RE: [users@httpd] Access to Webpage

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 

> -----Original Message-----
> From: Victor Trac [mailto:victor.trac@xxxxxxxxx] 
> Sent: Friday, May 12, 2006 2:20 PM
> To: users@xxxxxxxxxxxxxxxx
> Subject: Re: [users@httpd] Access to Webpage
> 
> By doing this with apache you are limiting access by source 
> IP and not by actual user accounts.  A prohibited user could 
> gain access from an allowed IP address.  I understood the 
> problem to mean that he wanted to restrict certain users from 
> anywhere on the internet. 

Absolutely. The original post is under-determined and ambiguous (so nothing unusual about that, then :-)

I rather imagined he wanted to avoid that the general public gets to see the login page. It's fairly easy to allow from intranet and deny from internet. However, I take you point that the OP will probably come back with a requirement that, in addition to the above, Joe Bloggs must be allowed access from anywhere. At that point it does indeed move out of apache and into the application layer (ie, the webmail gizmo).

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

> 
> -Victor
> 
> 
> On 5/12/06, Boyle Owen <Owen.Boyle@xxxxxxx> wrote:
> 
> 	> -----Original Message-----
> 	> From: Ranjith Kumar [mailto:ranjitbat@xxxxxxxxx]
> 	> Sent: Friday, May 12, 2006 1:42 PM
> 	> To: users@xxxxxxxxxxxxxxxx <mailto:users@xxxxxxxxxxxxxxxx> 
> 	> Subject: [users@httpd] Access to Webpage
> 	>
> 	> Hi,
> 	>
> 	> I have a mail server running postfix, and using squirrel mail
> 	> for webaccess. Its running based on apache. 
> 	> I have two ip addresses on the system, one is public and
> 	> another one is for local.
> 	> All my users can access the website and check their mails
> 	> from any where (local and internet),
> 	> I do not want to allow all users from outside of my network. 
> 	> I want to allow few users only from the internet.
> 	>
> 	> How can I do this? Help me
> 	
> 	This is indeed an apache configuration issue. The basic 
> tools are the Access Control directives: 
> http://httpd.apache.org/docs/2.2/howto/access.html 
> <http://httpd.apache.org/docs/2.2/howto/access.html> 
> 	
> 	You need something like:
> 	
> 	Order deny,allow
> 	Deny from all
> 	Allow from 192.168  # intranet
> 	Allow from abc      # specific internet addresses
> 	Allow from xyz      #     " 
> 	
> 	See the docs for more details on these directives.
> 	
> 	Rgds,
> 	Owen Boyle
> 	Disclaimer: Any disclaimer attached to this message may 
> be ignored.
> 	
> 	>
> 	>
> 	> Regards,
> 	> Ranjith Kumar
> 	> 
> 	Diese E-mail ist eine private und persönliche 
> Kommunikation. Sie hat keinen Bezug zur Börsen- bzw. 
> Geschäftstätigkeit der SWX Gruppe. This e-mail is of a 
> private and personal nature. It is not related to the 
> exchange or business activities of the SWX Group. Le présent 
> e-mail est un message privé et personnel, sans rapport avec 
> l'activité boursière du Groupe SWX. 
> 	
> 	
> 	This message is for the named person's use only. It may 
> contain confidential, proprietary or legally privileged 
> information. No confidentiality or privilege is waived or 
> lost by any mistransmission. If you receive this message in 
> error, please notify the sender urgently and then immediately 
> delete the message and any copies of it from your system. 
> Please also immediately destroy any hardcopies of the 
> message. You must not, directly or indirectly, use, disclose, 
> distribute, print, or copy any part of this message if you 
> are not the intended recipient. The sender's company reserves 
> the right to monitor all e-mail communications through their 
> networks. Any views expressed in this message are those of 
> the individual sender, except where the message states 
> otherwise and the sender is authorised to state them to be 
> the views of the sender's company. 
> 	
> 	
> ---------------------------------------------------------------------
> 	The official User-To-User support forum of the Apache 
> HTTP Server Project.
> 	See <URL:http://httpd.apache.org/userslist.html > for more info.
> 	To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> 	   "   from the digest: 
> users-digest-unsubscribe@xxxxxxxxxxxxxxxx 
> <mailto:users-digest-unsubscribe@xxxxxxxxxxxxxxxx> 
> 	For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 	
> 	
> 
> 
> 
> 
> -- 
> http://www.victortrac.com <http://www.victortrac.com>  
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux