You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2021/04/30 06:27:54 UTC
[Bug 65279] New: IP blocking rules to access to website are not
respected
https://bz.apache.org/bugzilla/show_bug.cgi?id=65279
Bug ID: 65279
Summary: IP blocking rules to access to website are not
respected
Product: Apache httpd-2
Version: 2.4.2
Hardware: PC
Status: NEW
Severity: critical
Priority: P2
Component: All
Assignee: bugs@httpd.apache.org
Reporter: beuzy13@free.fr
Target Milestone: ---
Hello,
I have the following problem.
I have a website Wordpress hosted on an Apache server managed with cPanel
(Apache version is v2.4 I think but I don't know the exact version 2.4.x used
by my host).
To authorize the access to the website only to a single one IP address, I have
defined the following rule which I have put in the .htaccess file located on
the root folder of the website :
Order Deny,Allow
Deny from All
Allow from 1.2.3.4
After uploading the .htaccess file on the server, effectively, the other IP
addresses than the authorized one are well blocked.
Unfortunately, after going once on the website with the allowed IP address, the
website is now accessible to all IP address, event the not authorized ones. The
rules in .htaccess is not respected.
If I do not go to the website with the authorized IP address, the
non-authorized IP addresses are well blocked and have no access to the website
... until I come back to the website with the allowed IP adress.
I have tried a lot of other variants of this code finds on forums and helps,
but they do not work.
Would you have the solution to this problem ?
Thank you very much
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65279] IP blocking rules to access to website are not respected
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65279
Rich Bowen <rb...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |WONTFIX
--- Comment #5 from Rich Bowen <rb...@apache.org> ---
Thank you for your report. As part of an effort to clean up our issue tracker,
we are closing tickets that have seen no activity for more than 5 years. If
this issue is still relevant to a current version of Apache httpd (2.4.x or
trunk), please reopen this ticket or open a new one with updated information.
We appreciate your contribution to the project.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65279] IP blocking rules to access to website are not respected
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65279
--- Comment #4 from ncitl <be...@free.fr> ---
After some more tests, the problem occurs only when you try to display the
website home page (maybe others pages) but not when you try to access to the
Wordpress wp-admin.php.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65279] IP blocking rules to access to website are not respected
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65279
ncitl <be...@free.fr> changed:
What |Removed |Added
----------------------------------------------------------------------------
Version|2.4.4 |2.4.46
--- Comment #2 from ncitl <be...@free.fr> ---
Following the advices of my host, I have :
>>> Desabled the server cache system but the problem is always the same.
>>> Replaced the code in .htaccess file by the following one but the problem is always the same.
<RequireAll>
Require ip 0.0.0.0
</RequireAll>
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65279] IP blocking rules to access to website are not respected
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65279
--- Comment #3 from ncitl <be...@free.fr> ---
I have tried to determine the time during which the rules used to block
non-authorized IP addresses are not applied since the last page actualization
from the allowed IP address.
To make it, I have refreshed every 30 seconds the page from a non-authorized IP
address (of course without refresh the page from the authorized IP address).
The not-authorized IP adress was blocked when the chronometer indicates 2
minutes and 30 seconds.
The time is between 2 minutes and 2 minutes 35 seconds.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65279] IP blocking rules to access to website are not respected
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65279
ncitl <be...@free.fr> changed:
What |Removed |Added
----------------------------------------------------------------------------
Version|2.4.2 |2.4.4
OS| |All
--- Comment #1 from ncitl <be...@free.fr> ---
I get the Apache version used by my host:
2.4.46
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org