Allow page requests from a given server

txtoolman · 06-20-2006, 01:50 PM

I've searched til my eyes are blood-shot, but could not find, so I'll try my luck here: I'd like a particular web folder(and its subfolders) on my apache server to only accept if those pages are referred to by a given windows server. It seems that a proxy may be needed, but I haven't been able to find something online to support this. I'd appreciate any input you all can provide.

bathory · 06-20-2006, 03:38 PM

Have you try to use the deny/allow compination?

Code:

<Directory /some/proteced/dir
    Order Deny,Allow
    Deny from all
    Allow from xx.xx.xx.xx
</Directory>

You can also use a .htaccess with the above inside it.

Regards

txtoolman · 06-20-2006, 03:43 PM

I don't think that will work. I experimented with that. I think I may be close to what I need to do. Using rewrite statments, I need to check and see if the HTTP_REFERER is = to a particular URL. If not, then use the rewriterule (with flag 'F') to forbid access. I have programming experience, but have never dived into these waters. Any helpers out there ???

bathory · 06-20-2006, 04:08 PM

If you want to allow access based on http-referer then take a look at the last example here

txtoolman · 06-20-2006, 04:52 PM

I've started looking at those docs. This is my first venture into this area, so I was hoping someone might be able to offer some sample code as a guide. Also, I'm using apache 2. Thanks for the input.

txtoolman · 06-21-2006, 08:55 PM

After my eyes healed, I finally found a tutorial online that was very similar to what I was looking for. Here is the code that worked:

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://server1.com.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://server2.com.*$ [NC]
RewriteRule ^.*$ - [F]

This rule tells apache that if the referer is not one of these two servers, forbid access.