Quick way to restrict access to Apache HTTPD

introuble · 09-27-2006, 01:45 PM

I'm running Apache HTTPD v1.3 and I would like that only localhost, ip1 and ip2 can be able to access it. I've tried something like:

Code:

ALL: localhost: allow
ALL: ip1: allow
ALL: ip2: allow
ALL: ALL: deny

in /etc/hosts.allow but it doesn't seem to have any effect. Any suggestions?

Dutch Master · 09-27-2006, 02:06 PM

Put

Code:

ALL: LOCAL
ALL: <ip-adress-1>
ALL: <ip-adress-2>

in /etc/hosts.allow and

Code:

ALL: PARANOID

in /etc/hosts.deny. Keep in mind that hosts.allow is processed *before* hosts.deny.

One more thing: consider changing to Apache 2, as 1.3 is getting older and thus more vulnerable.

introuble · 09-28-2006, 11:33 AM

Doesn't work. An empty /etc/hosts.allow and "ALL: PARANOID" or "ALL: ALL" in /etc/hosts.deny doesn't seem to have any sort of effect.

mastrboy · 09-29-2006, 03:15 AM

you could configure this at apache's config file:

Eksample:

Code:

<directory />
order allow, deny
allow from 127.0.0.1
allow from 192.168.0.1
allow from 192.168.0.2
deny from all
</directory>

something like that, or you could do it in iptables http://www.linuxguruz.com/iptables/h...niptables.html