Re: Controlling access to web site based on domain name

["Rose, John B" <jbrose@xxxxxxxxxxxxxxxxxxx>]

Thanks for your reply. 

Using the referrer, and I have 30 specific domains I want to allow to access a particular page, but any other referrer domain I do not want to allow to access that page, and i want to redirect access from those disallowed referrers to another specific page. 

So can I put all 30 allowed domains in a "RewriteCond" statement or is there some better way to do that?

---

From: Frank Gingras <thumbs@xxxxxxxxxx>
Sent: Friday, December 16, 2022 4:33 PM
To: users@xxxxxxxxxxxxxxxx <users@xxxxxxxxxxxxxxxx>
Subject: Re: Controlling access to web site based on domain name

 

You're referring to controlling access via the referrer, which is trivial to spoof; I strongly recommend not using that approach.

The other concept to understand here is that you can require the traffic to match a certain rDNS value.

If you still want to match the referrer, you can do so with <If, expr or a RewriteCond.

On Fri, Dec 16, 2022 at 4:28 PM Rose, John B <jbrose@xxxxxxx.invalid> wrote:

Brain

Thanks for replying. 

I think I may not have worded my question clearly...'

If I have web site ...

mysite.abc.com

In the htaccess on that page I put something like ... Require def.com

And I want users from a link on the page somesite.def.com to be able to access mysite.abc.com by clicking on that link

But I dont want anyone from a link on a site named somesite.xyz.com to be able to access the homepaage on mysite.abc.com. I want to redirect them to mysite.abc.com/info.html

So any domain not explicitly listed in htaccess file will get redirected.

---

From: Brian Wolfe <wolfebrian2120@xxxxxxxxx>
Sent: Friday, December 16, 2022 4:08 PM
To: jbrose@xxxxxxx.invalid <jbrose@xxxxxxx.invalid>
Cc: users@xxxxxxxxxxxxxxxx <users@xxxxxxxxxxxxxxxx>
Subject: Re: Controlling access to web site based on domain name

 

You don't often get email from wolfebrian2120@xxxxxxxxx. Learn why this is important

Have you looked into virtual hosts configurations?

https://httpd.apache.org/docs/2.4/vhosts/examples.html

On Fri, Dec 16, 2022 at 4:01 PM Rose, John B <jbrose@xxxxxxx.invalid> wrote:

We would like to control access to a web site based on a listed domain and redirect any accesses from domains not

listed to a particular web page.

We need to be able to use the domain names and not IP addresses.

Is this something we should be able to do within .htaccess and using Rewrite for the redirect or do we need to use something else?

Thanks

--

Thanks,
Brian Wolfe

https://www.linkedin.com/in/brian-wolfe-3136425a/