Re: [EMAIL PROTECTED] .htaccess

2006-12-19 Thread ara . t . howard
On Tue, 19 Dec 2006, Davide Bianchi wrote: You've upgraded from what? rel 3. Have you checked if the problem could be caused by the fact that SELinux is by default enabled in RH EL, and maybe Apache can't read the .htaccess file? yes. selinux is indeed enabled. however, it's not logging

[EMAIL PROTECTED] .htaccess

2006-12-19 Thread ara . t . howard
we've recently upgrade to redhat enterprise rel 4. for some reason .htacess files are no longer being read. we're not seeing any errors in apache logs or selinux logs and configuration has not changed. has anyone else seen this or is more likely that we've fat fingered something? regards. -a

Re: [EMAIL PROTECTED] .htaccess mixed access based on client-ip/auth

2006-12-07 Thread ara . t . howard
On Thu, 7 Dec 2006, Joshua Slive wrote: On 12/7/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: >> still, i think even REMOTE_ADDR could be spoofed easily couldn't it? > > No, it is determined directly from the TCP/IP connection information which > cannot be (easily) spoofed. The Client-IP

Re: [EMAIL PROTECTED] .htaccess mixed access based on client-ip/auth

2006-12-07 Thread ara . t . howard
On Thu, 7 Dec 2006, Joshua Slive wrote: You should be fine if: 1) the proxy clears any existing Client-IP header before setting its own; and 2) the back-end box accepts connections only from the proxy. (The latter one is a little tricky, since you can't use mod_access to do this restriction in

Re: [EMAIL PROTECTED] .htaccess mixed access based on client-ip/auth

2006-12-07 Thread ara . t . howard
On Thu, 7 Dec 2006, Joshua Slive wrote: On 12/7/06, Ara.T.Howard <[EMAIL PROTECTED]> wrote: does this make sense? i'm sure that is based on a mis-understanding on my part about Order/Allow/Deny, but i'm sure what i'm trying to do should be possible solely from this .htaccess file. thoughts