Re: [users@httpd] apache 2.4 allow by IP

2015-03-20 Thread Daniel
2015-03-20 1:06 GMT+01:00 Tim Dunphy : > Do you also have the corresponding LoadModule directives in your config >> file? >> (shared modules need it to be effectively loaded). > > > Affirmative: > > [root@uszwsls00015la apache2]# egrep "status_module|authz_host" > conf/httpd.conf > LoadModule auth

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
> > Do you also have the corresponding LoadModule directives in your config > file? > (shared modules need it to be effectively loaded). Affirmative: [root@uszwsls00015la apache2]# egrep "status_module|authz_host" conf/httpd.conf LoadModule authz_host_module modules/mod_authz_host.so LoadModule

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Yann Ylavic
On Thu, Mar 19, 2015 at 9:51 PM, Tim Dunphy wrote: >> mod_status loaded? > > > Yep! > > [root@uszwsls00015la apache2]# apachectl -M | grep status > status_module (shared) > > And so are mod_authz_host: > > [root@uszwsls00015la apache2]# apachectl -M | grep authz_host > authz_host_module (shared)

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
Hello Kees, Thanks for that suggestion. Not sure if I understood you correctly, but this is what I tried: #Mod_status config ExtendedStatus on ServerAdmin webmas...@nbcuni.com DocumentRoot/opt/apache2/htdocs/hcphp.nbc.com ServerName hcphp.nbc.com ServerAlias

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Kees Nuyt
On Thu, 19 Mar 2015 16:26:28 -0400, you wrote: >This is what I'm seeing in the error logs: > >[Thu Mar 19 13:22:34.274686 2015] [authz_core:error] [pid 56979:tid >140005409228544] [client 216.178.108.232:63636] AH01630: client denied by >server configuration: /opt/apache2/htdocs/hcphp.nbc.com/serv

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
> > mod_status loaded? Yep! [root@uszwsls00015la apache2]# apachectl -M | grep status status_module (shared) And so are mod_authz_host: [root@uszwsls00015la apache2]# apachectl -M | grep authz_host authz_host_module (shared) So it's a litle puzzling.. On Thu, Mar 19, 2015 at 4:39 PM, Eric

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Eric Covener
On Thu, Mar 19, 2015 at 4:26 PM, Tim Dunphy wrote: > I'm still not sure why this is happening. Any help/clues would be > appreciated! mod_status loaded? -- Eric Covener cove...@gmail.com - To unsubscribe, e-mail: users-unsubs

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
This is what I'm seeing in the error logs: [Thu Mar 19 13:22:34.274686 2015] [authz_core:error] [pid 56979:tid 140005409228544] [client 216.178.108.232:63636] AH01630: client denied by server configuration: /opt/apache2/htdocs/hcphp.nbc.com/server-status But that error seems to be referencing ano

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
> > How about using this within a Directory entry: > Order deny,allow > Deny from all > # Private IP ranges > Allow from 127.0.0.1/32 > Allow from 10.0.0.5/32 > And then add the server status are under that Directory...

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Daniel
> > On 3/19/2015 1:24 PM, Daniel wrote: > > > > 2015-03-19 18:06 GMT+01:00 Robert Webb : > >> I don't agree with your analysis. >> >> healthcheck.php is an href >> inside an html page that does nothing until clicked on by the client. >> >> This is all assuming that the access denied he is getting

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Larry Irwin
How about using this within a Directory entry: Order deny,allow Deny from all # Private IP ranges Allow from 127.0.0.1/32 Allow from 10.0.0.5/32 And then add the server status are under that Directory... Wouldn't that

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Daniel
2015-03-19 18:06 GMT+01:00 Robert Webb : > I don't agree with your analysis. > > healthcheck.php is an href > inside an html page that does nothing until clicked on by the client. > > This is all assuming that the access denied he is getting is from http:// > $(hostname>>-i)/server-status and "se

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Robert Webb
I don't agree with your analysis. healthcheck.php is an href inside an html page that does nothing until clicked on by the client. This is all assuming that the access denied he is getting is from http://$(hostname>>-i)/server-status and "server-status" is the html page of the code he poste

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Daniel
2015-03-19 17:41 GMT+01:00 Tim Dunphy : > Hey all, > > I'm attempting to setup the server-status module and limit access to it > by IP. > > So I have this block in my apache configuration file: > > #Mod_status config > ExtendedStatus on > > SetHandler server-status > Require ip 10.10

[users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
Hey all, I'm attempting to setup the server-status module and limit access to it by IP. So I have this block in my apache configuration file: #Mod_status config ExtendedStatus on SetHandler server-status Require ip 10.10.10.5 127.0.0.1 And if I do a GET by IP, I'm getting permiss