apache - ACL lists

clue_less · 11-08-2007, 02:11 AM

On RHEL-4:
How to configure a private website that is only accessible to hosts on my internal network using apache's acl lists?

Much thanks,
clue_less

brianmcgee · 11-08-2007, 03:58 AM

Also on non RHEL Apache setups:

Code:

<VirtualHost>
...
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
Allow from .example.com
...
</VirtualHost>

This will allow connections to the vhost from the domain .example.com (you could also use an IP range) and from localhost.

clue_less · 11-10-2007, 01:25 AM

Thanks, brianmcgee.
Can you put all the options inside the Directory of the website?
What is the difference?

<Directory /var/www/html/example.com/>
...
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
Allow from .example.com
...
</Directory>

If I put an ip range inside, is it the acl?
The Red Hat Academy chapter on Virtual Host said you can put an acl inside the VirtualHost, but didn't show how.

clue_less