I just switched from Apache2 prefork to worker and some strange problems with .htaccess, one of which is that suddenly all of my deny from <ip> directives in .htaccess, which I use to block hackers, bots, etc., are throwing 500 errors. my apache site config has the following:
<Directory /home/me/www/>
Options FollowSymLinks ExecCGI
AllowOverride All
Order allow,deny
allow from all
</Directory>
and then I just add lines like this:
deny from 111.222.333.444
to .htaccess; it was working in prefork, and I guess it's still 'working', since a 500 error means they probably can't access the site, but OSSEC doesn't like it, sending me emails on every 500 error. Is there any reason why it is throwing 500 errors instead of 403 errors?