Deny from env=env-variable Does not work

gnurob · January 21, 2012, 7:46pm

mod_authz_host, in conjunction with mod_setenvif, can be used to restrict access to your website based on the value of arbitrary environment variables. This is done with the Allow from env= and Deny from env= syntax.
SetEnvIf User-Agent BadBot GoAway=1
   Order allow,deny
   Allow from all
   Deny from env=GoAway     

(Above from Apache docs).

On my system, using:

SetEnvIf User-Agent Mozilla IsBad=1
Order allow,deny
Allow from all
Deny from env=IsBad

...I see that environment variable is set (using phpinfo()) but the page is still served. No errors in the Apache logs.

gnurob · January 31, 2012, 5:41pm

Still can't solve this one, although the following inside the same Directory container does:

<Files *>
order deny,allow
deny from 58.218.0.0/16 etc
</Files>