Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of apache-users@m.gmane.org
 designates 80.91.229.12 as permitted sender)
To: users@httpd.apache.org
From: Andrew Schulman <andrex@alumni.utexas.net>
Date: Fri, 19 Nov 2010 15:00:59 -0500
Lines: 11
Message-ID: <3ilde6d9ubdlsbp2la80tmd7evk1tqktcg@4ax.com>
References: <69272BBB8EE5874190F328AEBA808F1F425A1D12AD@MAVM-Exchange1.AD.dti>
 <i7jde61ar0nmf2a09m2at6pnlk2csp955a@4ax.com>
 <69272BBB8EE5874190F328AEBA808F1F425A1D12F4@MAVM-Exchange1.AD.dti>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] Re: MOD_PROXY and Access Control by IP

> Thanks Andrew, I did see this as an example on a web post.   ...the argument was made that it's a PIA when you don't match class C subnets and have to use RegEx :-)

Yes, I agree, it is a PIA.  You should see the access control file on our
production host... we have about 3000 SetEnvIf statements, just like that
one.  Ugly, and you might also think it's really slow, and yet (1) it
centralizes all of the IP address matching in one place; (2) everywhere
else we just have neat Allow from env= statements; and (3) I can't tell any
difference in speed.

Good luck,
Andrew.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org