summaryrefslogtreecommitdiff
path: root/network/mod_hosts_access/README
diff options
context:
space:
mode:
Diffstat (limited to 'network/mod_hosts_access/README')
-rw-r--r--network/mod_hosts_access/README27
1 files changed, 27 insertions, 0 deletions
diff --git a/network/mod_hosts_access/README b/network/mod_hosts_access/README
new file mode 100644
index 0000000000..7ee4568d72
--- /dev/null
+++ b/network/mod_hosts_access/README
@@ -0,0 +1,27 @@
+mod_hosts_access
+
+This is a DSO (dynamically shared object) module for the Apache webserver
+that uses libwrap (TCP Wrapper) to check if the connecting hosts is allowed.
+
+To enable it, add to /etc/apache/httpd.conf following lines:
+
+LoadModule hosts_access_module libexec/apache/mod_hosts_access.so
+AddModule mod_hosts_access.c
+
+At appropriate places (i.e. where other modules are loaded similarly).
+
+The /etc/hosts.{allow,deny} access control checking for the "httpd" service
+can now be enabled or disabled on a per directory basis, by adding HostsAccess
+directive to its declaration, e.g.:
+
+# First, we configure the "default" to be a very restrictive set of
+# permissions.
+#
+<Directory />
+ HostsAccess On
+ Options FollowSymLinks
+ AllowOverride None
+</Directory>
+
+The same can be done in a .htaccess file if AllowOverride Limit has been set.
+