[mapserver-users] RE ows_allowed_ip_list / ows_denied_ip_list not working

[Eichner, Andreas - SID]

Since *_ip_list supports ranges using CIDR notation, you might use
	Ows_denied_ip_list "0.0.0.0/0"
But instead of blocking _all_ IPs you should probably disable requests 
to this layer or service using
	ows_enable_request "!*"

> -----Ursprüngliche Nachricht-----
> Von: mapserver-users-bounces at lists.osgeo.org [mailto:mapserver-users-
> bounces at lists.osgeo.org] Im Auftrag von Vladimiro Bellini
> Gesendet: Donnerstag, 23. April 2015 16:29
> An: steve.toutant
> Cc: mapserver-users; mapserver-users-bounces
> Betreff: Re: [mapserver-users] RE ows_allowed_ip_list / ows_denied_ip_list
> not working
> 
> checking my access_log did the job for denied specific ip (i was using a
> wrong public ip).
> 
> but it didnt worked for "*" neither "all"
> 
> but hey, specific ip works for me.
> 
> Thanks!!
> 
> :)
> 
> 
> Vladimiro Bellini              __
> \ /| _ _|. _ . _ |__) _||. _ .
> 
> 2015-04-23 11:22 GMT-03:00 <Steve.Toutant at inspq.qc.ca>:
> 
> 
> 	Anything in your mapserver log? perhaps there is another problem in
> your mapfile
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Vladimiro Bellini <vlasvlasvlas at gmail.com>
> 
> 2015-04-23 10:06
> 
> A
> Steve.Toutant at inspq.qc.ca
> cc
> mapserver-users <mapserver-users at lists.osgeo.org>, mapserver-users-
> bounces at lists.osgeo.org
> Objet
> Re: RE [mapserver-users] ows_allowed_ip_list / ows_denied_ip_list not
> working
> 
> 
> 
> 
> 
> 
> 
> 
> 	Hi, i tried "all" and my ip, but i got the same result.. what could
> it be?
> 
> 	here's my full metadata (header metadata of mapfile, not in layers)
> 
> 	METADATA
> 	"ows_denied_ip_list" "all"
> 	"wms_service_onlineresource" "http://xxxxxxxxxxxx/cgi-
> bin/mapserv6?map=/xxxxxxxxxxxx/mapase.map <http://xxxxxxxxxxxx/cgi-
> bin/mapserv6?map=/xxxxxxxxxxxx/mapase.map> "
> 	"ows_onlineresource" "http://xxxxxxxxxxxx/cgi-
> bin/mapserv6?map=/xxxxxxxxxxxx/mapase.map <http://xxxxxxxxxxxx/cgi-
> bin/mapserv6?map=/xxxxxxxxxxxx/mapase.map> "
> 	"wms_title" "Mapa"
> 	"wms_abstract" "Capas"
> 	"wms_srs" "EPSG:4326 EPSG:900913 EPSG:3857 EPSG:4694 EPSG:4928
> EPSG:4929 EPSG:22181  EPSG:22182  EPSG:22183  EPSG:22184  EPSG:22185
> EPSG:22186  EPSG:22187"
> 	"wms_onlineresource" "http://xxxxxxxxxxxx/cgi-
> bin/mapserv6?map=/xxxxxxxxxxxx/mapase.map <http://xxxxxxxxxxxx/cgi-
> bin/mapserv6?map=/xxxxxxxxxxxx/mapase.map> "
> 	"wms_enable_request" "GetCapabilities GetMap GetLegendGraphic
> GetFeatureInfo"
> 	"wfs_enable_request" "!*"
> 	"wms_server_version" "1.1.1"
> 	"wms_feature_info_mime_type"  "text/html"
> 	"wms_include_items" "all"
> 	"gml_include_items" "all"
> 	"wms_contactelectronicmailaddress"
> "xxxxxxxxxxxx at xxxxxxxxxxxx.xxx.xx"
> 	END
> 
> 
> 	and here's my layer metadata:
> 
> 	METADATA "wms_title" "Concesiones de Distribuidoras electricas"
> "wms_extent" "-73,566078 -55,057765 -53,635586 -21,778191"
> "gml_include_items" "all" "gml_featureid" "gid"
> "wms_feature_info_mime_type" "text/html" "wms_server_version" "1.1.1"
> "wms_include_items" "all" "wms_srs" "EPSG:4326" END
> 
> 
> 	is there any other problem? i can still see my png when i do a
> GetMap request.. :(
> 
> 	thanks a lot.
> 	Vladimiro.
> 
> 
> 
> 
> 	Vladimiro Bellini              __
> 	\ /| _ _|. _ . _ |__) _||. _ .
> 
> 	2015-04-23 10:37 GMT-03:00 <Steve.Toutant at inspq.qc.ca
> <mailto:Steve.Toutant at inspq.qc.ca> >:
> 	Does this works
> 	"ows_denied_ip_list" "all"
> 
> 	or
> 	"ows_denied_ip_list" "youripaddress"
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Vladimiro Bellini <vlasvlasvlas at gmail.com <mailto:vlasvlasvlas at gmail.com>
> >@lists.osgeo.org <http://lists.osgeo.org/>
> Envoyé par : mapserver-users-bounces at lists.osgeo.org <mailto:mapserver-
> users-bounces at lists.osgeo.org>
> 
> 2015-04-23 09:33
> 
> 
> 
> A
> mapserver-users at lists.osgeo.org <mailto:mapserver-users at lists.osgeo.org>
> 
> cc
> 
> Objet
> [mapserver-users] ows_allowed_ip_list / ows_denied_ip_list not
> working
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 	Hi.
> 	i was testing "ows_denied_ip_list" or allowed ip list on my 6.4.1
> mapserver and it does not work at all.
> 	 ./mapserv -v
> 	MapServer version 6.4.1 OUTPUT=GIF OUTPUT=PNG OUTPUT=JPEG OUTPUT=KML
> SUPPORTS=PROJ SUPPORTS=GD SUPPORTS=AGG SUPPORTS=FREETYPE SUPPORTS=ICONV
> SUPPORTS=WMS_SERVER SUPPORTS=WMS_CLIENT SUPPORTS=WFS_SERVER
> SUPPORTS=WFS_CLIENT SUPPORTS=WCS_SERVER SUPPORTS=SOS_SERVER SUPPORTS=GEOS
> INPUT=JPEG INPUT=POSTGIS INPUT=OGR INPUT=GDAL INPUT=SHAPEFILE
> 
> 
> 
> 	METADATA
> 	#inside top mapfile metadata
> 
> 	       "ows_denied_ip_list" "*"
> 	#(other metadata..)
> 	END
> 
> 
> 	even blocking "*" (all ip's) it doesnt work,
> 	i always receive a GetMap response using wms
> 	..
> 	i can still see my request (cgi-bin,wms,getmap, see the full png, no
> denied at all...) why?
> 	:S
> 
> 	Thanks,
> 
> 	Vladimiro Bellini_______________________________________________
> 	mapserver-users mailing list
> 	mapserver-users at lists.osgeo.org <mailto:mapserver-
> users at lists.osgeo.org>
> 	http://lists.osgeo.org/mailman/listinfo/mapserver-users
> <http://lists.osgeo.org/mailman/listinfo/mapserver-users>
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>