-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OK this is REALLY starting to annoy me,

I am trying to protect an Apache CGI from outside access and either NOONE
can get access or EVERYONE can 8(
I am trying to prevent access to the CGI cvsweb.cgi except from my
workstation IP.  The script is stored at
/usr/local/apache/cgi-bin/cvsweb.cgi

Configuration:
Server is a virtual server hosting multiple virtual domains
ACL configuration is:
<Directory "/usr/local/apache/cgi-bin">
  AllowOverride None
  Options None
  order deny,allow
  allow from all
</Directory>
<Location "/cgi-bin/cvsweb.cgi">
  allow from 203.46.4.222
  order allow,deny
  deny from all
</Location>

All I get from the server logs is:
[Tue Nov 30 16:17:34 1999] [error] [client 203.46.4.222] client denied by
server configuration: /usr/local/apache/cgi-bin/cvsweb.cgi


Any suggestions?

Also, should my cgi-bin directory be "allow all" like that or is that a
security problem?

Regards,
+-----------------------+---------------------------------+
| Peter Kiem            | E-Mail    : <[EMAIL PROTECTED]> |
| Technical Consultant  | Home Phone: +61 07 3344 5665    |
| Trysoft Aust Pty Ltd  | Mobile    : +61 0418 798 121    |
|                       | WWW       : www.zordah.net      |
|                       | ICQ       : "Zordah" 866661     |
+-----------------------+---------------------------------+
     "Linux, the last service pack you'll ever need."

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.0.2i

iQA/AwUBOELgT4id0r/+M3MgEQIGdQCg8s3EVJ/RW/y3ml5OtGRa8zuSUm8AoNun
wC3HTTTYlKotIYXRZguBPTvK
=Cqee
-----END PGP SIGNATURE-----



-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to