Comments on: mod_rewrite and APEX part 2

By: Anton Nielsen

Anton Nielsen — Fri, 12 Sep 2008 14:59:56 +0000

Tyler,

This is a fairly secure method and we have used the same rules a few times. In general I have favored using Apache as reverse proxy for external traffic to deny the traffic I don’t want, but that has challenges of its own. This works well and does not require any additional hardware, network configs or installations. Nice post.

Anton

By: Tyler Muth

Tyler Muth — Fri, 15 Aug 2008 01:26:54 +0000

Thanks to Joel Kallman for pointing out that Application 4155 is used for end-user password resets and should be exempt from this policy. I added line 1 to account for this.

By: Christopher Beck

Christopher Beck — Wed, 13 Aug 2008 22:31:59 +0000

Tyler,

Think you need to change Line 2 to this:

RewriteCond %{REMOTE_ADDR} !^(127\.[0]{1,3}\.[0]{1,3}\.[0]{1,2}1|192\.168\.[0]{1,2}1\.[0-9]{1,3})$

basically 192.168.1.1 and 192.168.001.01 are the same thing so you need to handle the possibility of leading zeros.

chris.