Home / server / Questions / 502398
Accepted
SeinopSys
Asked: 2013-04-25 13:20:29 +0800 CST

.htacess IP allow & deny doesn't work

  • 772

I have this set in my .htacess file:

Order Allow,Deny
Deny from all
Allow from localhost
Allow from 86.101.198.88 (my ip)

ErrorDocument 404 /block/?code=404
ErrorDocument 403 /block/?code=403

But for some reason, I don't have permission to access from localhost and using my IP either. I just keep getting redirected to the ErrorDocument for error 403. What am I missing?

apache-2.2

1 Answers

  1. Best Answer

    From https://httpd.apache.org/docs/2.0/mod/mod_access.html

    Allow,Deny First,

    all Allow directives are evaluated; at least one must match, or the request is rejected. Next, all Deny directives are evaluated. If any matches, the request is rejected. Last, any requests which do not match an Allow or a Deny directive are denied by default.

    Since you have a Deny from all, and your order is Allow,Deny, everything will be blocked. You probably want order Deny,Allow instead.

    Deny,Allow

    First, all Deny directives are evaluated; if any match, the request is denied unless it also matches an Allow directive.

    • 2