Re: [apache-talk] Ограничить доступ (mod_accel)

[Andrey Brindeew <linux@abr.pp.ru>]

On Mon, 10 Jun 2002 14:13:42 +0400 (MSD)
Igor Sysoev <is@rambler-co.ru> wrote:

> На фронтенде поставить
>    order allow,deny

Не получается! То, что отдаёт сам frontend, запрещается, а вот запросы для
backend'а передаются без проблем и ответы тоже.
Запретил себя, и что: css не отжаются, а контент вижу. :-(

Вот конфигурация всего виртуалхоста:

<VirtualHost AAA.BBB.CCC.DDD:*>
        ServerName www.server.ru
        ServerAlias server.ru stable.server.ru
        ServerAdmin support@server.ru
        DocumentRoot /home/server-www/STABLE/docs
        DirectoryIndex index.html index.htm index.cgi

        ErrorLog /home/server-www/logs/frontend-stable-errors.log
        CustomLog /home/server-www/logs/frontend-stable-accel.log accel
        CustomLog /home/server-www/logs/frontend-stable-deflate.log deflate

        HostnameLookups Off
        ErrorDocument 401 /401.htm
        ErrorDocument 403 /403.htm
        ErrorDocument 404 /404.htm
        ErrorDocument 500 /500.htm
        ErrorDocument 502 /502.htm
        DefaultType application/octet-stream
        AddHandler cgi-script .cgi

        CharsetDefault windows-1251
        CharsetSourceEnc koi8-r

        AccelPass / http://server.ru:81/
        AccelNoPass /images/ ~\.css$ ~\.js$ /robots.txt ~\.htm$

        # mod_deflate directives
        DeflateMinLength 5120
        DeflateCompLevel 5
        DeflateDisableRange "MSIE 4."
        DeflateEnable on

        <Location />
                AccelAddvia on
                AccelAddXForwardedFor on
                AccelBusyLock 20 25 30
                AccelPassCookie on
                AccelSetXHost on
                AccelSetXRealIP on
                AccelIgnoreAuth on
                AccelInvalidate _INVALIDATE

        </Location>

        <LocationMatch ^/cgi/view>
                AccelCacheCookie c
        </LocationMatch>
        <Location /cgi/viewfirm>
                AccelCacheCookie off
        </Location>

        <Directory />
            Options FollowSymLinks -Indexes
            AllowOverride None
            order allow,deny
            Allow from all

            # bad guys
            Deny from MY_IP_ADDRESS

        </Directory>
        <Directory "/home/server-www/STABLE/docs/images">
                Options -Indexes
                AllowOverride None

            # Expiration settings (mod_expires)
            ExpiresDefault "now plus 7 days"
            ExpiresActive on
        </Directory>
</VirtualHost>

-- 
WBR, Andrey Brindeew.
"No one person can understand Perl culture completely"
(C) Larry Wall.

Attachment: pgp00013.pgp
Description: PGP signature