0

My users connect to a vpn network and i want to offer them a webservice, but limiting the access only through their vpn ips.

I got this so far

# ALLOW USER BY IP
<Limit GET POST>
 order deny,allow
 deny from all
 allow from 201.159.xxx.xxx
</Limit>

On .htacccess

I am trying to setup this on AWS with debian.

any suggestions would be appreciated

Improve this question
1
  • What IP addresses do your clients obtain through the VPN service?
    – EEAA
    Mar 24, 2015 at 17:54

1 Answer 1

Reset to default
0

There is a bit lack of information:

  • would be server(nginx/apache/etc) dedicated for vpn client serving or global/vpn(server should be available globally in the internet)?
  • topology sample of the network, your sever and clients sample

I assuming that you have some set of clients which have access to vpn dedicated network with some resources inside and you will add there new internal-only service.

For vpn clients only: you could up http server for the listen only on vpn interface and that's it, nothing more is required.

For serving global/vpn: you should decide which endpoints should be accessible only from vpn network and allow them, using access module of your http server by network mask

Please note, that in all cases your instance should have access to your vpn network

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .