WWW.NOGNOG.COM

Apache - 私的TIPS

• はじめに
  
  
  • Apacheの私的TIPS。
    
  
  
• 特定のネットワーク(10.0.0.0/8, 172.16.0.0/26, 192.168.0.0/24)からのみを認証無しでアクセスさせる
  
  
  # vi /usr/local/apache/htdocs/.htpasswd
  

  AuthType        Basic
  AuthName        "Who are you?"
  AuthUserFile    /usr/local/apache/htdocs/.htpasswd
  AuthGroupFile   /dev/null
  require         valid-user
  Order           allow,deny
  allow from     10.0.0.0/8 172.16.0.0/26 192.168.0.0/24
  Satisfy any

• 特定のアクセスをログに記述させない
  
  
  # vi /usr/local/apache/conf/httpd.conf
  
  

  SetEnvIf Request_URI "default\.ida" SAMPLE
  SetEnvIf Request_URI "root\.exe" SAMPLE
  SetEnvIf Request_URI "cmd\.exe" SAMPLE
  SetEnvIf Remote_Addr "10.\.*\.*\.*" SAMPLE
  SetEnvIf Remote_Addr "172\.16\.*\.*" SAMPLE
  SetEnvIf Remote_Addr "192\.168\.0\.*" SAMPLE
  SetEnvIf Referer "example\.\.com" SAMPLE
  SetEnvIf Referer "example\.jp" SAMPLE
  
  CustomLog /usr/local/apache/logs/access_log combined env=!SAMPLE
  			

• HTTPステータス
  
  
  http://www.zdnet.co.jp/help/tips/linux/l0466.html