You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Joshua Slive <jo...@slive.ca> on 2006/06/01 15:17:27 UTC
Re: svn commit: r410757 - /httpd/httpd/trunk/docs/conf/extra/httpd-info.conf.in
On 6/1/06, wrowe@apache.org <wr...@apache.org> wrote:
> Add example/default allow-from for localhost, please???
> <Location /server-status>
> SetHandler server-status
> Require host .example.com
> + Allow from 127
> </Location>
I think you are looking for
Require ip 127
or something like that. But I'm not sure why it is necessary. We've
always just used .example.com here, haven't we?
Joshua.
Re: svn commit: r410757 - /httpd/httpd/trunk/docs/conf/extra/httpd-info.conf.in
Posted by "William A. Rowe, Jr." <wr...@rowe-clan.net>.
Joe Orton wrote:
> On Thu, Jun 01, 2006 at 09:17:27AM -0400, Joshua Slive wrote:
>
>>On 6/1/06, wrowe@apache.org <wr...@apache.org> wrote:
>>
>>> Add example/default allow-from for localhost, please???
>>
>>><Location /server-status>
>>> SetHandler server-status
>>> Require host .example.com
>>>+ Allow from 127
>>></Location>
>>
>>I think you are looking for Require ip 127 or something like that.
Of course, thank you...
>>But I'm not sure why it is necessary.
>>We've always just used .example.com here, haven't we?
These were;
# Order deny,allow
# Deny from all
# Allow from .your_domain.com
which is slight different than saying .example.com to someone trying
to understand these modules.
> I agree it would be better to omit it. It's misleading to say that
> 127.0.0.0/8 is sufficient to allow access from the local host anyway; on
> any IPv6-enabled host you need to allow access from ::1 too.
Require ip 127 ::1 or whatnot then? Yes, this is a good point, perhaps
using localhost makes more sense (sure folks break that dns entry, but better
that, than to fight ip local syntaxes ;-)
If consensus says ignore this issue (default to allowing the admin to look at
their local machine's status) then I'll revert this commit rather than fix.
Bill
Re: svn commit: r410757 - /httpd/httpd/trunk/docs/conf/extra/httpd-info.conf.in
Posted by Joe Orton <jo...@redhat.com>.
On Thu, Jun 01, 2006 at 09:17:27AM -0400, Joshua Slive wrote:
> On 6/1/06, wrowe@apache.org <wr...@apache.org> wrote:
> > Add example/default allow-from for localhost, please???
>
> > <Location /server-status>
> > SetHandler server-status
> > Require host .example.com
> >+ Allow from 127
> > </Location>
>
> I think you are looking for
> Require ip 127
> or something like that. But I'm not sure why it is necessary. We've
> always just used .example.com here, haven't we?
I agree it would be better to omit it. It's misleading to say that
127.0.0.0/8 is sufficient to allow access from the local host anyway; on
any IPv6-enabled host you need to allow access from ::1 too.
joe