Allow access via reverse proxy by http referer

Question

I've just been given an apache2 reverse proxy server to look after. I've been asked to set up access a gis system using https which is all fine. I want to know if there's any way of configuring the vhost so it only allows access if the http header referer is as specified by me? I.e if the http header to access the gis system doesn't have the right referer, the rproxy denies access.

I'm trying:

RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_REFERER} !^(.*?)\.?(mydomain\.co\.uk|mydomain\.com) (\/?.*) [NC]
RewriteRule ^.*$ http://www.mydomain.co.uk/not_allowed_here.html [R=301,L]

uax968 · Accepted Answer · 2020-03-27 11:22:30Z

1

I got there in the end:

> SetEnvIf Referer
> ^https?:\/\/[^.]+\.(?>mydomain\.co\.uk|mydomain\.com).*$ refererok
> 
> <Location />
>     order deny,allow
>     deny from all </Location>
> 
> <Location /set2/>
>     order deny,allow
>     allow from all </Location>
> 
> <Location /set1/>
>     order deny,allow
>     deny from all
>         allow from env=refererok </Location>

answered Mar 27, 2020 at 11:22

uax968

113 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Nir O. Over a year ago

is this even valid? it seems that your Location tags are self-closing, instead of having content

Collectives™ on Stack Overflow

Allow access via reverse proxy by http referer

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related