[cobalt-users] Re: Blocking IP's

[David Gilbert <davidgilbert@xxxxxxxxx>]

Hi James,

You could modify your .htaccess to deny the ip address.
Here's an example:

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName AllowLocalAccess
AuthType Basic

order deny,allow
deny from all
allow from .host.com

You should also report the incident to the offending persons isp.

Good luck

James wrote:
I need to block an IP of someone that keeps using some script to try
and use brute force to get into a directory that has authentication
on it using .htaccess.

I checked the archives and they suggest to add the IP address to
hosts.deny.

This does not appear to work as they can still get in.

Do I have to restart inetd after I make the change or is there a better
way?