Changes between Version 95 and Version 96 of NewLiveServer

Timestamp:

03/15/12 13:40:56 (5 years ago)

Author:

chris

Comment:

varnish documentation updated

NewLiveServer

@@ -186 +186 @@
 The memory was set to 256M and was increased after more RAM was added to the server, see ticket:397.
 
-And in /etc/varnish/default.vcl :
+And in /etc/varnish/default.vcl the following:
 
 {{{
@@ -200 +200 @@
   "127.0.0.1";
 }
+acl local {
+  "localhost";         // myself
+  "127.0.0.1";         // myself
+  "81.95.52.88";       // this machines main ip address
+}
+
 
 # chris
@@ -209 +215 @@
     ## Pass cron jobs and server-status
     if (req.url ~ "cron.php") {
-      return (pass);
+      if (client.ip ~ local) {
+        return (pass);
+      }
+      else {
+        error 403 "Access Denied";
+      }
     }
-    if (req.url ~ ".*/server-status$") {
-      return (pass);
+    if (req.url ~ "/server-status$") {
+      if (client.ip ~ local) {
+        return (pass);
+      }
+      else {
+        error 403 "Access Denied";
+      }
+    }
+    if (req.url ~ "apc_info.php") {
+      if (client.ip ~ local) {
+        return (pass);
+      }
+      else {
+        error 403 "Access Denied";
+      }
     }
 
@@ -298 +322 @@
 See http://www.agentbob.info/agentbob/g3/83-AB.html
 
+The security hole for things that apache only made available to local host was fixed on ticket:357#comment:11
+
 == apc ==