blueice 发表于 2018-11-26 06:35:28

apache使用.htaccess进行基于IP地址的访问控制

  client 192.168.2.126
  server 192.168.2.111
  修改httpd.conf
  
    Options FollowSymLinks
    AllowOverride all

  注:“/”这个可以根据实际需要更改。
  设置好站点日志路径
  service httpd restart
  vim /data/webroot/shopex/.htaccess
  Order allow,deny
allow from all
deny from 192.168.2.112/28
  client访问192.168.2.111/phpinfo.php,无法访问:
  access日志结果:
  # less /data/webroot/2012_07_19_abc.com_access_log
192.168.2.126 - - "GET /phpinfo.php HTTP/1.1" 403 214 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1"
  error日志结果:
  # less /data/webroot/2012_07_19_abc.com_error_log
client denied by server configuration: /data/webroot/shopex/phpinfo.php
  vim /data/webroot/shopex/.htaccess
Order allow,deny
allow from all
deny from 192.168.2.192/28
  client访问192.168.2.111/phpinfo.php,可以访问:
  access日志:红色部分为新产生的日志
  # less /data/webroot/2012_07_19_maimaicha.com_access_log
192.168.2.126 - - "GET /phpinfo2.php HTTP/1.1" 403 214 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1"
192.168.2.126 - - "GET /phpinfo2.php HTTP/1.1" 200 47726 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1"
192.168.2.126 - - "GET /phpinfo2.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2524 "http://192.168.2.111/phpinfo2.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1"
192.168.2.126 - - "GET /phpinfo2.php?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2146 "http://192.168.2.111/phpinfo2.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1"
  error日志:没有再有新的错误日志
  # less /data/webroot/2012_07_19_maimaicha.com_error_log
client denied by server configuration: /data/webroot/shopex/phpinfo2.php



页: [1]
查看完整版本: apache使用.htaccess进行基于IP地址的访问控制