https://bz.apache.org/bugzilla/show_bug.cgi?id=58235

            Bug ID: 58235
           Summary: Ability to allow from domain but with using forward
                    DNS query only
           Product: Apache httpd-2
           Version: 2.4.16
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: mod_authz_host
          Assignee: [email protected]
          Reporter: [email protected]

Currently it is possible to use such directive:

Require host example.org

Unfortunately it allows access only when "Only if the forward and reverse DNS
are consistent and the hostname matches will access be allowed."
(http://httpd.apache.org/docs/2.4/mod/mod_authz_host.html)


This makes this directive useless in case of dynamic dns names (and services
like http://www.noip.com/, http://www.dnsexit.com/Direct.sv?cmd=freeSub and
other).

So this feature request is about adding ability to allow access from domain
where only forward dns checking is being made like:

Require forward-host my.super.host.com

When request comes from IP to resource protected with such directive then
apache would resolve my.super.host.com and then compare resolved IP addresses
with client IP address. If these match then access is granted.

Note - it needs to do resolving on every request since my.super.host.com IP can
change every few minutes.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to