www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dean Gaudet <dgau...@arctic.org>
Subject Re: mod_access/1248: IP based access configuration in <Location> (fwd)
Date Tue, 21 Oct 1997 20:30:00 GMT
The following reply was made to PR mod_access/1248; it has been noted by GNATS.

From: Dean Gaudet <dgaudet@arctic.org>
To: apbugs@apache.org
Cc:  Subject: Re: mod_access/1248: IP based access configuration in <Location> (fwd)
Date: Tue, 21 Oct 1997 13:26:02 -0700 (PDT)

 Ok the bug looks to be in the address parsing for addresses without '/' in
 them.  It works fine if the address is 131.188.191.4/32 (which uses
 ap_inet_addr()).  It breaks if the address is 131.188.191.4.
 
 Dean
 
 ---------- Forwarded message ----------
 Date: Tue, 21 Oct 1997 22:08:30 +0200 (METDST)
 From: Mac Schwarz <mac@aeria.phil.uni-erlangen.de>
 To: Dean Gaudet <dgaudet@arctic.org>
 Cc: Mac Schwarz <mac@aeria.phil.uni-erlangen.de>
 Subject: Re: mod_access/1248: IP based access configuration in <Location>
 
 
 On 21-Oct-97 Dean Gaudet wrote:
 >
 >
 >On Tue, 21 Oct 1997, Mac Schwarz wrote:
 >
 >> Thanks for the fast response. I tried following configuration
 >> on the www server aka adyton.phil.uni-erlangen.de aka 131.188.191.4:
 >> 
 >> ----------------------------------------------------------
 >> <Location /server-status>
 >> SetHandler server-status
 >> order deny,allow
 >> deny from all
 >> allow from 127.0.0.1 
 >> </Location>
 >> 
 >> error_log:
 >> [Tue Oct 21 14:52:35 1997] [error] Client denied by server 
 >> configuration: /usr/local/www/htdocs/server-info
 >                                      ^^^^^^^^^^^^
 >
 >Did you also try /server-status ? 
 >
 
 Just a cut'n'paste mistake. I checked both server-info and server-status
 to see if the problem is related to mod_info or mod_status.
 
 >> httpd_1.2.4 worked fine with the second configuration. Is there a
 >> new directive with a conflicting default value i missed to set?
 >
 >There shouldn't be any settings affecting this.  We did change the default
 >for HostnameLookups ... but I tried both on and off when I was testing
 >127.0.0.1.
 >
 >Ok give this a try:
 >
 >allow from 131.188.191.
 >
 >That'll allow from everything in 131.188.191.0/24 ... but it doesn't use
 >the inet_addr() C library function, maybe there's a bug in your system's
 >inet_addr. 
 >
 >Dean
 >
 _____________________________________________________________
 >Oh wait, also try: 131.188.191.4/32  -- I was wrong, "131.188.191.4"
 >doesn't use inet_addr, it uses a parsing routine I rewrote.  So if you try
 >"131.188.191.4/32" then you'll be going through the system's inet_addr
 >routine ... and it'll help isolate the problem.
 >
 >Thanks
 >Dean
 
 O.K., that could be the problem (see below). There's one patch 
 from hp affecting libinet I haven't installed yet. 
 But I've got no physical access to the web-server right now 
 (building is closed already) and I don't trust autoboot 
 enough to patch it remotely. So don't spend any time with 
 that problem until I patched the system tomorrow or the day 
 after. I'll mail you the results.
 
 <Location /server-status>
 SetHandler server-status
 order deny,allow
 deny from all
 allow from 131.188.191.
 </Location>
 
 [Tue Oct 21 22:01:53 1997] [error] Client denied by server
 configuration: /usr/local/www/htdocs/server-status
 
 <Location /server-status>
 SetHandler server-status
 order deny,allow
 deny from all
 allow from 131.188.191
 </Location>
 
 [Tue Oct 21 22:05:29 1997] [error] Client denied by server 
 configuration: /usr/local/www/htdocs/server-status
 
 <Location /server-status>
 SetHandler server-status
 order deny,allow
 deny from all
 allow from 131.188.191.4/32
 </Location>
 
 adyton.phil.uni-erlangen.de - - [21/Oct/1997:22:02:40 +0200] 
 "GET /server-status HTTP/1.0" 200 6429
 
 <Location /server-status>
 SetHandler server-status
 order deny,allow
 deny from all
 allow from 131.188.191.4
 </Location>
 
 [Tue Oct 21 22:03:13 1997] [error] Client denied by server 
 configuration: /usr/local/www/htdocs/server-status
 
 Thaks and best regards,
 
         mac Schwarz
 
 --------------------------------------------------------------
 mac Schwarz / AERIA Projekt / Inst. f. Klassische Archaeologie
 e-mail: mac@aeria.phil.uni-erlangen.de  /  Tel.: 09131-85-4791
  FAU Erlangen-Nuernberg   /   Kochstr.4   /   91054 Erlangen
   <http://www.phil.uni-erlangen.de/~p1altar/aeriahome.html>
 

Mime
View raw message