This is a discussion on apache == acces.conf within the Linux Security forums, part of the System Security and Security Related category; Hello, I am experimenting with Apache and i only want acces for a few ip-adresses Linux Redhat 8 is ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hello,
I am experimenting with Apache and i only want acces for a few ip-adresses Linux Redhat 8 is my operating system and this is a part of the acces.conf file (container) <Directory /var/www/html> order deny, allow deny from all allow from 62.xxx.x.xx, xx.xxx.xx.x, xxx.x.xx.xx </Directory> I used this container in the acces.conf file and after this configuration 62.xxx.x.x. was not be able to acces my webserver I thought that only the ip-adresses could have acces on my apache-webserver after change the acces.conf file , but absolutly nobody was able to acces the webserver my firewall is very simple at te moment , it is a standard firewall under linux redhat version 8, - medium - (the startposition, i gave the www and the ftpserver acces for the firewall. before i changed my acces.conf file everone had acces whit the standard firewall. = i did not changed my firewallrules, i only changed my acces.conf file how can help me to resolve my problem. greets, M@rinu$ sorry, for my English. |
|
|||
|
Hi -
On Tue, 2 Sep 2003 18:23:09 +0200, "M@rinu$" <ftpclient@andromeda_ftp.NOSPAM.nl> wrote: > <Directory /var/www/html> > order deny, allow > deny from all > allow from 62.xxx.x.xx, xx.xxx.xx.x, xxx.x.xx.xx > </Directory> I don't use deny and allow, however I do see some syntax errors. There should not be a space between "deny," and "allow" in the "order" directive. In the "allow" directive there should not be commas, just spaces. Try it as: <Directory /var/www/html> Order Deny,Allow Deny from all Allow from 62.xxx.x.xx xx.xxx.xx.x xxx.x.xx.xx </Directory> Ken http://www.ke9nr.net/ |
|
|||
|
"Ken" <ng3122@ke9nr.#nospam#.net> wrote in message
news:2bialv0saa19k6vadc00m4eph5bsgg2edu@4ax.com... > Hi - > > On Tue, 2 Sep 2003 18:23:09 +0200, "M@rinu$" > <ftpclient@andromeda_ftp.NOSPAM.nl> wrote: > > > <Directory /var/www/html> > > order deny, allow > > deny from all > > allow from 62.xxx.x.xx, xx.xxx.xx.x, xxx.x.xx.xx > > </Directory> > > I don't use deny and allow, however I do see some syntax errors. > There should not be a space between "deny," and "allow" in the "order" > directive. In the "allow" directive there should not be commas, just > spaces. Change "order deny, allow" to "order allow, deny" and it will work. The way you have it now means that the deny rule is checked first, and since it says "deny from all", it won't even look at the allow rule at all. Juhani Mäkelä |
|
|||
|
On Thu, 4 Sep 2003 09:49:34 +0300, "Juhani Mäkelä"
<Juhani.Makela@invia.fujitsu.com> wrote: >Change "order deny, allow" to "order allow, deny" and it will work. The way >you have it now means that the deny rule is checked first, and since it says >"deny from all", it won't even look at the allow rule at all. Trying reading the documentation before making such a blatantly wrong statement. http://httpd.apache.org/docs-2.0/mod...ess.html#order Particular attention to where it says: Note that in all cases every Allow and Deny statement is evaluated. Ken http://www.ke9nr.net/ |
|
|||
|
> >Change "order deny, allow" to "order allow, deny" and it will work. The way > >you have it now means that the deny rule is checked first, and since it says > >"deny from all", it won't even look at the allow rule at all. > > Trying reading the documentation before making such a blatantly wrong > statement. > > http://httpd.apache.org/docs-2.0/mod...ess.html#order > > Particular attention to where it says: > > Note that in all cases every Allow > and Deny statement is evaluated. > > Ken > http://www.ke9nr.net/ ====================== Thanks Ken and Juhani Mäkelä that you helped me to resolve my problem whit the syntax (indeed , i made a mistake in the syntax) and the directive, it was written in a wrong order. I changed it to <Directory /var/www/html> order allow,deny allow from 62.xxx.x.xx xx.xxx.xx.x xxx.x.xx.xx deny from all </Directory> Greets, M@rinu$ |