[Zope] zope w. apache security question

Dieter Maurer dieter@handshake.de
Sun, 5 May 2002 22:02:48 +0200


davis marques writes:
 > I'm running Zope with Apache/PCGI and am wondering if there's any means by 
 > which you can prevent people from getting the /manage login dialog from 
 > outside a designated domain or IP range?
Probably yes, though I did not yet try it:

  I would use a rewrite rule that redirects URLs containing "manage"
  (after a '/') to a page saying "forbidden". This will definitely work.

  Apache supports conditional rewrite rules. I would look whether
  the condition can be specified based on the incoming IP.
  I am not sure whether this is possible, but if it is, your
  problem is solved.
 

Dieter