Then use a RewriteMap. On Thu, Dec 22, 2022 at 9:37 AM Rose, John B <jbr...@utk.edu.invalid> wrote:
> Thanks for your reply. > > Using the referrer, and I have 30 specific domains I want to allow to > access a particular page, but any other referrer domain I do not want to > allow to access that page, and i want to redirect access from those > disallowed referrers to another specific page. > > So can I put all 30 allowed domains in a "RewriteCond" statement or is > there some better way to do that? > > > ------------------------------ > *From:* Frank Gingras <thu...@apache.org> > *Sent:* Friday, December 16, 2022 4:33 PM > *To:* users@httpd.apache.org <users@httpd.apache.org> > *Subject:* Re: [users@httpd] Controlling access to web site based on > domain name > > You're referring to controlling access via the referrer, which is trivial > to spoof; I strongly recommend not using that approach. > > The other concept to understand here is that you can require the traffic > to match a certain rDNS value. > > If you still want to match the referrer, you can do so with <If, expr or a > RewriteCond. > > > On Fri, Dec 16, 2022 at 4:28 PM Rose, John B <jbr...@utk.edu.invalid> > wrote: > > Brain > > Thanks for replying. > > I think I may not have worded my question clearly...' > > If I have web site ... > mysite.abc.com > <https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0> > > In the htaccess on that page I put something like ... Require def.com > <https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdef.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=MI6XVBSza0FCavAfVhO7wjZjykMU9vIWZjSq5AshmWM%3D&reserved=0> > > And I want users from a link on the page somesite.def.com > <https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsomesite.def.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=N4HTKqPbanV5Fvu0i85ayEFdzSwccBBVeRANlWt5ic0%3D&reserved=0> > to be able to access mysite.abc.com > <https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0> > by clicking on that link > > But I dont want anyone from a link on a site named somesite.xyz.com > <https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsomesite.xyz.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=NgM0v6amOxrgs%2FnrHbIYWXRmPkTPNPPLOHDWBrYsU%2BI%3D&reserved=0> > to be able to access the homepaage on mysite.abc.com > <https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Mvr4gSjeagVJ3pmQXc0gpxDeo%2Fa1fvqlU45yHtE%2FOTI%3D&reserved=0>. > I want to redirect them to mysite.abc.com/info.html > <https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmysite.abc.com%2Finfo.html&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=E%2BNoDuJgMMNw2vfidhXAdmqh42oFm1fnZ%2FcmaVl0urE%3D&reserved=0> > > So any domain not explicitly listed in htaccess file will get redirected. > > > ------------------------------ > *From:* Brian Wolfe <wolfebrian2...@gmail.com> > *Sent:* Friday, December 16, 2022 4:08 PM > *To:* jbr...@utk.edu.invalid <jbr...@utk.edu.invalid> > *Cc:* users@httpd.apache.org <users@httpd.apache.org> > *Subject:* Re: [users@httpd] Controlling access to web site based on > domain name > > You don't often get email from wolfebrian2...@gmail.com. Learn why this > is important <https://aka.ms/LearnAboutSenderIdentification> > Have you looked into virtual hosts configurations? > > https://httpd.apache.org/docs/2.4/vhosts/examples.html > <https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhttpd.apache.org%2Fdocs%2F2.4%2Fvhosts%2Fexamples.html&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=whBJuu6xgOhfdhKyiZ8JBMq5Q59DXiLUHi4TrOLYEXA%3D&reserved=0> > > On Fri, Dec 16, 2022 at 4:01 PM Rose, John B <jbr...@utk.edu.invalid> > wrote: > > We would like to control access to a web site based on a listed domain and > redirect any accesses from domains not > listed to a particular web page. > > We need to be able to use the domain names and not IP addresses. > > Is this something we should be able to do within .htaccess and using > Rewrite for the redirect or do we need to use something else? > > Thanks > > > > > -- > Thanks, > Brian Wolfe > https://www.linkedin.com/in/brian-wolfe-3136425a/ > <https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fbrian-wolfe-3136425a%2F&data=05%7C01%7Cjbrose%40utk.edu%7Cdf01786b3ed14f0ed24608dadfad377b%7C515813d9717d45dd9eca9aa19c09d6f9%7C0%7C0%7C638068232297166282%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=rVMxtC7A3yKNztZAi4t8Hn0pPzgxlh7%2FusOApzY9t5c%3D&reserved=0> > >
