Are the .htaccess necessary for Nuke Sentinal?

redmanu · New Member Joined: Nov 06, 2008 Posts: 13

Are the .htaccess necessary for Nuke Sentinal to work correctly?
However, my free.fr host i think does not allow the .htaccess files on their systems. Would I still have some degree of protection without the .htaccess files?

I have Ravennuke 2.30 fesh install.
I dont have HTTPAuth
My .htaccess is

Code:

# 'Options +FollowSymLinks' is required for use of mod_rewrite.
# Can be commented out if causes errors, see notes above.
Options +FollowSymLinks

# 'Options +Includes' is required for use of Server Side Includes (SSI), such as custom error pages (like 403.shtml).
# Can be commented out if causes errors, see notes above.
Options +Includes

# -------------------------------------------
# Set search order for index files
# -------------------------------------------
# DirectoryIndex index.php index.htm index.html

# -------------------------------------------
# For better performance set FileETag to NONE base on recommendations from
# http://developer.yahoo.net/blog/archives/2007/07/high_performanc_11.html
# -------------------------------------------
# FileETag none

# -------------------------------------------
# Only process if mod_expires is installed
# For faster load times cache certain types of files for specific amount of time
# You should adjust these settings based upon your caching requirements
# -------------------------------------------
# <IfModule mod_expires.c>
# ExpiresActive On
# # ExpiresDefault A86400
# ExpiresByType image/x-icon "access plus 1 month"
# ExpiresByType text/css "access plus 5 minutes"
# ExpiresByType image/gif "access plus 1 month"
# ExpiresByType image/png "access plus 1 month"
# ExpiresByType image/jpeg "access plus 1 month"
# ExpiresByType text/plain "access plus 15 minutes"
# ExpiresByType application/x-shockwave-flash "access plus 1 month"
# ExpiresByType video/x-flv "access plus 1 month"
# ExpiresByType application/pdf "access plus 1 month"
# ExpiresByType text/html "access plus 5 minutes"
# ExpiresByType text/javascript "access plus 5 minutes"
# ExpiresByType application/x-javascript "access plus 5 minutes"
# </IfModule>

#-------------------------------------------
# Start of NukeSentinel(tm) admin.php Auth
#-------------------------------------------
#<Files .staccess>
# deny from all
#</Files>

#<Files admin.php>
# <Limit GET POST PUT>
# require valid-user
# </Limit>
# AuthName "Restricted by NukeSentinel(tm)"
# AuthType Basic
# AuthUserFile /mnt/146/sdb/a/c/myusername/.staccess
#</Files>
#-------------------------------------------
# End of NukeSentinel(tm) admin.php Auth
#-------------------------------------------

# -------------------------------------------
# If you use TegoNuke(tm) ShortLinks with RavenNuke(tm) then copy your ShortLinks.htaccess file/rules below inbetween
# the <IfModule> and </IfModule> tags.
# Only process if mod_rewrite is installed
# -------------------------------------------
# <IfModule mod_rewrite.c>
# # TegoNuke(tm) ShortLinks - ShortLinks.htaccess file/rules should go after this line
# </IfModule>

# -------------------------------------------
# Error Document Redirects
# TegoNuke(tm) ShortLinks - ShortLinks.htaccess file MUST be before these directives (See above).
# If you add a new error redirect then you need to add the corresponding xxx.php file to modules/ErrorDocuments/
# Format:
# ErrorDocument xxx /PATH_TO_ERROR_DOCUMENT_RELATIVE_TO_WEB_SERVER_DOCUMENT_ROOT
# -------------------------------------------
ErrorDocument 400 /modules.php?name=ErrorDocuments
ErrorDocument 401 /modules.php?name=ErrorDocuments
ErrorDocument 403 /modules.php?name=ErrorDocuments
ErrorDocument 404 /modules.php?name=ErrorDocuments
ErrorDocument 406 /modules.php?name=ErrorDocuments
ErrorDocument 500 /modules.php?name=ErrorDocuments

# -------------------------------------------
# Start of NukeSentinel(tm) DENY FROM area
# -------------------------------------------

If uncomment any think my site dont work anymore.
Sorry for my bad english.
Thx!

Guardian2003 · Site Admin Joined: Aug 28, 2003 Posts: 5823

You need to calify with you host whether you can use htaccess or not.
It may be that you can use htaccess but not some specific directives.

Nuke Sentinel writes blocked IP's to htaccess so abd IP's do not get any further in to your site but NS will block them manually any way - so to anwser your question, yes you can use NS even if you cannot use htaccess (it is just better if you can).

Susann · Posted: Fri Nov 14, 2008 3:49 am

Works without .htaccess too. You just have no additional protection for the admin and you can´t write and ban via .htaccess.Beneed this you can´t use a lot of other features.
If you rename htaccess and staccess it should still work.
But without the power of .htaccess I really would try to find a better host e.g. ravenwebhosting.com

redmanu · New Member Joined: Nov 06, 2008 Posts: 13

Quote:

Beneed this you can´t use a lot of other features.

as an example? you can say to me which features i cannot use?

Thank you all!

Susann · Posted: Fri Nov 14, 2008 7:58 am

Guardian sorry I didn´t saw your reply.
You can´t use your own rules without .htaccess.
Therefore no search engine friendly links, no bans at server level and much more.
Quess you will get hacked within a short time without additional protection.