OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Matthias Riese (Matthias.Riese_at_Uni-Bremen.DE)
Date: Mon Jan 06 2003 - 12:28:16 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi,

    If he really wants to protect the whole site, it's easier and less error-prone
    to put something like this into httpd.conf:

    <Directory />
      ...
      Require user <username>
    </Directory>

    To allow users from the private network to enter without a password see:

    http://httpd.apache.org/docs/howto/auth.html#satisfy

    And for the real experts my question having IP spoofing on my mind: Is
    IP-based access control with apache really safe?

    Best regards, Matthias 

    -- 
See header for e-mail address and name.

    -- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here