Re: URL restriction

[techienote.com@xxxxxxxxx]

Hi Josh,

As per our application architecture virtual host is not the possibility as both the pages are in single war file and developer don't want to create separate war for two modules.

I am trying with rewrite module but no luck. Will give a shot to location and let you know.

Regards,
Vidyadhar
PN : Sorry for top posting as I m on handheld device.

Sent on my BlackBerry® from Vodafone

---

From: Josh Whittaker <josh.whittaker@xxxxxxxxxxxx>

Date: Fri, 15 Feb 2013 11:01:23 -0600

To: <users@xxxxxxxxxxxxxxxx>

ReplyTo: users@xxxxxxxxxxxxxxxx

Subject: Re: [users@httpd] URL restriction

Hello Vidyadhar,

1) In WebSphere, you need to create a new virtual host that you will only map your admin module to. For example.. setup a virtual host in WAS called "admin" to listen on techienote.com on a new specific IP address and/or port. Something like admin.techienote.com.

 

You should also create a new virtual host in Apache with the same IP/Name:port. You can then limit this virtual host to listen on a new IP and/or port that will not be available to external users. 

2) You could also use rewrites or Location blocks to limit by ip address, but this has some flaws.  

Their are several ways to do this, but these options appear to be the easiest since you are dealing with WebSphere. Validate your plugin config is correct after propagation.

Thanks

Josh Whittaker

On Fri, Feb 15, 2013 at 10:22 AM, <techienote.com@xxxxxxxxx> wrote:

Hi Team,

This is regarding URL restriction. We are using IBM http Server version 7 which is build on apache 2.2

All the dynamic pages are hosted on WebSphere application server. IBM http server communicate with WebSphere application server through plugin.

Now on Application server I have two modules:
1. http://techienote.com/vidyadhar/hello.user for users
2. http://techienote.com/vidyadhar/hello.admin for admins

All the above servers are in DMZ.

Now the problem is http://techienote.com/vidyadhar/hello.admin can be accessible from outside network which I want to prohibit.

Kindly let me know possible solutions to above problem.

Regards,
Vidyadhar
Sent on my BlackBerry® from Vodafone