Q: How to I secure /cgi-bin?

2001-06-27 Thread Ron Savage

Test env:
Apache/1.3.20 (Win32) mod_perl/1.25_01-dev mod_ssl/2.8.4 OpenSSL/0.9.6a

I just tried this to stop myself running any scripts from /cgi-bin, but it does not 
stop me. Yeah, yeah, I restart the server after
every patch to httpd.conf.


Options Indexes FollowSymLinks MultiViews
Order allow,deny
 Deny from all
Allow from 127.0.0.1


My aim of course is to use
Order deny,allow
to stop all others!

I tried

and
Allow from 128.0.0.1
just to see what would happen, but that did not stop me either.

Cheers
Ron  Savage
[EMAIL PROTECTED]
http://savage.net.au/index.html




Re: How to I secure /cgi-bin?

2001-06-27 Thread Tim Tompkins

Use Location for paths respective to the server root.


   ...



- Original Message -
From: "Ron Savage" <[EMAIL PROTECTED]>
To: "mod_perl" <[EMAIL PROTECTED]>
Sent: Wednesday, June 27, 2001 9:23 PM
Subject: Q: How to I secure /cgi-bin?


> Test env:
> Apache/1.3.20 (Win32) mod_perl/1.25_01-dev mod_ssl/2.8.4 OpenSSL/0.9.6a
>
> I just tried this to stop myself running any scripts from /cgi-bin, but it
does not stop me. Yeah, yeah, I restart the server after
> every patch to httpd.conf.
>
> 
> Options Indexes FollowSymLinks MultiViews
> Order allow,deny
>  Deny from all
> Allow from 127.0.0.1
> 
>
> My aim of course is to use
> Order deny,allow
> to stop all others!
>
> I tried
> 
> and
> Allow from 128.0.0.1
> just to see what would happen, but that did not stop me either.
>
> Cheers
> Ron  Savage
> [EMAIL PROTECTED]
> http://savage.net.au/index.html
>
>