Arch Linux

Seb74

Member

Registered: 2006-10-07

Posts: 89

How can my httpd be allowed contact???

My hosts.deny looks like
ALL: ALL: DENY

My hosts.allow I had to edit like this to get sshd "working".
sshd: ALL

But after installing Apache, well, it just worked, even though these hosts-files aren't supposed to allow it....unless they work in a very unlogical way

Just curious, thanks if anyone can explain

luca

Member

From: Rome

Registered: 2005-10-30

Posts: 280

Re: How can my httpd be allowed contact???

Hi Seb74,
I think that apache doesn't use tcp wrapper mechanism; so hosts.deny or hosts.allow don't work with it.

Seb74

Member

Registered: 2006-10-07

Posts: 89

Re: How can my httpd be allowed contact???

Hi Seb74,
I think that apache doesn't use tcp wrapper mechanism; so hosts.deny or hosts.allow don't work with it.

Didn't get much of what you said, but ok, there seems to be some explanation for it. Some (most?) services aren't stopped by hosts.deny.
Thanks

elasticdog

Member

From: Washington, USA

Registered: 2005-05-02

Posts: 995

Website

Re: How can my httpd be allowed contact???

I have a related question that came up at work the other day...is there a way to limit httpd access to a specific IP address range if you can't use <code>hosts.allow</code> and <code>hosts.deny</code>?

byte

Member

From: Düsseldorf (DE)

Registered: 2006-05-01

Posts: 2,046

Re: How can my httpd be allowed contact???

If you run ldd on a binary and see libwrap.so in the output then it has tcpwrapper support.

elasticdog: http://httpd.apache.org/docs/2.2/howto/access.html

---

1000

Seb74

Member

Registered: 2006-10-07

Posts: 89

Re: How can my httpd be allowed contact???

But what does tcpwrapper mean?

I think you can enter access rights in httpd.conf, but usually everyone has on allow all, but you can set IP's there I think instead.

elasticdog

Member

From: Washington, USA

Registered: 2005-05-02

Posts: 995

Website

Re: How can my httpd be allowed contact???

elasticdog: http://httpd.apache.org/docs/2.2/howto/access.html

Ahh HA!  Thanks byte!