Maintaining HTTP service security

Using HTTP options to restrict access

Available options  

The following options to restrict HTTP access are available:

• httpd.access--Restricts access to the HTTP services.
• httpd.admin.access--Restricts access to filer administration via HTTP (FilerView).

  If the httpd.admin.access option is set, the trusted.hosts option is ignored for HTTP administration.

You can restrict access on a host or a network interface basis. For more information about these options, see the na_protocolaccess(8) man page.

Example of restricting access to http services  

In the following example, only host Host1 is allowed access through interface e3 to the HTTP services on filer Filer1.

Filer1> options httpd.access host=Host1 AND if=e3

Example of restricting access to httpd  

In the following example, host Host1 is denied FilerView access to the filer Filer1.

Filer1> options httpd.admin.access host!=Host1

Copyright © 1994-2003, Network Appliance, Inc. All rights reserved.
Part No. 210-00323
File: http11.htm
Last updated: 01/15/03 15:45:55