Hello,

I am looking to apply ACLs on my machine here. I have set up a VPN server on another box and want to do some restriction maybe through hosts.deny, hosts.allow, or something similar maybe just using iptables.

Basically what I want is this:

ALL services Denied to all hosts except those on my subnet (VPN).

BUT

port 80 (a single virtual server to display information saying "did you remember to log into the vpn stupid?")

I tried creating this in hosts.allow, but all access is still granted. I also tried in hosts.deny and it did not restrict access.

ALL : localhost : allow
ALL : 192.168.5. : allow
#(what kind of entry would I need to allow an information webpage to all users?)
ALL : ALL : deny

I will tune the ALL : * : allow down by services, but I am just trying to get it to work first.

Any ideas?

thanks,

Maybe there is a better way to ask is this...

Is there a way to forward browsers to a certain website (on the same server) based on their IP or dns domain name?
I was thinking about doing this with virtual hosts, but am having a trouble and am currently reading some manuals.

Could this be better done with an .htaccess file?

Could this be done straight from apache?


thanks