I have an Apache server in a DMZ, reachaable on the LAN from 192.168.1.1, public 123.456.789.123. I'm trying to get it to require authentication if the inbound hits are coming from the public side. This doesn't seem to work:
SetEnvIf SERVER_ADDR 123.456.789.123 local_nic=1
<Location /junk> Order Deny,Allow AuthName "Access required" AuthType Basic AuthUserFile /etc/httpd/conf/htpasswd Require valid-user </Location>
What am I doing wrong?
Sorry, HTML tags were wiping out my Apache directives.