Re: [users@httpd] Apache rewritemap condition that will CDIR-ipmatch against returned value from the map?

2020-07-01 Thread angel Hall-Coulston
Hi Wendell, I tend to use Apache configuration for blocking, a mix of hosts and also IP’s. Sometimes it’s as easy as blocking say '*.ru' as it’s highly improbable that some English company has a Russian suffix (I could be wrong of course, but if they DO they prob have a UK based website too..).

Re: [users@httpd] Apache rewritemap condition that will CDIR-ipmatch against returned value from the map?

2020-07-01 Thread Wendell Hatcher
Angel, you are the man what you did in your solution is exactly what we are trying to do block certain countries. I am leaning towards using Perl to loop through the bad ips list on a text file and then take the blocked ip match blocking similar to the solution in the link below. Can you please

Re: [users@httpd] Apache rewritemap condition that will CDIR-ipmatch against returned value from the map?

2020-07-01 Thread angel Hall-Coulston
Depends on not ’smarter thinking’ but 'out of the box' thinking… I can block a few hundred thousand IP’s with just THREE characters ! Not boasting but I have half of China and Russia blocked if not 3/4 with less than 30 characters… So I suggest (with the aid of the 'GREP' command) to ascertain w

[users@httpd] Apache rewritemap condition that will CDIR-ipmatch against returned value from the map?

2020-07-01 Thread Wendell Hatcher
Hello, I have a ipfileblocklist text file that has over 10,000 ip addresses that need to be matched against. We managed to do a RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )” on the cdir ipmatch that comes back from the F5 but there are too many single rewrite cond exprs that a