[ILUG] Apache ReverseProxy and security...

[jez]

On Wed, Feb 21, 2007 at 05:16:03PM +0000, Gareth Eason wrote:
> 
> However, if I add access credentials, such as:
> <Directory "/someapp">
>       ProxyPass             http://app1.example.com:18001/
>       ProxyPassReverse      http://app1.example.com:18001/
>       Order Allow,Deny
>       Allow from 1.2.3.4
>       Deny from all
> </Directory>
> 
> I still am able to access the reverse proxied hosts from anywhere on the
> internet, not just 1.2.3.4.
> 

Try this:

<Proxy *>
        Order Allow,Deny
        Allow from 1.2.3.4
        Deny from all
</Proxy>	

<Directory "/someapp">
        ProxyPass             http://app1.example.com:18001/
        ProxyPassReverse      http://app1.example.com:18001/
</Directory>