Re: "secure" minimal DNS

[Rob Hartill <ro...@imdb.com>]

Thanks for the patch, I'm forwarding it now to the developers list
for consideration.

cheers,
rob

Margarita Suarez wrote:
>
>when you turn HostnameLookups off in apache_1.1.1, unfortunately, the
>hostnames in the access.conf and .htaccess files do not match.  we have
>patched apache to look up hostnames as necessary when it is checking
>against the access files, regardless of whether HostnameLookups are on
>and off.  to be extra safe, we compile apache with MAXIMUM_DNS on.  this
>way we can get the performance game of MINIMAL_DNS while doing reverse
>DNS lookups whenever there is a question of access.
>
>i am attaching a uuencoded patch file to this message.
>
>Margarita Suarez <ma...@columbia.edu>                 Columbia University
>http://www.columbia.edu/~marg/              Academic Information Systems
>212-854-5434, fax 212-662-6442                        UNIX Systems Group
>
>
begin 660 SECURE_REMOTE_HOST.patch
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,=&5H;W-T6S!=*2D*
 
end