[Xitami] restricting access
Simon McVittie
xitami@lists.xitami.org
Mon, 29 Oct 2001 08:46:53 +0000
[Security]
webmask=!123.45.67.89,*
will deny requests from the IP 123.45.67.89 then allow from everyone else.
See <your Xitami docs>/index4.htm#webmask (usually accessible as
http://127.0.0.1/xitami/index4.htm#webmask while Xitami is running) for
more details.
Note that, for real security, it may be better to IPban people using a
firewall (if you do that, anyone connecting to your server from a banned IP
will usually get no indication that a server even exists at your IP - they
won't get an error from Xitami, but their computer will generate an error
when its request times out). If you're doing this to prevent Code Red or
other virus traffic, this is probably A Good Thing (the more time the virus
spends waiting for a response which isn't going to arrive, the less time it
has to flood you or other servers with requests).
Also note that the banned computer will be able to access your server
through a proxy like their ISP's web proxy or the Google cache or whatever.
If you're banning a human, this is an issue - if you're banning a
virus-infected host, this shouldn't be a problem.