httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeremy Hilton <jeremy-l...@adtcs.com>
Subject Re: [users@httpd] Allowing real ip address
Date Thu, 27 Jan 2005 15:20:59 GMT
On 1/27/05 10:18 AM, "Ivan Belmonte" <ivan.belmonte@es.servidores.com>
wrote:

> Hi there all,
> 
> I'm new to this list. I need to prevent all IP except our local office one
> from accessing some websites.
> I'm doing with next syntax:
> 
> 
> <Directory /some/path>
>   Order Deny,Allow
>   Allow from 111.222.333.444,555.666.777.888
>   Deny from all
> </Directory>
> 
> The problem is that 111.222.333.444 and 555.666.777.888 are Proxy Cache
> addressess, and there are lots of users browsing internet through them.
> I need to block the REAL ip addresses. Is there any way to "Deny client real
> IP"?
> 
> Lots of thanks in advance.
> 
> ----
> 
> Iván Belmonte
> Director de sistemas
> 
> Servidores.com
> Tel: +34 902 999 652  Ext. 121
> Fax: +34 932 268 472
> ibelmonte@servidores.com - http://www.servidores.com
> Servidores.com es un servicio de Hostbin S.L.U
> 
> 
> ----
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>  "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 

First you have your rules reversed.

You have allowed to addresses, then denied all, effectively overridding your
previous allow rule.

You first should deny then allow

Order Allow, Deny
Deny from all
Allow from 111.222.333.444,555.666.777.888

Jeremy


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message