up vote 0 down vote favorite
share [g+] share [fb]

I want to allow access to a folder from a "domain name" instead of IP address in apache. Now, allow from accepts domains as arguments, but I think it also does a reverse DNS lookup to cross check (which is good but too strict for me). Is there a way to configure apache not to do the reverse dns check (for that particular allow from directive).

((Basically, I want to allow access only from my PC, which has a dynamic IP address. I have mapped it to a domain using DynDns - however the reverse lookup of my "dynamic IP" will not resolve to the domain)).

Alternately, if someone can suggest a free service that also configures reverse DNS lookup for my dynamic IP (dont know if its possible in first place), that would do the trick as well.

Thanks!

JP

link|improve this question
Forgive the query, but how do you propose that apache should know what domain the connection comes from without doing a reverse-lookup on the address? – MadHatter Oct 20 '10 at 7:26
Which OS is your server running on ? – Iain♦ Oct 20 '10 at 8:53
@MadHatter: This is what I thought - if I browse a site, it can detect my IP address (just like whatismyip.com or any website for that matter). Now, I thought that if my Apache directive is say "Allow from mypersonalpc.webhop.net", then apache will do forward lookup on mypersonalpc.webhop.net, and then see if it matches the IP address of the person browsing the site. Am I missing something here? My problem is that forward dns lookup on mypersonalpc.webhop.net resolves to my current IP, but reverse lookup on my IP resolves to my ISP, and not mypersonalpc.webhop.net. – JP19 Oct 20 '10 at 13:25
@lain: I am on linux. Ubuntu. – JP19 Oct 20 '10 at 13:28
Hmm.. looks like I need to learn more. Apparently, the server has access to remote hostname, not remote IP, and then to get IP it does a reverse lookup, right? – JP19 Oct 20 '10 at 13:54
show 1 more comment
feedback

1 Answer

up vote 2 down vote

Short answer is no, as Apache's Allow from must do a reverse and forward DNS lookup:

"This configuration will cause Apache to perform a double reverse DNS lookup on the client IP address, regardless of the setting of the HostnameLookups directive. It will do a reverse DNS lookup on the IP address to find the associated hostname, and then do a forward lookup on the hostname to assure that it matches the original IP address. Only if the forward and reverse DNS are consistent and the hostname matches will access be allowed."

My recommendation would be to put some sort of authentication on that particular directory instead of trying to restrict by hostname.

link|improve this answer
I planned to put authentication also but thought would make it more secure by using AllowFrom. I have an idea - just like the DynDns update script, I will write a script to upload a .htacess file to my server everytime my personal machines IP changes. – JP19 Oct 20 '10 at 13:27
feedback

Your Answer

 
or
required, but never shown
discard