Thanks for your reply. Using the referrer, and I have 30 specific domains I want to allow to access a particular page, but any other referrer domain I do not want to allow to access that page, and i want to redirect access from those disallowed referrers to another specific page.
So can I put all 30 allowed domains in a "RewriteCond" statement or is there some better way to do that? ________________________________ From: Frank Gingras <thu...@apache.org> Sent: Friday, December 16, 2022 4:33 PM To: users@httpd.apache.org <users@httpd.apache.org> Subject: Re: [users@httpd] Controlling access to web site based on domain name You're referring to controlling access via the referrer, which is trivial to spoof; I strongly recommend not using that approach. The other concept to understand here is that you can require the traffic to match a certain rDNS value. If you still want to match the referrer, you can do so with <If, expr or a RewriteCond. On Fri, Dec 16, 2022 at 4:28 PM Rose, John B <jbr...@utk.edu.invalid> wrote: Brain Thanks for replying. I think I may not have worded my question clearly...' If I have web site ... mysite.abc.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0> In the htaccess on that page I put something like ... Require def.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdef.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=MI6XVBSza0FCavAfVhO7wjZjykMU9vIWZjSq5AshmWM%3D&reserved=0> And I want users from a link on the page somesite.def.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsomesite.def.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=N4HTKqPbanV5Fvu0i85ayEFdzSwccBBVeRANlWt5ic0%3D&reserved=0> to be able to access mysite.abc.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0> by clicking on that link But I dont want anyone from a link on a site named somesite.xyz.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsomesite.xyz.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=NgM0v6amOxrgs%2FnrHbIYWXRmPkTPNPPLOHDWBrYsU%2BI%3D&reserved=0> to be able to access the homepaage on mysite.abc.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0>. I want to redirect them to mysite.abc.com/info.html<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2Finfo.html&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=E%2BNoDuJgMMNw2vfidhXAdmqh42oFm1fnZ%2FcmaVl0urE%3D&reserved=0> So any domain not explicitly listed in htaccess file will get redirected. ________________________________ From: Brian Wolfe <wolfebrian2...@gmail.com<mailto:wolfebrian2...@gmail.com>> Sent: Friday, December 16, 2022 4:08 PM To: jbr...@utk.edu.invalid <jbr...@utk.edu.invalid> Cc: users@httpd.apache.org<mailto:users@httpd.apache.org> <users@httpd.apache.org<mailto:users@httpd.apache.org>> Subject: Re: [users@httpd] Controlling access to web site based on domain name You don't often get email from wolfebrian2...@gmail.com<mailto:wolfebrian2...@gmail.com>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification> Have you looked into virtual hosts configurations? https://httpd.apache.org/docs/2.4/vhosts/examples.html<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhttpd.apache.org%2Fdocs%2F2.4%2Fvhosts%2Fexamples.html&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=whBJuu6xgOhfdhKyiZ8JBMq5Q59DXiLUHi4TrOLYEXA%3D&reserved=0> On Fri, Dec 16, 2022 at 4:01 PM Rose, John B <jbr...@utk.edu.invalid> wrote: We would like to control access to a web site based on a listed domain and redirect any accesses from domains not listed to a particular web page. We need to be able to use the domain names and not IP addresses. Is this something we should be able to do within .htaccess and using Rewrite for the redirect or do we need to use something else? Thanks -- Thanks, Brian Wolfe https://www.linkedin.com/in/brian-wolfe-3136425a/<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fbrian-wolfe-3136425a%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=rVMxtC7A3yKNztZAi4t8Hn0pPzgxlh7%2FusOApzY9t5c%3D&reserved=0>
