Topic: Deny not allowed here, mode_geoip & Apache 2.4

[sambache]

Hello all,

still new to apache and working my way through. Like to use mode_geoip to block certain countries.

The module tries to load but when running httpd -S I get an error saying Deny not allowed here.

Blocking server wide I have the following in httpd.conf

<IfModule geoip_module>
GeoIPEnable On
# Specify full path to the database here
# File and Caching Directives
# Use only one database
GeoIPDBFile C:/apache24/bin/GeoIP.dat MemoryCache
GeoIPOutput Env
# Blocking a client based on country
SetEnvIf GEOIP_COUNTRY_CODE CN BlockCountry
SetEnvIf GEOIP_COUNTRY_CODE RU BlockCountry
# Blocking a client based on continent
SetEnvIf GEOIP_CONTINENT_CODE AF BlockContinent
SetEnvIf GEOIP_CONTINENT_CODE AS BlockContinent
SetEnvIf GEOIP_CONTINENT_CODE SA BlockContinent

Deny from env=BlockCountry
</IfModule>

Changing Deny from to Require all denied gave me the same error, just saying Require all not allowed

What I am doing wrong or missing here ?
If one of you could helpl me out, would be awesome.

Thank you
Johannes

[glsmith]

order, allow, deny, require and satisfy and not allowed in a global context. Only inside <Directory> or .htaccess files.

See the "Context" in the box at the top of each of these directives in the docs.