apache == acces.conf

This is a discussion on apache == acces.conf within the Linux Security forums, part of the System Security and Security Related category; Hello, I am experimenting with Apache and i only want acces for a few ip-adresses Linux Redhat 8 is ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 09-02-2003
M@rinu$
 
Posts: n/a
Default apache == acces.conf

Hello,

I am experimenting with Apache and i only want acces for a few ip-adresses

Linux Redhat 8 is my operating system
and this is a part of the acces.conf file (container)

<Directory /var/www/html>
order deny, allow
deny from all
allow from 62.xxx.x.xx, xx.xxx.xx.x, xxx.x.xx.xx
</Directory>


I used this container in the acces.conf file and after this configuration
62.xxx.x.x. was not be able to acces my webserver

I thought that only the ip-adresses could have acces on my apache-webserver
after change the acces.conf file , but absolutly nobody was able to acces
the webserver

my firewall is very simple at te moment , it is a standard firewall under
linux redhat version 8, - medium - (the startposition, i gave the www and
the ftpserver acces for the firewall.
before i changed my acces.conf file everone had acces whit the standard
firewall.
= i did not changed my firewallrules, i only changed my acces.conf file

how can help me to resolve my problem.

greets,
M@rinu$

sorry, for my English.







Reply With Quote
  #2 (permalink)  
Old 09-03-2003
Ken
 
Posts: n/a
Default Re: apache == acces.conf

Hi -

On Tue, 2 Sep 2003 18:23:09 +0200, "M@rinu$"
<ftpclient@andromeda_ftp.NOSPAM.nl> wrote:

> <Directory /var/www/html>
> order deny, allow
> deny from all
> allow from 62.xxx.x.xx, xx.xxx.xx.x, xxx.x.xx.xx
> </Directory>


I don't use deny and allow, however I do see some syntax errors.
There should not be a space between "deny," and "allow" in the "order"
directive. In the "allow" directive there should not be commas, just
spaces.

Try it as:

<Directory /var/www/html>
Order Deny,Allow
Deny from all
Allow from 62.xxx.x.xx xx.xxx.xx.x xxx.x.xx.xx
</Directory>

Ken
http://www.ke9nr.net/
Reply With Quote
  #3 (permalink)  
Old 09-04-2003
Juhani Mäkelä
 
Posts: n/a
Default Re: apache == acces.conf

"Ken" <ng3122@ke9nr.#nospam#.net> wrote in message
news:2bialv0saa19k6vadc00m4eph5bsgg2edu@4ax.com...
> Hi -
>
> On Tue, 2 Sep 2003 18:23:09 +0200, "M@rinu$"
> <ftpclient@andromeda_ftp.NOSPAM.nl> wrote:
>
> > <Directory /var/www/html>
> > order deny, allow
> > deny from all
> > allow from 62.xxx.x.xx, xx.xxx.xx.x, xxx.x.xx.xx
> > </Directory>

>
> I don't use deny and allow, however I do see some syntax errors.
> There should not be a space between "deny," and "allow" in the "order"
> directive. In the "allow" directive there should not be commas, just
> spaces.


Change "order deny, allow" to "order allow, deny" and it will work. The way
you have it now means that the deny rule is checked first, and since it says
"deny from all", it won't even look at the allow rule at all.

Juhani Mäkelä


Reply With Quote
  #4 (permalink)  
Old 09-05-2003
Ken
 
Posts: n/a
Default Re: apache == acces.conf

On Thu, 4 Sep 2003 09:49:34 +0300, "Juhani Mäkelä"
<Juhani.Makela@invia.fujitsu.com> wrote:

>Change "order deny, allow" to "order allow, deny" and it will work. The way
>you have it now means that the deny rule is checked first, and since it says
>"deny from all", it won't even look at the allow rule at all.


Trying reading the documentation before making such a blatantly wrong
statement.

http://httpd.apache.org/docs-2.0/mod...ess.html#order

Particular attention to where it says:

Note that in all cases every Allow
and Deny statement is evaluated.

Ken
http://www.ke9nr.net/
Reply With Quote
  #5 (permalink)  
Old 09-07-2003
M@rinu$
 
Posts: n/a
Default Re: apache == acces.conf




> >Change "order deny, allow" to "order allow, deny" and it will work. The

way
> >you have it now means that the deny rule is checked first, and since it

says
> >"deny from all", it won't even look at the allow rule at all.

>
> Trying reading the documentation before making such a blatantly wrong
> statement.
>
> http://httpd.apache.org/docs-2.0/mod...ess.html#order
>
> Particular attention to where it says:
>
> Note that in all cases every Allow
> and Deny statement is evaluated.
>
> Ken
> http://www.ke9nr.net/


======================

Thanks Ken and Juhani Mäkelä
that you helped me to resolve my problem whit the syntax (indeed , i made a
mistake in the syntax)

and the directive, it was written in a wrong order. I changed it to

<Directory /var/www/html>
order allow,deny
allow from 62.xxx.x.xx xx.xxx.xx.x xxx.x.xx.xx
deny from all
</Directory>

Greets,
M@rinu$



Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 11:42 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0