Apache配置 9.访问控制-Diretory\FileMatch

（1）介绍

访问控制限制白名单IP，针对文件和目录。

（2）目录配置

#vim /usr/local/apache2.4/conf/extra/httpd-vhosts.conf

<VirtualHost *:80>

ServerAdmin webmaster@dummy-host.example.com

DocumentRoot "/usr/local/apache2.4/docs/www.111.com"

ServerName www.111.com

ServerAlias 111.com

<Directory /usr/local/apache2.4/docs/www.111.com/admin>

Order deny,allow

Deny from all

Allow from 127.0.0.1

</Directory>

ErrorLog "logs/111.com-error_log"

CustomLog "logs/111.com-access_log" combined

</VirtualHost>

//Directory是用来指定限制访问的目录，order定义控制顺序

验证过程：

# mkdir /usr/local/apache2.4/docs/www.111.com/admin/

//创建admin目录，模拟网站后台

# vi /usr/local/apache2.4/docs/www.111.com/admin/123.php

<?php

echo "Hello World!";

?>

（3）配置验证

# /usr/local/apache2.4/bin/apachectl -t

# /usr/local/apache2.4/bin/apachectl graceful

curl   -x127.0.0.1:80 www.111.com/admin/123.php -I

# curl   -x192.168.63.130:80 www.111.com/admin/123.php -I

状态码为403，拒绝访问

（5）针对文件配置

编辑配置文件：

#vim /usr/local/apache2 .4/conf/extra/httpd-vhosts.conf

<VirtualHost *:80>

ServerAdmin webmaster@dummy-host.example.com

DocumentRoot "/usr/local/apache2.4/docs/www.111.com"

ServerName www.111.com

ServerAlias 111.com

<Directory /usr/local/apache2.4/docs/www.111.com/>

<FilesMatch "admin.php(.*)">

Order deny,allow

Deny from all

Allow from 127.0.0.1

</FilesMatch>

</Directory>

ErrorLog "logs/111.com-error_log"

CustomLog "logs/111.com-access_log" combined

</VirtualHost>

验证过程如下：

cd /usr/local/apache2.4/docs/www.111.com/

# vim admin.php

<?php

echo "This is admin.php";

?>

# /usr/local/apache2.4/bin/apachectl -t

Syntax OK

# /usr/local/apache2.4/bin/apachectl graceful

（6）配置验证

# curl   -x192.168.63.130:80 www.111.com/admin.php -I

状态码403被拒绝

# curl   -x127.0.0.1:80 www.111.com/admin.php -I

状态码200访问正常

验证成功