 7 15:13:08 2000
- Cc: kevin@xxxxxxxxxxx, Daniel Finn <finny@xxxxxxxxxxx>, slug@xxxxxxxxxxx
Rick Welykochy wrote:
> Since domains are case insensitive ...
>
> if ( $ENV{HTTP_REFERER} !~ /example.com/i )
> ----------------------------------------------^
>
Good point.
> But then again, why not put this into .htaccess or httpd.conf:
>
> Order allow,deny
> Allow from all
> Deny from .example.com
This will just block requests from hosts at example.com.
Kevin wanted to deny traffic referred from example.com.
There's really no technical solution for this, since Web surfing
is a peer-2-peer setup.
A clever user could get past this catch
by cutting and pasting the URL in the browser location bar
(instead of clicking the link on the example.com page )
Regards,
Sonam