iTP Secure WebServer System Administrator's Guide (iTPWebSvr 5.1+)

Configuring the iTP Secure WebServer
iTP Secure WebServer System Administrator’s Guide—522659-001
7-28
Granting Access by Host Name/IP Address
More than one Region directive in the same configuration file can specify the same
matching pattern. For example:
Region /foo {
command1
command2
}
Region /foo {
command3
command4
}
The commands for controlling client access to your server are introduced in the
following sections. For further information about these commands, refer to Region on
page A-39.
Granting Access by Host Name/IP Address
You can grant access to specified regions on your server on the basis of the client host
name. To control access by host name, you use the AllowHost command in a Region
directive as follows:
AllowHost host_pattern host_pattern ...
where:
host_pattern
specifies one or more client host names or IP addresses. If a web client host name or
an IP address matches a specified pattern, the web client is granted access to the
region specified in the containing Region directive. All other clients are denied
access.
For example, you are working on a project with another company whose domain is
widget.com and you wish to grant employees in this other company (along with
those in your own company) access to the design documents in directory
/secret-project. If your company domain is wonka.com, the following directive
would grant the desired access:
Region /secret-project/* {
AllowHost *.widget.com *.wonka.com
}
If a host name pattern is specified but the web client’s host name is not available (for
example, because the host’s IP address has not been registered with the DNS for reverse
lookup), the AllowHost command will deny access to the web client.