[SOLVED] Redhat/Apache 2.2.3 - Only allow single IP to access test site?

mtlhd · 10-29-2013, 10:43 AM

Hello all,

What I am trying to do is set up a virtual host for testing grounds that only my IP address will have access to. It seems no matter how I configure the virtual host in my httpd.conf file, it sends traffic to the default apache page.

Here is my config for the virtual host:

Code:

<VirtualHost *:80>
Servername test.example.com
DocumentRoot /path/to/test
<Directory /path/to/test>
     Options -Indexes ExecCGI SollowSymLinks
     Order Deny,Allow
     Deny from all
     Allow from 123.45.67.89
</Directory>
</VirtualHost>

I don't see where I have gone wrong. If I set it to Allow from all - it works fine.
The authz_host_module is enabled and loaded.

Thank you in advance, this is becoming quite frustrating.

mtlhd

TenTenths · 10-29-2013, 11:05 AM

Try putting your "Allow from <ip>" before your "Deny from all" line.

mtlhd · 10-29-2013, 11:19 AM

TenTenths,

Thanks for chiming in, I just tested what you said and there was no change

-mtlhd

TenTenths · 10-29-2013, 11:27 AM

What I do is put the directives in a .htaccess file in the relevant folder and just use:

Code:

Order Deny,allow
Allow from <Home IP>
Allow from <Work IP>
Deny from all

and this works for me.

mtlhd · 10-29-2013, 11:38 AM

Thanks for your help TenTenths,

I set my httpd.conf Virtual host to just have the options set and AllowOverride All then pasted the code setting you posted in an .htaccess file in the test directory.
Still sends me to a apache default page.

I just don't understand why it ignores all of the settings.

-mtlhd

TenTenths · 10-29-2013, 11:39 AM

I've nothing else clever to suggest, except ensure you've the right IP address, if you're accessing the site from the server then try adding 127.0.0.1 as an Allowed IP.

TenTenths · 10-29-2013, 11:42 AM

Oh yeah, and ensure you have mod_authz_host loaded.

mtlhd · 10-29-2013, 11:48 AM

when I ran httpd -M I saw authz_host_module (shared) on the list

TenTenths · 10-29-2013, 11:51 AM

Quote:

Originally Posted by mtlhd

Here is my config for the virtual host:

Code:

<VirtualHost *:80>
Servername test.example.com
DocumentRoot /path/to/test
<Directory /path/to/test>
     Options -Indexes ExecCGI SollowSymLinks
     Order Deny,Allow
     Deny from all
     Allow from 123.45.67.89
</VirtualHost>

Brain fade on my part, you're missing the </Directory> directive to close that block before the </VirtualHost>, so my guess is that your vhost isn't actually active and you're getting sent to the default site pages.

mtlhd · 10-29-2013, 11:55 AM

Sorry, I don't know why I didn't type that in there, it is actually in the conf file with a closing directory tag. Failure on my part.

TenTenths · 10-29-2013, 11:57 AM

And when you do a

Code:

httpd -S

your virtual host shows up?

Sorry, just covering all the things I can think of.

If this is on CentOS then also check your SELINUX settings and try disabling them and rebooting the server.

mtlhd · 10-29-2013, 11:59 AM

Yea, showed up on the list with all of the others.
Once again, thank you for all your assistance with this issue.

-mtlhd

John VV · 10-29-2013, 12:07 PM

Code:

<VirtualHost *:80>
Servername test.example.com
DocumentRoot /path/to/test
<Directory /path/to/test>
     Options -Indexes ExecCGI SollowSymLinks
     Order Deny,Allow
     Deny from all
     Allow from 123.45.67.89
</VirtualHost>

well that code WILL send everything TO the not Virtuall page
it sends it to the main site defined in "documentroot"

see that port 80

THAT IS THE MAIN SITE!!
that is NOT the virtual site

the normal and set BY DEFAULT is port 8080

see the old 2.2 documentation
http://httpd.apache.org/docs/2.2/
- vhost-
http://httpd.apache.org/docs/2.2/vhosts/
urlrewrite--
http://httpd.apache.org/docs/2.2/rewrite/

mtlhd · 10-29-2013, 12:32 PM

Don't understand why the port would matter...All of my other vhosts run on it
The document root declaration within the virtual host is where my index file resides for the testing site. All of the other virtual hosts on this server are setup the same way and work.

The only difference with this test site is I am trying to deny traffic from the outside world and only give access to my ip address.

When I comment out:

Code:

Allow from 123.45.67.89

And change it to:

Code:

Allow from all

It works without any issue on port 80.

I don't know why, but but that very line breaks it. It then sends to the default page.

-mtlhd

mtlhd · 10-29-2013, 01:39 PM

I'm not sure why, maybe it's the apache version, but on my home testing server (debian:apache 2.2.16) it worked fine.
On the production server (RHEL:2.2.3) it will not work.

-mtlhd