Re: [users@httpd] apache 2.4 allow by IP

2015-03-20 Thread Daniel
2015-03-20 1:06 GMT+01:00 Tim Dunphy bluethu...@gmail.com: Do you also have the corresponding LoadModule directives in your config file? (shared modules need it to be effectively loaded). Affirmative: [root@uszwsls00015la apache2]# egrep status_module|authz_host conf/httpd.conf

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
Hello Kees, Thanks for that suggestion. Not sure if I understood you correctly, but this is what I tried: #Mod_status config ExtendedStatus on VirtualHost * ServerAdmin webmas...@nbcuni.com DocumentRoot/opt/apache2/htdocs/hcphp.nbc.com ServerName hcphp.nbc.com

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Kees Nuyt
On Thu, 19 Mar 2015 16:26:28 -0400, you wrote: This is what I'm seeing in the error logs: [Thu Mar 19 13:22:34.274686 2015] [authz_core:error] [pid 56979:tid 140005409228544] [client 216.178.108.232:63636] AH01630: client denied by server configuration:

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
Do you also have the corresponding LoadModule directives in your config file? (shared modules need it to be effectively loaded). Affirmative: [root@uszwsls00015la apache2]# egrep status_module|authz_host conf/httpd.conf LoadModule authz_host_module modules/mod_authz_host.so LoadModule

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Yann Ylavic
On Thu, Mar 19, 2015 at 9:51 PM, Tim Dunphy bluethu...@gmail.com wrote: mod_status loaded? Yep! [root@uszwsls00015la apache2]# apachectl -M | grep status status_module (shared) And so are mod_authz_host: [root@uszwsls00015la apache2]# apachectl -M | grep authz_host authz_host_module

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Daniel
2015-03-19 18:06 GMT+01:00 Robert Webb rw...@ropeguru.com: I don't agree with your analysis. ullia href=healthcheck.php healthcheck.php/a/li is an href inside an html page that does nothing until clicked on by the client. This is all assuming that the access denied he is getting is from

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Daniel
On 3/19/2015 1:24 PM, Daniel wrote: 2015-03-19 18:06 GMT+01:00 Robert Webb rw...@ropeguru.com: I don't agree with your analysis. ullia href=healthcheck.php healthcheck.php/a/li is an href inside an html page that does nothing until clicked on by the client. This is all assuming that

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Larry Irwin
How about using this within a Directory entry: Order deny,allow Deny from all # Private IP ranges Allow from 127.0.0.1/32 Allow from 10.0.0.5/32 And then add the server status are under that Directory... Wouldn't that

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
How about using this within a Directory entry: Order deny,allow Deny from all # Private IP ranges Allow from 127.0.0.1/32 Allow from 10.0.0.5/32 And then add the server status are under that Directory...

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Robert Webb
I don't agree with your analysis. ullia href=healthcheck.php healthcheck.php/a/li is an href inside an html page that does nothing until clicked on by the client. This is all assuming that the access denied he is getting is from http://$(hostname-i)/server-status and server-status is the

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Daniel
2015-03-19 17:41 GMT+01:00 Tim Dunphy bluethu...@gmail.com: Hey all, I'm attempting to setup the server-status module and limit access to it by IP. So I have this block in my apache configuration file: #Mod_status config ExtendedStatus on Location /server-status SetHandler

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
This is what I'm seeing in the error logs: [Thu Mar 19 13:22:34.274686 2015] [authz_core:error] [pid 56979:tid 140005409228544] [client 216.178.108.232:63636] AH01630: client denied by server configuration: /opt/apache2/htdocs/hcphp.nbc.com/server-status But that error seems to be referencing

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Eric Covener
On Thu, Mar 19, 2015 at 4:26 PM, Tim Dunphy bluethu...@gmail.com wrote: I'm still not sure why this is happening. Any help/clues would be appreciated! mod_status loaded? -- Eric Covener cove...@gmail.com - To unsubscribe,

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
mod_status loaded? Yep! [root@uszwsls00015la apache2]# apachectl -M | grep status status_module (shared) And so are mod_authz_host: [root@uszwsls00015la apache2]# apachectl -M | grep authz_host authz_host_module (shared) So it's a litle puzzling.. On Thu, Mar 19, 2015 at 4:39 PM, Eric

[users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Tim Dunphy
Hey all, I'm attempting to setup the server-status module and limit access to it by IP. So I have this block in my apache configuration file: #Mod_status config ExtendedStatus on Location /server-status SetHandler server-status Require ip 10.10.10.5 127.0.0.1 /Location And if I do