Deny access to alias for certain domains

bentman78 · 05-19-2009, 02:18 PM

I have apache 2 running. I have a couple of aliases like /webmail and /phpmyadmin..etc..etc

I have multiple domains on my server. I don't want every domain to be able to access every alias.

For example, I have:
www.domain1.com/webmail
www.domain1.com/phpmyadmin
www.domain1.com/admin
www.domain2.com/webmail.

Webmail points to a webmail program but phpmyadmin and /admin point to other tools obviously. How do I go about denying those aliases from certain domain but not others?

archangel_617b · 05-19-2009, 02:35 PM

IIRC you can just configure the Aliases within the VirtualHost... I don't know that you can white-list/black-list Aliases for some sub-set of your virtual hosts. Does that help?

- Arch

bentman78 · 05-19-2009, 04:26 PM

Quote:

Originally Posted by archangel_617b

IIRC you can just configure the Aliases within the VirtualHost... I don't know that you can white-list/black-list Aliases for some sub-set of your virtual hosts. Does that help?

- Arch

I see,
what about putting .htaccess files in the alias directories and rewrite according to http referrer?

archangel_617b · 05-19-2009, 04:38 PM

Quote:

Originally Posted by bentman78

I see,
what about putting .htaccess files in the alias directories and rewrite according to http referrer?

Or the HTTP_HOST. Sounds like it would work to implement blacklist / whitelist by domain.

- Arch

anomie · 05-21-2009, 01:52 PM

Quote:

Originally Posted by archangel_617b

IIRC you can just configure the Aliases within the VirtualHost

IMO, that would be the clean way to handle the situation. Alias is legitimate within a virtual host context, so just define it there and it won't mean anything outside of that virtual host. (You'll want to test that, of course.)