Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
core.html	242.73 KB	-rw-r--r--	2026-06-12 05:08
directive-dict.html	18 KB	-rw-r--r--	2026-06-12 05:08
directives.html	58.15 KB	-rw-r--r--	2026-06-12 05:08
event.html	28.64 KB	-rw-r--r--	2026-06-12 05:08
index.html	24.57 KB	-rw-r--r--	2026-06-12 05:08
mod_access_compat.html	28.27 KB	-rw-r--r--	2026-06-12 05:08
mod_actions.html	13.55 KB	-rw-r--r--	2026-06-12 05:08
mod_alias.html	40.63 KB	-rw-r--r--	2026-06-12 05:08
mod_allowmethods.html	7.79 KB	-rw-r--r--	2026-06-12 05:08
mod_asis.html	8.65 KB	-rw-r--r--	2026-06-12 05:08
mod_auth_basic.html	19.39 KB	-rw-r--r--	2026-06-12 05:08
mod_auth_digest.html	20.06 KB	-rw-r--r--	2026-06-12 05:08
mod_auth_form.html	50.26 KB	-rw-r--r--	2026-06-12 05:08
mod_authn_anon.html	16.37 KB	-rw-r--r--	2026-06-12 05:08
mod_authn_core.html	16.45 KB	-rw-r--r--	2026-06-12 05:08
mod_authn_dbd.html	15.01 KB	-rw-r--r--	2026-06-12 05:08
mod_authn_dbm.html	12.48 KB	-rw-r--r--	2026-06-12 05:08
mod_authn_file.html	11.17 KB	-rw-r--r--	2026-06-12 05:08
mod_authn_socache.html	18.79 KB	-rw-r--r--	2026-06-12 05:08
mod_authnz_fcgi.html	26.93 KB	-rw-r--r--	2026-06-12 05:08
mod_authnz_ldap.html	86.06 KB	-rw-r--r--	2026-06-12 05:08
mod_authz_core.html	39.59 KB	-rw-r--r--	2026-06-12 05:08
mod_authz_dbd.html	18.13 KB	-rw-r--r--	2026-06-12 05:08
mod_authz_dbm.html	12.7 KB	-rw-r--r--	2026-06-12 05:08
mod_authz_groupfile.html	10.24 KB	-rw-r--r--	2026-06-12 05:08
mod_authz_host.html	13.12 KB	-rw-r--r--	2026-06-12 05:08
mod_authz_owner.html	11 KB	-rw-r--r--	2026-06-12 05:08
mod_authz_user.html	7.91 KB	-rw-r--r--	2026-06-12 05:08
mod_autoindex.html	63.19 KB	-rw-r--r--	2026-06-12 05:08
mod_brotli.html	22.65 KB	-rw-r--r--	2026-06-12 05:08
mod_buffer.html	8.76 KB	-rw-r--r--	2026-06-12 05:08
mod_cache.html	69.74 KB	-rw-r--r--	2026-06-12 05:08
mod_cache_disk.html	20.06 KB	-rw-r--r--	2026-06-12 05:08
mod_cache_socache.html	18.21 KB	-rw-r--r--	2026-06-12 05:08
mod_cern_meta.html	10.83 KB	-rw-r--r--	2026-06-12 05:08
mod_cgi.html	19.94 KB	-rw-r--r--	2026-06-12 05:08
mod_cgid.html	11.36 KB	-rw-r--r--	2026-06-12 05:08
mod_charset_lite.html	15.11 KB	-rw-r--r--	2026-06-12 05:08
mod_data.html	7.2 KB	-rw-r--r--	2026-06-12 05:08
mod_dav.html	19.88 KB	-rw-r--r--	2026-06-12 05:08
mod_dav_fs.html	10.54 KB	-rw-r--r--	2026-06-12 05:08
mod_dav_lock.html	9.51 KB	-rw-r--r--	2026-06-12 05:08
mod_dbd.html	24.89 KB	-rw-r--r--	2026-06-12 05:08
mod_deflate.html	31.15 KB	-rw-r--r--	2026-06-12 05:08
mod_dialup.html	7.2 KB	-rw-r--r--	2026-06-12 05:08
mod_dir.html	23.75 KB	-rw-r--r--	2026-06-12 05:08
mod_dumpio.html	9.41 KB	-rw-r--r--	2026-06-12 05:08
mod_echo.html	7.16 KB	-rw-r--r--	2026-06-12 05:08
mod_env.html	11.48 KB	-rw-r--r--	2026-06-12 05:08
mod_example_hooks.html	11.01 KB	-rw-r--r--	2026-06-12 05:08
mod_expires.html	17.21 KB	-rw-r--r--	2026-06-12 05:08
mod_ext_filter.html	18.05 KB	-rw-r--r--	2026-06-12 05:08
mod_file_cache.html	15.2 KB	-rw-r--r--	2026-06-12 05:08
mod_filter.html	33.35 KB	-rw-r--r--	2026-06-12 05:08
mod_headers.html	34.06 KB	-rw-r--r--	2026-06-12 05:08
mod_heartbeat.html	9.29 KB	-rw-r--r--	2026-06-12 05:08
mod_heartmonitor.html	11.92 KB	-rw-r--r--	2026-06-12 05:08
mod_http2.html	75.84 KB	-rw-r--r--	2026-06-12 05:08
mod_ident.html	9.74 KB	-rw-r--r--	2026-06-12 05:08
mod_imagemap.html	21.06 KB	-rw-r--r--	2026-06-12 05:08
mod_include.html	59.69 KB	-rw-r--r--	2026-06-12 05:08
mod_info.html	14.52 KB	-rw-r--r--	2026-06-12 05:08
mod_isapi.html	23.44 KB	-rw-r--r--	2026-06-12 05:08
mod_lbmethod_bybusyness.html	7.6 KB	-rw-r--r--	2026-06-12 05:08
mod_lbmethod_byrequests.html	12.3 KB	-rw-r--r--	2026-06-12 05:08
mod_lbmethod_bytraffic.html	7.95 KB	-rw-r--r--	2026-06-12 05:08
mod_lbmethod_heartbeat.html	8.02 KB	-rw-r--r--	2026-06-12 05:08
mod_ldap.html	50.89 KB	-rw-r--r--	2026-06-12 05:08
mod_log_config.html	38.27 KB	-rw-r--r--	2026-06-12 05:08
mod_log_debug.html	9.95 KB	-rw-r--r--	2026-06-12 05:08
mod_log_forensic.html	12.64 KB	-rw-r--r--	2026-06-12 05:08
mod_logio.html	10.29 KB	-rw-r--r--	2026-06-12 05:08
mod_lua.html	93.06 KB	-rw-r--r--	2026-06-12 05:08
mod_macro.html	15.29 KB	-rw-r--r--	2026-06-12 05:08
mod_md.html	109.91 KB	-rw-r--r--	2026-06-12 05:08
mod_mime.html	66.05 KB	-rw-r--r--	2026-06-12 05:08
mod_mime_magic.html	16.52 KB	-rw-r--r--	2026-06-12 05:08
mod_negotiation.html	21.68 KB	-rw-r--r--	2026-06-12 05:08
mod_nw_ssl.html	9.27 KB	-rw-r--r--	2026-06-12 05:08
mod_privileges.html	29.36 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy.html	137.06 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_ajp.html	32.56 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_balancer.html	23.03 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_connect.html	9.85 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_express.html	13.19 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_fcgi.html	22.14 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_fdpass.html	7.2 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_ftp.html	18.84 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_hcheck.html	17.43 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_html.html	34.16 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_http.html	11.63 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_http2.html	10.05 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_scgi.html	14.49 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_uwsgi.html	8.15 KB	-rw-r--r--	2026-06-12 05:08
mod_proxy_wstunnel.html	10.73 KB	-rw-r--r--	2026-06-12 05:08
mod_ratelimit.html	6.72 KB	-rw-r--r--	2026-06-12 05:08
mod_reflector.html	8.28 KB	-rw-r--r--	2026-06-12 05:08
mod_remoteip.html	26.54 KB	-rw-r--r--	2026-06-12 05:08
mod_reqtimeout.html	12.49 KB	-rw-r--r--	2026-06-12 05:08
mod_request.html	9.03 KB	-rw-r--r--	2026-06-12 05:08
mod_rewrite.html	82.27 KB	-rw-r--r--	2026-06-12 05:08
mod_sed.html	11.53 KB	-rw-r--r--	2026-06-12 05:08
mod_session.html	35.31 KB	-rw-r--r--	2026-06-12 05:08
mod_session_cookie.html	13.55 KB	-rw-r--r--	2026-06-12 05:08
mod_session_crypto.html	17.73 KB	-rw-r--r--	2026-06-12 05:08
mod_session_dbd.html	25.2 KB	-rw-r--r--	2026-06-12 05:08
mod_setenvif.html	21.77 KB	-rw-r--r--	2026-06-12 05:08
mod_slotmem_plain.html	7.76 KB	-rw-r--r--	2026-06-12 05:08
mod_slotmem_shm.html	8.36 KB	-rw-r--r--	2026-06-12 05:08
mod_so.html	13.5 KB	-rw-r--r--	2026-06-12 05:08
mod_socache_dbm.html	5.82 KB	-rw-r--r--	2026-06-12 05:08
mod_socache_dc.html	5.87 KB	-rw-r--r--	2026-06-12 05:08
mod_socache_memcache.html	8.34 KB	-rw-r--r--	2026-06-12 05:08
mod_socache_redis.html	10 KB	-rw-r--r--	2026-06-12 05:08
mod_socache_shmcb.html	5.9 KB	-rw-r--r--	2026-06-12 05:08
mod_speling.html	12.64 KB	-rw-r--r--	2026-06-12 05:08
mod_ssl.html	200.72 KB	-rw-r--r--	2026-06-12 05:08
mod_status.html	11.84 KB	-rw-r--r--	2026-06-12 05:08
mod_substitute.html	14.37 KB	-rw-r--r--	2026-06-12 05:08
mod_suexec.html	7.89 KB	-rw-r--r--	2026-06-12 05:08
mod_systemd.html	7.57 KB	-rw-r--r--	2026-06-12 05:08
mod_unique_id.html	14.89 KB	-rw-r--r--	2026-06-12 05:08
mod_unixd.html	13.54 KB	-rw-r--r--	2026-06-12 05:08
mod_userdir.html	12.36 KB	-rw-r--r--	2026-06-12 05:08
mod_usertrack.html	19.68 KB	-rw-r--r--	2026-06-12 05:08
mod_version.html	10.05 KB	-rw-r--r--	2026-06-12 05:08
mod_vhost_alias.html	21.12 KB	-rw-r--r--	2026-06-12 05:08
mod_watchdog.html	7.73 KB	-rw-r--r--	2026-06-12 05:08
mod_xml2enc.html	15.3 KB	-rw-r--r--	2026-06-12 05:08
module-dict.html	9.17 KB	-rw-r--r--	2026-06-12 05:08
mpm_common.html	64.92 KB	-rw-r--r--	2026-06-12 05:08
mpm_netware.html	9.82 KB	-rw-r--r--	2026-06-12 05:08
mpm_winnt.html	7.66 KB	-rw-r--r--	2026-06-12 05:08
mpmt_os2.html	7.5 KB	-rw-r--r--	2026-06-12 05:08
overrides.html	69.49 KB	-rw-r--r--	2026-06-12 05:08
prefork.html	16 KB	-rw-r--r--	2026-06-12 05:08
quickreference.html	194.69 KB	-rw-r--r--	2026-06-12 05:08
worker.html	15.56 KB	-rw-r--r--	2026-06-12 05:08

Rename

<!DOCTYPE html SYSTEM "about:legacy-compat">
<html lang="en"><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta content="width=device-width, initial-scale=1" name="viewport">

<title>mod_authz_host - Apache HTTP Server Version 2.4</title>
<link href="../../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet">
<link href="../../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size">
<link href="../../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css"><link rel="stylesheet" type="text/css" href="../../style/css/prettify.css">
<script src="../../style/scripts/prettify.min.js">
</script>

<p>The authorization providers implemented by <code class="module"><a href="../mod/mod_authz_host.html">mod_authz_host</a></code> are
    registered using the <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
    directive. The directive can be referenced within a
    <code class="directive"><a href="../mod/core.html#directory">&lt;Directory&gt;</a></code>,
    <code class="directive"><a href="../mod/core.html#files">&lt;Files&gt;</a></code>,
    or <code class="directive"><a href="../mod/core.html#location">&lt;Location&gt;</a></code> section
    as well as <code><a href="core.html#accessfilename">.htaccess</a>
    </code> files to control access to particular parts of the server.
    Access can be controlled based on the client hostname or IP address.</p>

<p>In general, access restriction directives apply to all
    access methods (<code>GET</code>, <code>PUT</code>,
    <code>POST</code>, etc). This is the desired behavior in most
    cases. However, it is possible to restrict some methods, while
    leaving other methods unrestricted, by enclosing the directives
    in a <code class="directive"><a href="../mod/core.html#limit">&lt;Limit&gt;</a></code> section.</p>
</div>
<div id="quickview"><h3>Topics</h3>
<ul id="topics">
<li><img alt="" src="../../images/down.gif"> <a href="#requiredirectives">The Require Directives</a></li>
</ul><h3 class="directives">Directives</h3>
<p>This module provides no
            directives.</p>
<h3>Bugfix checklist</h3><ul class="seealso"><li><a href="https://www.apache.org/dist/httpd/CHANGES_2.4">httpd changelog</a></li><li><a href="https://bz.apache.org/bugzilla/buglist.cgi?bug_status=__open__&amp;list_id=144532&amp;product=Apache%20httpd-2&amp;query_format=specific&amp;order=changeddate%20DESC%2Cpriority%2Cbug_severity&amp;component=mod_authz_host">Known issues</a></li><li><a href="https://bz.apache.org/bugzilla/enter_bug.cgi?product=Apache%20httpd-2&amp;component=mod_authz_host">Report a bug</a></li></ul><h3>See also</h3>
<ul class="seealso">
<li><a href="../howto/auth.html">Authentication, Authorization,
    and Access Control</a></li>
<li><code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code></li>
<li><a href="mod_authz_core.html#authzresults">Authorization Result States</a></li>
</ul></div>
<div class="top"><a href="#page-header"><img alt="top" src="../../images/up.gif"></a></div>
<div class="section">
<h2 id="requiredirectives">The Require Directives <a title="Permanent link" href="#requiredirectives" class="permalink">&para;</a></h2>

<p>Apache's <code class="directive"><a href="../mod/mod_authz_core.html#require">Require</a></code>
    directive is used during the authorization phase to ensure that a user is allowed or
    denied access to a resource.  mod_authz_host extends the
    authorization types with <code>ip</code>, <code>host</code>,
    <code>forward-dns</code> and <code>local</code>.
    Other authorization types may also be
    used but may require that additional authorization modules be loaded.</p>

<p>These authorization providers affect which hosts can
    access an area of the server. Access can be controlled by
    hostname, IP Address, or IP Address range.</p>

<p>Since v2.4.8, <a href="../expr.html">expressions</a> are supported
    within the host require directives.</p>

<h3 id="reqip">Require ip</h3>

<p>The <code>ip</code> provider allows access to the server
    to be controlled based on the IP address of the remote client.
    When <code>Require ip <var>ip-address</var></code> is specified,
    then the request is allowed access if the IP address matches.</p>

<p>A full IP address:</p>

<pre class="prettyprint lang-config">Require ip 10.1.2.3
Require ip 192.168.1.104 192.168.1.205</pre>

<p>An IP address of a host allowed access</p>

<p>A partial IP address:</p>

<pre class="prettyprint lang-config">Require ip 10.1
Require ip 10 172.20 192.168.2</pre>

<p>The first 1 to 3 bytes of an IP address, for subnet
    restriction.</p>

<p>A network/netmask pair:</p>

<pre class="prettyprint lang-config">Require ip 10.1.0.0/255.255.0.0</pre>

<p>A network a.b.c.d, and a netmask w.x.y.z. For more
    fine-grained subnet restriction.</p>

<p>A network/nnn CIDR specification:</p>

<pre class="prettyprint lang-config">Require ip 10.1.0.0/16</pre>

<p>Similar to the previous case, except the netmask consists of
    nnn high-order 1 bits.</p>

<p>Note that the last three examples above match exactly the
    same set of hosts.</p>

<p>IPv6 addresses and IPv6 subnets can be specified as shown
    below:</p>

<pre class="prettyprint lang-config">Require ip 2001:db8::a00:20ff:fea7:ccea
Require ip 2001:db8:1:1::a
Require ip 2001:db8:2:1::/64
Require ip 2001:db8:3::/48</pre>

<p>Note: As the IP addresses are parsed on startup, expressions are
    not evaluated at request time.</p>

<h3 id="reqhost">Require host</h3>

<p>The <code>host</code> provider allows access to the server
    to be controlled based on the host name of the remote client.
    When <code>Require host <var>host-name</var></code> is specified,
    then the request is allowed access if the host name matches.</p>

<p>A (partial) domain-name</p>

<pre class="prettyprint lang-config">Require host example.org
Require host .net example.edu</pre>

<p>Hosts whose names match, or end in, this string are allowed
    access. Only complete components are matched, so the above
    example will match <code>foo.example.org</code> but it will not
    match <code>fooexample.org</code>. This configuration will cause
    Apache to perform a double reverse DNS lookup on the client IP
    address, regardless of the setting of the <code class="directive"><a href="../mod/core.html#hostnamelookups">HostnameLookups</a></code> directive.  It will do
    a reverse DNS lookup on the IP address to find the associated
    hostname, and then do a forward lookup on the hostname to assure
    that it matches the original IP address.  Only if the forward
    and reverse DNS are consistent and the hostname matches will
    access be allowed.</p>

<h3 id="reqfwddns">Require forward-dns</h3>

<p>The <code>forward-dns</code> provider allows access to the server
    to be controlled based on simple host names.  When
    <code>Require forward-dns <var>host-name</var></code> is specified,
    all IP addresses corresponding to <code><var>host-name</var></code>
    are allowed access.</p>

<p>In contrast to the <code>host</code> provider, this provider does not
    rely on reverse DNS lookups: it simply queries the DNS for the host name
    and allows a client if its IP matches.  As a consequence, it will only
    work with complete host names that can be resolved in DNS, not partial domain names.  
    However, as the reverse DNS is not used, and DNS lookups occur at request processing
    time (instead of startup), it will work with clients which use a dynamic DNS service.</p>

<pre class="prettyprint lang-config">Require forward-dns dynamic.example.org</pre>

<p>A client the IP of which is resolved from the name
    <code>dynamic.example.org</code> will be granted access.</p>

<p>The <code>forward-dns</code> provider was added in 2.4.19.</p>

<h3 id="reqlocal">Require local</h3>

<p>The <code>local</code> provider allows access to the server if any
    of the following conditions is true:</p>

<ul>
        <li>the client address matches 127.0.0.0/8</li>
        <li>the client address is ::1</li>
        <li>both the client and the server address of the connection are
        the same</li>
    </ul>

<p>This allows a convenient way to match connections that originate from
    the local host:</p>

<pre class="prettyprint lang-config">Require local</pre>

<h3 id="proxy">Security Note</h3>

<p>If you are proxying content to your server, you need to be aware
    that the client address will be the address of your proxy server,
    not the address of the client, and so using the <code>Require</code>
    directive in this context may not do what you mean. See
    <code class="module"><a href="../mod/mod_remoteip.html">mod_remoteip</a></code> for one possible solution to this
    problem.</p>

</div>
</div>
<div class="bottomlang">
<p><span>Available Languages: </span><a href="../../en/mod/mod_authz_host.html" title="English">&nbsp;en&nbsp;</a> |
<a href="../../fr/mod/mod_authz_host.html" hreflang="fr" rel="alternate" title="Fran&ccedil;ais">&nbsp;fr&nbsp;</a></p>
</div><div id="footer">
<p class="apache">Copyright 2026 The Apache Software Foundation.<br>Licensed under the <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/index.html">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="https://cwiki.apache.org/confluence/display/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a> | <a href="https://bz.apache.org/bugzilla/enter_bug.cgi?product=Apache%20httpd-2">Report a bug</a></p></div><script><![CDATA[//><!]]></script>
</body></html>