title: How do you block ip addresses inside of apache dynamically?
body: <p>I'm using a load balancer in front of my web servers which means all connections come from 192.168.x.x (or other internal lan segment). My users will all display their original ip address in the x-forwarded-for header. I'm attempting to ban users (ip addresses) dynamically so I can automatically / quietly blacklist without manual admin intervention.</p>
  
  <p>Currently, I do this manually with htaccess rules. Automatically blocking users at the application level is not acceptable.</p>
  
  <p>Are there any apache modules or methods which will read an ipset list, database, or other to allow me to automatically deny users based on the x-forwarded-for header? </p>