How to allow access only from a specific host on Apache Httpd 2.4?

Question

I'm using Apache Httpd 2.4 as a web server ,and I fail to allow access only from a specific host to a URL-path "/x" on my web server.

httpd.conf:

<Location "/x">
    Require host myhost.com
</Location>

Basically it ignores "Require host myhost.com" and restricts access from all hosts.

authz_host, authz_core modules are enabled.

Am I missing anything?

Thanks

This should work, I've just tested it. Do you maybe have some other configuration (e.g. <Directory /var/www/x/> overriding the Location directive? — digijay
– digijay, Commented Dec 5, 2018 at 10:34
@digijay I have also configuration for <Directory /var/www/html></Directory> just above the <Location "/x"></Location> — Netanel Gabay
– Netanel Gabay, Commented Dec 6, 2018 at 11:08

digijay · Accepted Answer · 2018-12-05 16:25:35Z

2

To make Require host work, you have to make sure that reverse dns lookup for your domain works properly. This is done by PTR (pointer) records in your DNS. You can check it with the dig command like this:

$ dig +short www.google.de
172.217.22.67
$ dig +noall +answer -x 172.217.22.67
67.22.217.172.in-addr.arpa. 85372 IN    PTR fra15s17-in-f3.1e100.net.
67.22.217.172.in-addr.arpa. 85372 IN    PTR fra15s17-in-f67.1e100.net.

Note that the IP of the PTR record is reversed: 172.217.22.67 <=> 67.22.217.172

So www.google.com has a proper reverse dns entry.

If your domain has no reverse dns pointer set you will find an entry like this in your apache error log (unless you have configured it to be in a different location it should be /var/log/apache2/error.log):

[Wed Dec 05 16:18:23.854771 2018] [authz_core:error] [pid 4711] [client W.X.Y.Z:54050] AH01630: client denied by server configuration: /var/www/example.com/x

As a workaround you could just use Require ip:

<Location "/x">
    Require ip W.X.Y.Z
</Location>

where W.X.Y.Z is your IP according to the entry in the error.log.

Hope this helps, if so I would be glad if you would accept the answer.

answered Dec 5, 2018 at 16:25

digijay

1,3764 gold badges17 silver badges29 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

digijay Over a year ago

Hi Netanel, could you check again if you have any other directive affecting Location /x? This could be an alias or a Directory directive or something the like. Also, could you check if Require ip works?

DemonExposer · Accepted Answer · 2024-02-01 14:43:33Z

1

This is a real issue with no proper solutions on stackoverflow, so let me give the solution right here:

SetEnvIf Host ^myhost\.com$ valid_domain

<Location "/x">
    Require env valid_domain
</Location>

I don't know why this solves it, but it does

answered Feb 1, 2024 at 14:43

DemonExposer

3701 gold badge3 silver badges14 bronze badges

Collectives™ on Stack Overflow

How to allow access only from a specific host on Apache Httpd 2.4?

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related