"you can require the traffic to match a certain rDNS value" rDNS means Reverse DNS
I am not sure they want to do something like reverse DNS lookup. ________________________________ From: Frank Gingras <[email protected]> Sent: Friday, December 16, 2022 4:33 PM To: [email protected] <[email protected]> Subject: Re: [users@httpd] Controlling access to web site based on domain name You're referring to controlling access via the referrer, which is trivial to spoof; I strongly recommend not using that approach. The other concept to understand here is that you can require the traffic to match a certain rDNS value. If you still want to match the referrer, you can do so with <If, expr or a RewriteCond. On Fri, Dec 16, 2022 at 4:28 PM Rose, John B <[email protected]> wrote: Brain Thanks for replying. I think I may not have worded my question clearly...' If I have web site ... mysite.abc.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0> In the htaccess on that page I put something like ... Require def.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdef.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=MI6XVBSza0FCavAfVhO7wjZjykMU9vIWZjSq5AshmWM%3D&reserved=0> And I want users from a link on the page somesite.def.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsomesite.def.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=N4HTKqPbanV5Fvu0i85ayEFdzSwccBBVeRANlWt5ic0%3D&reserved=0> to be able to access mysite.abc.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0> by clicking on that link But I dont want anyone from a link on a site named somesite.xyz.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsomesite.xyz.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=NgM0v6amOxrgs%2FnrHbIYWXRmPkTPNPPLOHDWBrYsU%2BI%3D&reserved=0> to be able to access the homepaage on mysite.abc.com<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0>. I want to redirect them to mysite.abc.com/info.html<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2Finfo.html&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=E%2BNoDuJgMMNw2vfidhXAdmqh42oFm1fnZ%2FcmaVl0urE%3D&reserved=0> So any domain not explicitly listed in htaccess file will get redirected. ________________________________ From: Brian Wolfe <[email protected]<mailto:[email protected]>> Sent: Friday, December 16, 2022 4:08 PM To: [email protected] <[email protected]> Cc: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: Re: [users@httpd] Controlling access to web site based on domain name You don't often get email from [email protected]<mailto:[email protected]>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification> Have you looked into virtual hosts configurations? https://httpd.apache.org/docs/2.4/vhosts/examples.html<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhttpd.apache.org%2Fdocs%2F2.4%2Fvhosts%2Fexamples.html&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=whBJuu6xgOhfdhKyiZ8JBMq5Q59DXiLUHi4TrOLYEXA%3D&reserved=0> On Fri, Dec 16, 2022 at 4:01 PM Rose, John B <[email protected]> wrote: We would like to control access to a web site based on a listed domain and redirect any accesses from domains not listed to a particular web page. We need to be able to use the domain names and not IP addresses. Is this something we should be able to do within .htaccess and using Rewrite for the redirect or do we need to use something else? Thanks -- Thanks, Brian Wolfe https://www.linkedin.com/in/brian-wolfe-3136425a/<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fbrian-wolfe-3136425a%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=rVMxtC7A3yKNztZAi4t8Hn0pPzgxlh7%2FusOApzY9t5c%3D&reserved=0>
