Forum

HTTP auth excepting IP range

James
21 December 2014, 05:11
I've been digging around in the manpage, but for some reason I can't seem to find the option to exempt an IP range from HTTP authentication.

My goal is for LAN, localhost, etc to be able to connect with no inconveniences, but I want the Internet to have to pass through that layer of protection. I'm guessing the best way to do that would be "whitelisting" 192.168.0.1/24, 10.0.0.0/8, 127.0.0.1/8, and any others that might be considered "private".
However, I can no longer seem to find the option for this. I was sure I saw it a while back!

Hiawatha version: 9.9
Operating System: Ubuntu 14.04.1 LTS
Hugo Leisink
21 December 2014, 08:27
Use the AccessList option:
VirtualHost {
...
PasswordFile = (Basic|Digest):<passwordfile>
AccessList = allow 192.168.0.0/24, allow 10.0.0.0/8, allow 127.0.0.0/8, pwd all
}
James
21 December 2014, 18:43
Thanks!
This topic has been closed.