allowing dynamic ip with dnsalias to access apache

We need to allow clients with dynamic ip to access a apache web server,
but we cannot use login/passwd as these people should not access the
web server outside a certain fixed location which unfortunately due to
policy of ISP to not allocate fixed ip address to our multiple dsl
connections.

Any idea/hint on where (if possible) to look in apache conf?

On 13 Apr 2005 02:59:19 -0700, redoverlord <ronny@toolink.com> wrote:
> We need to allow clients with dynamic ip to access a apache web server,
> but we cannot use login/passwd as these people should not access the
> web server outside a certain fixed location which unfortunately due to
> policy of ISP to not allocate fixed ip address to our multiple dsl
> connections.
>
> Any idea/hint on where (if possible) to look in apache conf?

Possibly use "Allow from" with domain or hostnames instead of IPs, and use
dynamic DNS for the dynamic IPs. Do a web search for "dns hosting". I
use no-ip.com for dynamic DNS for my pppoe, and update it automatically
by running their dynamic update client once from /etc/ppp/ip-up (which
runs whenever pppd gets a new IP). DNS cach expire time is 60 seconds, so
updates seem to take effect immediately.

Their 'nix or Windows DNS update clients can be run as a service or daemon
to periodically update if behind NAT or proxy. Although, in that case if
PPPoE reconnects, there may be a delay recognizing the IP change until
next periodic update.

[redoverlord wrote in comp.infosystems.www.servers.unix]
> We need to allow clients with dynamic ip to access a apache web server,
> but we cannot use login/passwd as these people should not access the
> web server outside a certain fixed location which unfortunately due to
> policy of ISP to not allocate fixed ip address to our multiple dsl
> connections.

You can put hostnames into Allow from, and get users to use a dyndns
style client to keep these hostnames in sync.

Bit hacky, though - I'd be tempted to setup a vpn service for roaming
users, so that the credentials can be checked before apache gets the
requests. This will keep your configs cleaner, and give you a little
more management potential for mobile workers.



--
http://fotoserve.com/ - Prints, Slides, Posters, Mugs, T-shirts,,
Calendars, Jigsaws, Tableware, Caricatures, Greetings cards, Picture
bags, Photo Album and Book covers, Canvas Prints, tissues and more
..... from your own digital images.