Very Computer

Hello,
I have a webserver which should have limited
access from a subnet.
Works fine with an "access from xxx.xxx." directive.
Problem: There are proxies in the subnet.
If someone outside uses a proxy in authorized subnet,
he can access the webserver.

How can I avoid this "feature" if I haven't access
to the setup of the proxy-Server.

Thanks a lot
Stefan

--
----------------------------------------------------
Stefan Huelbrock
Voice (+49/0)7071-2977176, Fax (+49/0)7071-922983
University of Tuebingen, WSI, Computer Architecture
Koestlinstr. 6, D-72074 Tuebingen, Germany

----------------------------------------------------

Quote:> How can I avoid this "feature" if I haven't access
> to the setup of the proxy-Server.

I don't see any other sure way, given the situation that you describe.
Me, I deny outside access to the proxy, but you say that you can't alter
that.

There's no 100% certain way to recognize a call from a proxy, even if
you wanted to do that (which might be expensive in server resources
anyway).  But, if you _know_ exactly which proxies are involved and what
kind of HTTP headers they send (x-forwarded-for, etc.) then you could
perhaps use Apache's mod_rewrite to slew those callers off to an error
document.