On Dec 17, 2007 12:05 PM, Tonu Mikk <tmikk@xxxxxxx> wrote: > I would like to make a document root folder of a virtual host open to > public, but restrict access to root/admin folder to certain IP ranges > only. Below is what I have currently. I have restricted the > survey/admin folder, but everyone can still view pages. Any suggestions > on what I am doing wrong? Thank you, > > DocumentRoot /var/www/survey > <Directory /> > Options FollowSymLinks > AllowOverride None > </Directory> > <Directory /var/www/survey> > Options FollowSymLinks MultiViews > AllowOverride None > Order allow,deny > allow from all > </Directory> > <Directory /var/www/survey/admin> > Options FollowSymLinks MultiViews > AllowOverride None > Order deny,allow > Deny from all > Allow from localhost > </Directory> The configuration is basically correct, so the problem is likely either you aren't editing the correct config file, you are reloading the configuration after editing, of you have an Allow directive someplace else in the config (perhaps in a <Location> section) overriding this config. (AllowOverride restricts only .htaccess files, not other sections of httpd.conf and related. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx