Banning users by IP and .htaccess doesn't work because the rule are lowercase

I suppose it depends if your apache web server is case sensitive. There are ways of turning that off, but I agree, all config should be per Apache stardards: https://httpd.apache.org/docs/2.2/howto/access.html

Where the Apache documentation says:

Directives in the configuration files are case-insensitive, but arguments to directives are often case sensitive.

https://httpd.apache.org/docs/2.2/configuring.html

In this case order, allow and deny are directives and so as per the Apache documentation it shouldn’t matter what case is used. For the order directive the ordering argument also appears to be case insensitive as the documentation contain examples such as “deny,allow” and “Deny,Allow” – I suppose the documentation could have mistakes but such mistakes have been present for many years if that is the case.

So if there is a server where case matters then I would suggest that the issue lies with the server and not the .htaccess file content.

This is just based on a reading of the Apache documentation you understand and of course you are quite free to disagree and offer evidence of an alternative interpretation or perhaps newer documentation that changes this.

Regards

Any progress on this bug? I have semalt ip blocking added but they are still getting through. This may be why…

Banned users is still not working for me either. I have 217.23.7.144 (semalt) getting through every day!