DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<https://issues.apache.org/bugzilla/show_bug.cgi?id=44478>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

https://issues.apache.org/bugzilla/show_bug.cgi?id=44478

           Summary: Add SetEnvIfIP to set env vars depneding on ip subnet
                    matches
           Product: Apache httpd-2
           Version: 2.3-HEAD
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: PatchAvailable
          Severity: enhancement
          Priority: P2
         Component: mod_setenvif
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


mod_authz_host allows Allow/Deny to depend on the presence of an environment
variable. Although it would be nice to set appropriate env vars once and then
use the env var in various places inside Allow/Deny, this doesn't really work in
practise, because there is no clean way of setting them w.r.t. IP addresses.

In simple network cases, people use string patterns and setenvif. When more
complex netmasks are involved, string matches against IP addresses don't work 
well.

The attached patch includes SetEnvIfIP that allows all notations, that
Allow/Deny provide (ful IP, partial IP, network/netmask, network/nnn CIDR).

I provide a patch against trunk (r420983, which is actual today) and one against
2.2 (r421103).

IP matches are allowed against remote_addr and also server_addr (because the
latter was simple, but maybe not really useful), also there are domain name
matches, which are allowed against everything that mod_setenvf accepts.

If there is some interest, I would see, how to also provide this feature as a
RewriteCond fpr mod_rewrite.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to