httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Montague <m...@catseye.org>
Subject Re: [users@httpd] ESTABLISHED connections
Date Fri, 13 Mar 2015 23:25:36 GMT
On 2015-03-13 19:17, el kalin wrote:
> if i have this in the
>
> <Directory "/server/doc/root">
>         Order allow,deny
>         Allow from all
>         deny from 111.10.250.188
> </Directory>
>
> how come this:
>
> tcp        0      0  ip-10-102-190-93.http  111.10.250.188.21806   
> ESTABLISHED

Your configuration says "do not serve anything from the filesystem under 
/server/doc/root to IP address 111.10.250.188".  But httpd does not know 
what the client will request, until the client connects and actually 
makes the request.  The client might ask for something else that httpd 
is allowed to serve to 111.10.250.188.

If you want to prevent the client from connecting, instead of 
restricting what the client is allowed to request after it connects, use 
a firewall.

-- 
   Mark Montague
   mark@catseye.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message