Re: [users@httpd] HTTP_REFERER and Access Control

2013-10-11 Thread Philippe Marcoussis
Thanks for all of your responses Le 11 oct. 2013 18:33, "Tom Evans" a écrit : > On Fri, Oct 11, 2013 at 3:58 PM, Philippe Marcoussis > wrote: > > Hello, > > > > I am facing a problem, and i don't known how to solve it. > > > > I have two web sites working and available on the internet : > > - ap

Re: [users@httpd] HTTP_REFERER and Access Control

2013-10-11 Thread Tom Evans
On Fri, Oct 11, 2013 at 5:33 PM, Tom Evans wrote: > RewriteCond %{HTTP_REFERER} ^applications.example.com$ > RewriteRule .* - [E=valid_referer:1] > > SetEnvIf Referer applications\.example\.com valid_referer=1 Doh! I thought I had removed the mod_rewrite way of setting the environment variable -

Re: [users@httpd] HTTP_REFERER and Access Control

2013-10-11 Thread Tom Evans
On Fri, Oct 11, 2013 at 3:58 PM, Philippe Marcoussis wrote: > Hello, > > I am facing a problem, and i don't known how to solve it. > > I have two web sites working and available on the internet : > - applications.example.com > - secure.example.com > > I would like : > 1) to allow FULL access FROM

Re: [users@httpd] HTTP_REFERER and Access Control

2013-10-11 Thread David Ecker
Hi, you could use host based access control giving full access to the server applications.examle.com: http://httpd.apache.org/docs/2.2/howto/access.html The problem is that the request to secure.example.com has to come from applications.example.com and not from the client browser. You could

[users@httpd] HTTP_REFERER and Access Control

2013-10-11 Thread Philippe Marcoussis
Hello, I am facing a problem, and i don't known how to solve it. I have two web sites working and available on the internet : - applications.example.com - secure.example.com I would like : 1) to allow FULL access FROM applications.example.com TO secure.example.com ( without any authentication)