I am trying to allow only a few IP addresses access. The strange thing is I
went home and noticed I had access from my home computer when I shouldn't
have. I went back to work and tested things and found that a single IP
address that I was allowing caused everyone to be allowed. I tested using a
proxy. When I had that address allowed, the proxy had access when it
shouldn't. When I didn't allow that IP, the proxy didn't have access but
neither did the other IPs I was explicitly allowing. How could this be?
Here is my httpd-ssl.conf file below. When I allow ccc.ccc.ccc.ccc, then
the proxy and everyone has access even if they shouldn't. When I don't
allow ccc.ccc.ccc.ccc, then the proxy doesn't have access but also
bbb.bbb.bbb.bbb doesn't have access!
I have tested with IIS6 and it does not behave that way. It behaves
properly and denies access to the proxy even with that "special" IP address
allowed.
----
<VirtualHost aaa.aaa.aaa.aaa:443>
# General setup for the virtual host
DocumentRoot "F:/Apache_Software_Foundation/Apache2.2/htdocs"
ServerName aaa.aaa.aaa.aaa:443
ErrorLog logs/aaa.aaa.aaa.aaa-error.log
CustomLog logs/aaa.aaa.aaa.aaa-access.log common
#ErrorLog F:/Apache_Software_Foundation/Apache2.2/logs/error_log
TransferLog F:/Apache_Software_Foundation/Apache2.2/logs/access_log
# Location directive allows for restricting access by IP to a
location on
this host
<Location /blah>
Order deny,allow
Deny from all
Allow from aaa.aaa.aaa.aaa
Allow from bbb.bbb.bbb.bbb
Allow from ccc.ccc.ccc.ccc
</Location>
</VirtualHost>
--
View this message in context:
http://www.nabble.com/Allowing-one-IP-gives-all-access-tf4523340.html#a12904289
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
