You need to place all the JRunConfig directives only in the vhost that you want to have CF access. What you want is a jrun-per-vhost setup (instead of the jrun-per-Apache default), with only a single vhost/ jrun pair, and all the other vhosts without a jrun.
cheers, barneyb -- Barney Boisvert [email protected] http://www.barneyb.com/ On Jul 12, 2009, at 5:42 PM, Sean Kimball <[email protected]> wrote: > > Hi; > > quick question; > > I have CFMX8 installed and running nicely, though it is on a system > with about 60 virtual hosts. > I would like to deny use of cfml pages to all vhosts except the ones > I explicitly allow > > so I have: > LoadModule jrun_module /opt/coldfusion8/runtime/lib/wsconfig/1/ > mod_jrun22.so > > <IfModule mod_jrun22.c> > JRunConfig Verbose false > JRunConfig Apialloc false > JRunConfig Ignoresuffixmap false > JRunConfig Serverstore /opt/coldfusion8/runtime/lib/wsconfig/1/ > jrunserver.store > JRunConfig Bootstrap 127.0.0.1:51800 > # #JRunConfig Errorurl url <optionally redirect to this URL on > errors> > # #JRunConfig ProxyRetryInterval 600 <number of seconds to wait > before trying to reconnect to unreachable clustered server> > # #JRunConfig ConnectTimeout 15 <number of seconds to wait on a > socket connect to a jrun server> > # #JRunConfig RecvTimeout 300 <number of seconds to wait on a > socket receive to a jrun server> > # #JRunConfig SendTimeout 15 <number of seconds to wait on a > socket send to a jrun server> > # AddHandler jrun-handler .jsp .jws .cfm .cfml .cfc .cfr .cfswf > </IfModule> > > > > <directory /var/www/vhosts/**VHOST**/subdomains/cfide/httpdocs> > AddHandler jrun-handler .jsp .jws .cfm .cfml .cfc .cfr .cfswf > order deny,allow > deny from all > allow from 70.31.38.45 > </directory> > > > > > now: the directory rule is for the cfide directory - works, is fine, > however I figured if I commented out the addhandler line in the > ifmod directive, no other vhosts would be able to process cfml > pages.... > > This is not the case, any vhost can place cfm pages in the webroot > and have htem executed. > > > What is the correct way to configure this so that only vhosts I > allow can use cmfl pages? > > -thanks > -sean > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-server/message.cfm/messageid:6835 Subscription: http://www.houseoffusion.com/groups/cf-server/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.10
