what the heck,

I put this in my .htaccess file at the webroot

<Limit GET>
order allow,deny
deny from .badguy.com
allow from all
</Limit>

but it bans everyone. I tried only:

order allow,deny
deny from .badguy.com
allow from all

same result. Why are all connections denied? I'm sure I have the syntax right, I only want to ban a few sources.

 

Try using this as a guideline:

From URL:
www.acm.uiuc.edu/webmonkeys/authentication/advanced_limit.html

Pay attention to the ordering of the 'allow' and the 'deny' lines.

And make sure your 'AllowOverride' directive is set for ALL. See Apache docs:

http://httpd.apache.org/docs/2.0/mod/core.html#allowoverride