apache deny/allow

Fo example i have folder forum in /var/www and i want to restrict some access. i want to denz all external ip adreses for forum. onlz local users for 192.168.x.x can use it.
how can i huse htaccess

i create dir temp
i touch .htaccess in temp.
i create htpasswd file in /var/www with onlz username-pass.
i edit htaccess

AuthUserFile /var/www/htpasswd
AuthName "secret
AuthType Basic
<Limit GET POST>
require valid-user
</Limit>

Order Allow,Deny
Deny from 212.21.11
Allow from all

but nothing happens

 

Try

Code:

Order Deny,Allow

instead.

 

apache simple dont menage htaccess . i delete entry for allow and deny just to see if auth work. i have code

AuthUserFile /var/www/htpasswd
AuthName "secret
AuthType Basic
<Limit GET POST>
require valid-user
</Limit>

but it cant work

 

What does your error-log say?
And shouldnt' the file point to ".htaccess" instead of "htaccess"?

 

no its point on .htaccess.
i try to insert code in httpd.conf and its working that way

i dont wanna start new topic but how to disable TRACE method?


RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]

but nikto show that trace method is enabled

 

Have a look here: http://httpd.apache.org/docs/2.0/misc/rewriteguide.html
If you add your rules directly to httpd.conf, you must restart Apache.

 

there is nothing about trace method.
yes i did restart apache.

 

Here are some interesting links: http://www.google.com/search?q=apac...ient=firefox-a&rls=org.mozilla:en-US:official

 

i know that. i google it and find that code i past to you.

Here ya go.

RewriteEngine on
# Optional debug directives
#RewriteLog logs/mod_rewrite.log
#RewriteLogLeve 1
# Block TRACK and TRACE methods
ReWriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) ReWriteRule .* - [F]

but simple dont work

 

What happens if you put this directly in your Apache configuration, not in an .htaccess file? Don't forget to restart Apache.

 

i try in the vhost file and in apache same thing.

 

Put it in the Apache configuration. What's the output of

Code:

httpd -t

then?
Anything in your Apache error log?