Host-Based Access Control Directives

Basic Template

  <Location /private>
    order deny,allow
    deny from all
    allow from .cshl.org .nih.gov pesto.lsjs.org
    allow from 64.7.3.
  </Location>

Directives

allow from

Allow access to named hosts or subnets

• full.host.name
• .domain.name
• 192.168.32.2 (IP address)
• 192.168.32. (subnet)
• 192.168.32.1/255.255.255.0 (subnet with explicit netmask)
• 192.168.32.1/24 (CIDR format)

deny from

Deny access to named hosts or subnets

• (same host naming conventions)

order

Order in which to evaluate allow and deny directives.

deny,allow: allow most hosts (default)

allow,deny: deny most hosts

mutual-failure: deny any host not specifically mentioned

Previous

Contents

Next