RE: Apache issue

As I understand it, you're implicitly allowing access first, by the
Order statement. 

Perhaps you should consider the following for your httpd.conf file:

<Directory /www/html/directory/rzone>
    AllowOverride All
    Order Deny,Allow
    Deny from all
    Allow from 10.0.10
</Directory>

And the following for your .htaccess file:

AuthType Basic
AuthName "Welcome"
AuthUserFile /www/html/directory/rzone/.htmdp
<Limit GET POST>
        require valid-user
</Limit>

David Alexander 
Open Systems Technology - Information Technology Services 
Los Angeles Department of Water and Power 
[email protected] 
213-367-3242 Work


-----Original Message-----
From: [email protected] [mailto:[email protected]] 
Sent: Wednesday, June 22, 2005 12:44 AM
To: 
Subject: Apache issue

Hello,
I'm using Apache/2.0.52 on Fedora Core 3. I've copied the configuration
file of the previous apache's version on a Redhat, as I do everytime
when upgrading to a new version of Apache (I configured only the new
httpd.conf manually), and now the problem is that none of the security
measures is working, I'm bypassing all of them (.htaccess and ip list
specification).

The mod_access module is enabled.

In my httpd.conf, I have:

AllowOverride All

<Directory /www/html/directory/rzone>
        Order Allow,Deny
        Allow from  10.0.10.
        Deny from all
</Directory>



My .htaccess is:
AuthType Basic
AuthName Welcome
AuthUserFile /www/html/directory/rzone/.htmdp

<Limit GET POST>
        require valid-user

        Order Allow,Deny
        Allow from  10.0.10.
        Deny from all
</Limit>

When I was desprate, I've configured the access file as follow:

Order Allow,Deny
Deny from all

and I still have access to the web site.
 
Any idea ?