Re: Apache issue
Hans <[email protected]>
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Message-ID | <[email protected]> |
Am Mittwoch, 22. Juni 2005 09:44 schrieb [email protected]: > Hello, > I'm using Apache/2.0.52 on Fedora Core 3. I've copied the configuration > file of the previous apache's version on a Redhat, as I do everytime when > upgrading to a new version of Apache (I configured only the new httpd.conf > manually), and now the problem is that none of the security measures is > working, I'm bypassing all of them (.htaccess and ip list specification). > > The mod_access module is enabled. > > In my httpd.conf, I have: > > AllowOverride All > > <Directory /www/html/directory/rzone> > Order Allow,Deny > Allow from 10.0.10. > Deny from all > </Directory> > > > > My .htaccess is: > AuthType Basic > AuthName Welcome > AuthUserFile /www/html/directory/rzone/.htmdp > > <Limit GET POST> > require valid-user > > Order Allow,Deny > Allow from 10.0.10. > Deny from all > </Limit> Try this: Order Deny,Allow Allow from 10.0.10. This means Deny as default from all, except the Allow-rule. The first "True"-Rule wins........ > When I was desprate, I've configured the access file as follow: > > Order Allow,Deny > Deny from all > > and I still have access to the web site. > > Any idea ? Best regards Hans -- Firma Ullrich-IT-Consult Inh.: Hans-J. Ullrich Münstedter Weg 10 31246 Oberg Tel.: 0160 8156 079 www: http://www.ullrich-it.de Ihr Berater für Ihre IT-Probleme !