[CentOS] .htaccess file

Sun Aug 28 18:00:46 UTC 2016
Albert McCann <mac358 at newsguy.com>

> -----Original Message-----
> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On
> Behalf Of TE Dukes
> Sent: Sunday, August 28, 2016 10:36 AM

> My home system on a DSL line is getting worn out by bad behavior robots.

> Awhile back, I created a .htaccess file that block countries by IP blocks.
> Its 2MB in size.

...
> So, today, I tried following the directions for apache.org website,
> https://httpd.apache.org/docs/current/howto/htaccess.html to move the
> .htaccess

What version of CentOS are you using?

For 7.x, and I think 6.x, there is a much simpler way of doing this, using
mod_geoip from the Epel repository. 

It rejects all unwanted HTTP connections using 403 responses. Here's an
example geoip.conf file, which is what I'm using:

----
<IfModule mod_geoip.c>
  GeoIPEnable On
  GeoIPDBFile /usr/share/GeoIP/GeoIP.dat MemoryCache
  GeoIPOutput Env
# Proxies
  SetEnvIf GEOIP_COUNTRY_CODE A1 BlockCountry
#Country blocks
  SetEnvIf GEOIP_COUNTRY_CODE TR BlockCountry
  SetEnvIf GEOIP_COUNTRY_CODE IR BlockCountry
#... more countries using the two char country code
</IfModule>
----
On C7 this file goes here /etc/httpd/conf.d/geoip.conf

Make sure that /etc/httpd/conf.modules.d/10-geoip.conf loads the library
file, and is not remarked out with a #.

There is more info on mod_geoip here (but use the installation from Epel)
though:

http://dev.maxmind.com/geoip/legacy/mod_geoip2/

I run a server for personal family purposes, and use this to block many of
the places my family doesn't live...

Al McCann
Certe, Toto, sentio nos in Kansate non iam adesse.