The Order/Allow/Deny directives are deprecated (as of Apache 2.4)
So, using the new "Required" directives, how can I allow access to a directory from an internal IP only?
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
It's actually MUCH simpler in Apache2.4!
Let's say that you want PHPMyAdmin to be accessible ONLY on your internal network. You could do something like this
<Directory /usr/share/phpmyadmin> AllowOverride None Require ip 192.168.1.0/24 </Directory>
AllowOverride None: Tells Apache that .htaccess files are not allowed to override this rule
Require ip 192.168.1.0/24 tells Apache that you MUST be on the internal network in order to access this directory. (the
/24 is called CIDR notation and evaluates to the subnet mask 255.255.255.0. More on that here)
That's all there is to it!
(Natrually you will need to replace the IP with one that matches your internal network)