All files from this thread

File Name	File Size		Posted by	Date
ngxinx.conf	4.9 KB	open | download	sandeep dubey	01/25/2023	Read message

Hi Sandeep,

I rather suspect that your top two CIDR allow lines are allowing too
many people in.

Remove them, and check that only the last two lines are
allowed in.

Then create the two top addresses very carefully, and test.

1.2.3.4/8 allows all C level addresses of the format 1.*.*.* in. I think
you need 1.2.3.4/24 which allows all of the format
1.2.3.*

Hope this helps.

Ian

On 23/01/2023 16:34, sandeep dubey wrote:
> Hello,
>
> I am trying to restrict some Location block in my Nginx configuration to
> specific IPs. Below are the changes I made -
>
> Version: nginx:1.21.0
>
> location / {
>             proxy_pass http://127.0.0.1:8080 http://127.0.0.1:8080;
>         }
>
>   location = /auth {
>             proxy_pass http://127.0.0.1:8080 http://127.0.0.1:8080;
>             allow 1.2.3.4/8 http://1.2.3.4/8;
>             allow 5.6.7.8/16 http://5.6.7.8/16;
>             allow my.vpn.ip.here;
>             allow my.public.ip.here;
>             deny all;
>             error_page 403 /usr/share/nginx/html/403.html;
>             auth_basic "Administrator’s area";
>             auth_basic_user_file /etc/nginx/.htpasswd;
>         }
>
> Here, the deny rule is not working. Users are still able to access the
> page publicly. Am I missing something?
>
> --
> Regards,
> Sandeep
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> https://mailman.nginx.org/mailman/listinfo/nginx

--
Ian Hobson
Tel (+66) 626 544 695
_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx