<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 4, 2017 at 3:32 PM, Peter Bennett <span dir="ltr"><<a href="mailto:cats22@comcast.net" target="_blank">cats22@comcast.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><div><div class="h5">
<p><br>
</p>
<br>
<div class="m_-7244513128779277118moz-cite-prefix">On 10/04/2017 02:19 PM, Ian Evans
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">I haven't really used apache much, run my site on
nginx, so I'm just trying to secure mythweb (and eventually
zoneminder and phpmyadmin when I install them) to be local
access only so I can tunnel in via ssh.
<div><br>
</div>
<div>From my Googling I thought this would work in the
myhtweb.conf:</div>
<div><br>
</div>
<div>
<div> <Directory "/var/www/html/mythweb" ></div>
<div><br>
</div>
<div>
##############################<wbr>##############################<wbr>################</div>
<div> # I *strongly* urge you to turn on authentication for
MythWeb. It is disabled</div>
<div> # by default because it requires you to set up your
own password file. Please</div>
<div> # see the man page for htdigest and then configure
the following four directives</div>
<div> # to suit your authentication needs.</div>
<div> #</div>
<div> AuthType Digest</div>
<div> AuthName "MythTV"</div>
<div> AuthUserFile /etc/mythtv/htdigest<br>
</div>
<div> Require valid-user</div>
<div> BrowserMatch "MSIE"
AuthDigestEnableQueryStringHac<wbr>k=On</div>
<div>Require local<br>
</div>
</div>
<div>Satisfy all</div>
<div><br>
</div>
<div>Etc.</div>
<div><br>
</div>
<div>But after restarting apache I'm still able to access
mythweb from a computer outside localhost.</div>
<div><br>
</div>
<div>Any ideas? Thanks.</div>
</div>
<br>
<fieldset class="m_-7244513128779277118mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br></div></div>
This is what I use<br>
<br>
require ip 127.0.0.1 <a href="http://192.168.0.0/16" target="_blank">192.168.0.0/16</a><br>
<br>
You will need to adjust <a href="http://192.168.0.0/16" target="_blank">192.168.0.0/16</a> if your router is allocating
different ip address range<br>
<br>
This excludes all access from outside of my own local network.<br>
<br>
If you only want access from localhost <br>
require ip 127.0.0.1<span class="HOEnZb"><font color="#888888"><br>
</font></span></div><div text="#000000" bgcolor="#FFFFFF"><br></div></blockquote><div><br></div><div>Thanks for the config tip. </div></div><br></div></div>