iTP Secure WebServer System Administrator's Guide (Version 7.0)

Configuring the iTP Secure WebServer
iTP Secure WebServer System Administrator’s Guide—523346-012
7-30
Granting Access by Host Name/IP Address
A Region command is a procedure that either runs to completion or calls a result
command such as Deny, Redirect, or Allow. When a result command other than
Allow is called, command processing stops; when Allow is called, the server
executes the requested access immediately.
If all the commands in a Region directive run to completion, the server proceeds to
compare the current URL against the pattern in the next Region directive in order. In
the case of a match, the server processes the corresponding commands as previously
described. When all the Region directives in the configuration file have been
processed, the server proceeds with the requested access (unless Allow was called
earlier).
More than one Region directive in the same configuration file can specify the same
matching pattern. For example:
Region /foo {
command1
command2
}
Region /foo {
command3
command4
}
The commands for controlling client access to your server are introduced in the
following subsections. For further information about these commands, see Region on
page A-49.
Granting Access by Host Name/IP Address
You can grant access to specified regions on your server on the basis of the client host
name. To control access by host name, you use the AllowHost command in a
Region directive as:
AllowHost host_pattern host_pattern ...
where:
host_pattern
specifies one or more client host names or IP addresses. If a Web client host name
or an IP address matches a specified pattern, the Web client is granted access to
the region specified in the containing Region directive. All other clients are denied
access.
For example, you are working on a project with another company whose domain is
widget.com and you want to grant employees in this other company (along with
those in your own company) access to the design documents in directory