1.3 and 2.0 : Solving an 80/20 problem in the newsgroups

["William A. Rowe, Jr." <wr...@lnd.com>]

Two really simple suggestions.

What are the arguments against first changing

  ServerName localhost

and all instances of

  Allow from .your_domain.com

to

  Allow from localhost

80% of the problems that frustrate new admins seems to be the ServerName,
and Allow from localhost is more restrictive even than .your_domain.com (and
usable out of the box).  Even the NameVirtualHost directive could be updated
as well.

Thoughts?

Bill

Re: 1.3 and 2.0 : Solving an 80/20 problem in the newsgroups

[Manoj Kasichainula <ma...@io.com>]

On Wed, Mar 08, 2000 at 07:51:56AM -0600, William A. Rowe, Jr. wrote:
> From: Manoj Kasichainula [mailto:manojk@io.com]
> >    Allow from 127.0.0.1
> 
> Doesn't that allow from 127.0.0.1* ?

I don't think so. mod_access seems to check if the specified address
looks like an IP address, and treats it as one if possible.

RE: 1.3 and 2.0 : Solving an 80/20 problem in the newsgroups

["William A. Rowe, Jr." <wr...@lnd.com>]

> From: Manoj Kasichainula [mailto:manojk@io.com]
> Sent: Tuesday, March 07, 2000 8:34 PM
>
> On Tue, Mar 07, 2000 at 11:20:17AM -0600, William A. Rowe, Jr. wrote:
> > Two really simple suggestions.
> >
> > What are the arguments against first changing
> >
> >   ServerName localhost
>
> Won't this be horribly broken with UseCanonicalName on?
> That is the default.

The only other solution I can think of for the 2.0 (live) rollout is to
detect the user's address from IP, but since they may use dynamic dns, this
may be no solution at all.

>
> > and all instances of
> >
> >   Allow from .your_domain.com
> >
> > to
> >
> >   Allow from localhost
>
> Sounds reasonable 99% of the time. Back at IBM, though,
> localhost was actually some machine in raleigh.ibm.com
> DNS for a while (it's fixed not). It got really
> confusing if you didn't have /etc/hosts set up
> right, and it could be a potential hole in certain
> environments, so I'd use
>
>    Allow from 127.0.0.1
>
> instead.

Doesn't that allow from 127.0.0.1* ?

Re: 1.3 and 2.0 : Solving an 80/20 problem in the newsgroups

[Manoj Kasichainula <ma...@io.com>]

On Tue, Mar 07, 2000 at 11:20:17AM -0600, William A. Rowe, Jr. wrote:
> Two really simple suggestions.
> 
> What are the arguments against first changing
> 
>   ServerName localhost

Won't this be horribly broken with UseCanonicalName on? That is the
default.

> and all instances of
> 
>   Allow from .your_domain.com
> 
> to
> 
>   Allow from localhost

Sounds reasonable 99% of the time. Back at IBM, though, localhost was
actually some machine in raleigh.ibm.com DNS for a while (it's fixed
not). It got really confusing if you didn't have /etc/hosts set up
right, and it could be a potential hole in certain environments, so
I'd use

   Allow from 127.0.0.1

instead.