[Xitami] restricting access

Simon McVittie xitami@lists.xitami.org
Mon, 29 Oct 2001 08:46:53 +0000


[Security]
    webmask=!123.45.67.89,*

will deny requests from the IP 123.45.67.89 then allow from everyone else. 
See <your Xitami docs>/index4.htm#webmask (usually accessible as 
http://127.0.0.1/xitami/index4.htm#webmask while Xitami is running) for 
more details.

Note that, for real security, it may be better to IPban people using a 
firewall (if you do that, anyone connecting to your server from a banned IP 
will usually get no indication that a server even exists at your IP - they 
won't get an error from Xitami, but their computer will generate an error 
when its request times out). If you're doing this to prevent Code Red or 
other virus traffic, this is probably A Good Thing (the more time the virus 
spends waiting for a response which isn't going to arrive, the less time it 
has to flood you or other servers with requests).

Also note that the banned computer will be able to access your server 
through a proxy like their ISP's web proxy or the Google cache or whatever. 
If you're banning a human, this is an issue - if you're banning a 
virus-infected host, this shouldn't be a problem.