Apache .htaccess File to Restrict Access to All Files Unless Local IP

Question

I am wanting to restrict access to a website to people inside of my network. If someone from outside hits the site they will be redirected to another page.

How do I configure these two different actions based on IP address?

Answer 1

Since you don't want to just prevent page loads from the external networks, but want to send them to a different page, you will need to use mod_rewrite. Assuming your local net is 192.168.1.0/24:

RewriteEngine On
RewriteCond %{REMOTE_ADDR} !^192\.168\.1
RewriteCond !^/foreigners/page
RewriteRule .* /foreigners/page [R,L]

You don't actually need to restrict the page, because the rewrite rules will ensure that the foreigners never see the page.

Note, this is not completely tested, but should get you down the path you want.

Answer 2

Here is what finally worked! Thanks for everyone's help getting me close.

RewriteEngine On
RewriteCond %{REMOTE_ADDR} !^10\.5
RewriteCond %{REQUEST_URI} !^visitor\.php
RewriteRule .* visitor.php

Answer 3

The restriction is done as follows:

<Directory /var/www/your-root-folder/>
        Options Indexes FollowSymLinks Multiviews
        AllowOverride All

        Order Deny,Allow
        Deny from all
        # Allow only from LAN subnet
        Allow from 192.168.1.0/255.255.255.0
</Directory>

Then, if you want an automatic redirection for users outside of your local subnet, you'll want to modify the default handling of "403 Forbidden". My example redirects to "index.php".

ErrorDocument 403 /index.php

Answer 4

try this

order deny, allow

deny from all

allow from 192.168