I have an Apache server in a DMZ, reachaable on the LAN from, public 123.456.789.123. I'm trying to get it to require authentication if the inbound hits are coming from the public side. This doesn't seem to work:

SetEnvIf SERVER_ADDR 123.456.789.123 local_nic=1

<Location /junk>
  Order Deny,Allow
  AuthName "Access required"
  AuthType Basic
  AuthUserFile /etc/httpd/conf/htpasswd
  Require valid-user

What am I doing wrong?

Sorry, HTML tags were wiping out my Apache directives.

  • i guess something got lost in the formatting there, you are setting an env var but not doing anything with it later? Oct 21, 2010 at 20:55

1 Answer 1


Never mind - I found an easier way: require auth, allow 10.x.x.x, and Satisfy Any. That lets people on the LAN get in without passwords, and people on the WAN to require passwords.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .