On Sun, Mar 30, 2008 at 12:15 PM, Grant Peel <[EMAIL PROTECTED]> wrote:
>
>
> Hi all,
>
> As mentioned in previous emails, I am trying to deny access via SetEnvIf
> statements in my httpd.conf (to block smap bots / email harvesters etc.
>
> I have two questions:
>
> 1. My server has several hundred VirtualHost directives. When the SetEnvIf
> statements are just placed in the main server config, will the block those
> referrers from the VirtualHosts as well?

Yes, if placed in a <Directory> or <Location> section that is not
overridden inside the <VirtualHost>s. See:
http://httpd.apache.org/docs/2.2/sections.html#mergin

>
> 2. How can I set logging to see if SetEnvIf statements are doing what I
> intended them to do?

For your access log, use a log format that reports the user agent
(such as the combined log format). Then you can just make sure the
response code is 403 for the appropriate user agents.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to