Changes between Version 71 and Version 72 of DevelopmentServer

Timestamp:

03/15/12 13:45:13 (5 years ago)

Author:

chris

Comment:

varnish documentation updated

DevelopmentServer

@@ -111 +111 @@
 }
 
+acl local {
+  "localhost";         // myself
+  "127.0.0.1";         // myself
+  "81.95.52.78";       // this machines main ip address
+  "81.95.52.79";       // this machines 2nd ip address
+  "81.95.52.80";       // this machines 3rd ip address
+}
+
+
 sub vcl_recv {
 
@@ -118 +127 @@
     ## Pass cron jobs and server-status
     if (req.url ~ "cron.php") {
-      return (pass);
-    }
-    if (req.url ~ ".*/server-status$") {
-      return (pass);
+      if (client.ip ~ local) {
+        return (pass);
+      }
+      else {
+        error 403 "Access Denied";
+      }
+    }
+    if (req.url ~ "/server-status$") {
+      if (client.ip ~ local) {
+        return (pass);
+      }
+      else {
+        error 403 "Access Denied";
+      }
+    }
+    if (req.url ~ "apc_info.php") {
+      if (client.ip ~ local) {
+        return (pass);
+      }
+      else {
+        error 403 "Access Denied";
+      }
     }
 
@@ -199 +226 @@
 }
 }}}
+
+The security hole that resulted in resources that apache only made available to localhost being available to all via varnish was closed on ticket:357#comment:11
 
 == Piwik ==