htaccess correct, Apache logs still showing the evil visitors with 200 code
- by bulgin
I hope someone can help me. Please take a look at the following snippet of Apache logs:
95-169-172-157.evilvisitor.com - - [12/Nov/2012:09:46:02 -0500] "GET /the-page-I-dont-want-to-deliver.html HTTP/1.1" 200 9171 "http://hackers.ru/" "Mozilla/4.0 (MSIE 6.0; Windows NT 5.1; Search)"
I have the following included in my .htaccess for the root directory of the website and there are no other .htaccess files anywhere that would affect this:
RewriteEngine On
Options +FollowSymLinks
ServerSignature Off
ErrorDocument 403 "Nothing Interesting Here"
order allow,deny
deny from evilvisitor.com
deny from hackers.ru
deny from anonymouse.org
allow from all
I also have GeoIP functioning properly and have this included there:
#for stuff from different countries
RewriteCond %{ENV:GEOIP_COUNTRY_CODE} ^(UA|TR|RU|RO|LV|CZ|IR|HR|KR|TW|NO|NL|NO|IL|SE)
RewriteRule ^(.*)$ [R=F,L
I know this works because whenever I attempt to access the website from a proxy in say, Spain, I get the error message. I also know it works because when accessing the website from anonymouse.org, the proper error code page is displayed.
So then why am I still getting these visitors who successfully access the page I don't want them to see with an Apache 200 code when it should be an error code?
