[3085] in Release_7.7_team
oops, AFS sucks
daemon@ATHENA.MIT.EDU (Garry Zacheiss)
Thu Jan 10 00:10:09 2002
Message-Id: <200201100510.AAA15981@riff-raff.mit.edu>
To: release-team@MIT.EDU
Date: Thu, 10 Jan 2002 00:10:06 -0500
From: Garry Zacheiss <zacheiss@MIT.EDU>
It turns out that a couple of us hallucinated during the meeting
today; as far as I can tell, negative IP acls don't work in AFS. At
least, I couldn't get them to work experimenting in the zone cell after
restarting the whole cell and making sure the files I was trying to
fetch were flushed from the web server's cache.
So I have a new plan instead; installing .htaccess and
.htaccess.mit files like this:
.htaccess:
<Limit GET>
Deny from all
</Limit>
.htaccess.mit:
<Limit GET>
Require valid-user
</Limit>
Empirically, these seem to work for blocking access from both web and
www.
Are there any objections to populating the Irix system packs
with these? If anyone can think of a better plan, I'd love to hear it.
Garry
