Return-Path: 
 <users-return-31485-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 53813 invoked by uid 500); 21 Aug 2003 02:54:40 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
list-post: <mailto:users@httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 53739 invoked from network); 21 Aug 2003 02:54:37 -0000
Received: from ms-smtp-03.southeast.rr.com (24.93.67.84)
  by daedalus.apache.org with SMTP; 21 Aug 2003 02:54:37 -0000
Received: from noel770 (cae88-16-024.sc.rr.com [24.88.16.24])
	by ms-smtp-03.southeast.rr.com (8.12.5/8.12.2) with SMTP id h7KMFtig005900
	for <users@httpd.apache.org>; Wed, 20 Aug 2003 18:15:56 -0400 (EDT)
Message-ID: <000f01c36768$ddcf35b0$0701a8c0@noel770>
From: "Noel J. Bergman" <noel@devtech.com>
To: <users@httpd.apache.org>
References: <NBBBJGEAGJAKLIDBKJOPGEFDDIAB.noel@devtech.com>
 <Pine.WNT.4.56.0308200854250.1296@bronfman504>
Date: Wed, 20 Aug 2003 18:17:37 -0400
Organization: DevTech
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
Subject: Re: [users@httpd] How to allow from non-reversible host name?

Joshua,

"Joshua Slive" <joshua@slive.ca> suggested:

> On Tue, 19 Aug 2003, Noel J. Bergman wrote:
>
> > OK, I know how to do:   allow from <dotted IP address>
> > and I know how to do:   allow from <domain suffix string>
> > but how do I do:        allow from <non-reversible host by name>
> >
> > Apparently, the allow from mydomain.tld works by taking the requester's
IP
> > address and doing a reverse lookup to get the domain, and then doing a
> > string match.  What I want is for httpd to lookup the IP address of the
> > symbolic name I provide, and do an exact match against the IP returned.
>
> I agree that this doesn't look possible.  It also doesn't seem all that
> desirable as a general feature.  The obvious way to do this of course is
> to simply substitute the IP addresses yourself, or use a configuration
> preprocessor to substitute them if you need it done automatically.
>
> Perhaps if you explained why you don't want to substitute the IP
> addresses, someone might have an idea of how to address your problem.

The use case is simple and not uncommon: a client domain mapped via a
dynamic DNS service to a dynamic IP.  The reverse lookup for the IP is
typically something useless like zzz-yyy-xxx-www.network.net.  For example:

   sliva.dyndns.org => 67.68.200.12
   67.68.200.12    => Toronto-HSE-ppp3774669.sympatico.ca

Seems to me that this can be addressed by something using

  ... if IP == IP of sliva.dyndns.org set let_me_in ...
  Allow from env=let_me_in

So then what is the cleanest and most efficient way to set the environment
variable?

    --- Noel

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org