You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Zak Mc Kracken <za...@yahoo.it> on 2004/10/14 14:57:06 UTC

[users@httpd] Complex Access Configuration

Hello,

I would like to establish a rather complex access schema:


IP a1, a2, a3, ... an are allowed to access the HTTP server
IP b1, b2, ... bm     are allowed only if they come via SSL
any other IP is forbidden

The reason for such a config is that bi IPs belongs to wireless stations 
and I don't want clear traffic outside.

Is it possible to do? How? I read docs, but I wasn't able to understand 
a suitable set of rules.

Thanks in advance for the Help

Marco



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Complex Access Configuration

Posted by Joshua Slive <js...@gmail.com>.
On Thu, 14 Oct 2004 14:57:06 +0200, Zak Mc Kracken <za...@yahoo.it> wrote:
> Hello,
> 
> I would like to establish a rather complex access schema:
> 
> IP a1, a2, a3, ... an are allowed to access the HTTP server
> IP b1, b2, ... bm     are allowed only if they come via SSL
> any other IP is forbidden
> 
> The reason for such a config is that bi IPs belongs to wireless stations
> and I don't want clear traffic outside.
> 
> Is it possible to do? How? I read docs, but I wasn't able to understand
> a suitable set of rules.

You use ordinary Order/Deny/Allow directives as discussed in the
mod_access docs, but put the Allow directives for the b addresses only
in the ssl <VirtualHost> section, while the ones for the a addresses
can go both in the the ssl and non-ssl <VirtualHost>.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org