Re: [users@httpd] Only allow reverse proxy traffic with mod_remoteip

2020-04-27 Thread baptx
I meant a VirtualHost with: Require expr "%{REMOTE_ADDR} != %{CONN_REMOTE_ADDR}" On Mon, 27 Apr 2020 at 15:44, baptx wrote: > By the way, I noticed that a VirtualHost with: > > Require expr "%{REMOTE_ADDR} != %{CONN_REMOTE_ADDR}" > > has a dangerous behav

Re: [users@httpd] Only allow reverse proxy traffic with mod_remoteip

2020-04-27 Thread baptx
o you know why it happened? The other solution using mod_rewrite does not have this problem: RewriteEngine on RewriteCond expr "%{REMOTE_ADDR} == %{CONN_REMOTE_ADDR}" RewriteRule ^ - [F] On Sun, 26 Apr 2020 at 10:39, baptx wrote: > Is there a way to display an error with a differe

Re: [users@httpd] Only allow reverse proxy traffic with mod_remoteip

2020-04-26 Thread baptx
proxy will see the same error page and could know that a domain name is used on the IP address. On Sat, 25 Apr 2020 at 18:16, baptx wrote: > It worked when using Require in a location, thanks! > > > On Sat, 25 Apr 2020 at 13:41, Yann Ylavic wrote: > >> On Sat, Apr 2

Re: [users@httpd] Only allow reverse proxy traffic with mod_remoteip

2020-04-25 Thread baptx
It worked when using Require in a location, thanks! On Sat, 25 Apr 2020 at 13:41, Yann Ylavic wrote: > On Sat, Apr 25, 2020 at 1:24 PM baptx wrote: > > > > @Yann: About your last reply suggesting Require expr "%{REMOTE_ADDR} != > %{CONN_REMOTE_ADDR}": > >

Re: [users@httpd] Only allow reverse proxy traffic with mod_remoteip

2020-04-25 Thread baptx
ce Require does not work in virtualhosts (I got the error: "Require not allowed in context"). On Sat, 25 Apr 2020 at 13:10, baptx wrote: > I meant == instead of != like you corrected. > > > On Sat, 25 Apr 2020 at 13:08, baptx wrote: > >> Thanks Yann, it worked. >

Re: [users@httpd] Only allow reverse proxy traffic with mod_remoteip

2020-04-25 Thread baptx
I meant == instead of != like you corrected. On Sat, 25 Apr 2020 at 13:08, baptx wrote: > Thanks Yann, it worked. > > I used RemoteIPTrustedProxy instead of RemoteIPTrustedProxyList in > /etc/apache2/conf-available/remoteip.conf (from Cloudflare example: > https://support.cloud

Re: [users@httpd] Only allow reverse proxy traffic with mod_remoteip

2020-04-25 Thread baptx
Thanks Yann, it worked. I used RemoteIPTrustedProxy instead of RemoteIPTrustedProxyList in /etc/apache2/conf-available/remoteip.conf (from Cloudflare example: https://support.cloudflare.com/hc/en-us/articles/360029696071-Restoring-original-visitor-IPs-Option-2-Installing-mod-remoteip-with-Apache#1