Creating an IP Protected Directory

The instructions on this page only apply to www3 content.

To protect a www3 directory and its contents from the public, use Apache's .htaccess file to set up IP-based protection.

Note: this technique is not recommended to secure sensitive data. This is simply a method to protect pre-release documents or items.

1. Log into www3 (or buckeye) using a terminal or FTP program.
2. Change to the directory you wish to IP protect. For example: cd /public/data/webmast1/web/NewProject
3. If a .htaccess file does not already exist, create one. Using the editor of your choice, open the .htaccess file. Then insert the following code: Order deny, allow Deny from all <Limit GET HEAD POST> Allow from ###.###.###.### Allow from ###.### </Limit> The "deny" line automatically denies all access as a default. The "allow" lines then grant access only to those specified IP's. The ###.###.###.### indicates a specific IP you wish to allow. The ###.### indicates a range of IP's can be allowed.
   1. For example, in the following configuration the IP 127.164.132.21 would have access as well as any IP in the 134.67 subnet. Order deny,allow Deny from all <Limit GET HEAD POST> Allow from 127.164.132.21 Allow 134.67 </Limit>

      Once your .htaccess file is saved, your directory should be protected.

When you test your access to the protected directory, if your IP is included in an "allow" statement, you will have access to the directory and its contents. If your IP is not included, you will receive an "Access Forbidden" response.

To further protect your directory from the casual user, you can add Password Protection and prohibit the Search Engine from indexing and displaying its files. For more information on this, refer to Creating a Password Protected Directory and Hiding Web Pages from Search Engines.