Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can i allow access to a domain in lighttpd for only some of my own machines when they don't have (always) a static ip?

share|improve this question
up vote 0 down vote accepted

One possibility would be to set up a firewall and to packet filter it based on MAC addresses, which should be static even for dynamic IPs.

You could also rely on mod_auth and only allow authenticated connections to these domains.

A bit more complex than a network based solution but you could possibly rely on SSL client authentication.

  1. Set up a SSL proxy e.g. pound. Make it listen to port 443 (or other port) and forward connections to the server running lighttpd.
  2. Configure pound to verify client certs using your own CA and automatically reject invalid client certificates.
  3. Install client certs generated by your own CA on the client browsers.
  4. Configure lighttpd to only accept connections from pound for the specific domains. If pound was installed on the same machine, only accept connections from the localhost.
  5. Access these domains over SSL.
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.