Hi Andrea: I just tested with MapServer 6.4 and 7.4 and it works as expected, 
at least with WMS GetMap requests. My process was:


1.       Make a WMS request and check the logs to confirm the IP I was showing 
up as.

2.       Edit the mapfile and add “ows_denied_ip_list” “my IP” to the WEB 
METADATA section.

3.       Perform the same WMS request in the browser – result was a WMS 
exception.

4.       Edit the mapfile and change the ip slightly so it shouldn’t match but 
leaving the directive in place.

5.       Perform the same WMS request in the browser – result was a PNG image.

I did tried multiple IPs in the list, with and without my IP and everything 
worked as expected. I did not try using an external file. I did notice with my 
IP in the list a GetMap request was blocked, a GetCapabilities request was not. 
I didn’t try a GetFeature… request.

Makes me wonder if you have the right IP for your test setup?

--Steve

From: Andrea Peri [mailto:[email protected]]
Sent: Tuesday, July 30, 2019 2:30 PM
To: Lime, Steve D (MNIT) <[email protected]>; 
[email protected]
Subject: Re: [mapserver-users] ows_denied_ip_list is working ?

Hi,
I was using a compiled version from a recent clone of master .

I try to apply ot to WEB-> METADATA section section using this kind of values:

I try to use a list of IP directly listed using a space as separator
      "ows_denied_ip_list" "xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy zzz.zzz.zzz.zzz"
or using a file where there is the same list one IP for line

     "ows_denied_ip_list" "file:/path-to-file/file-with-ip-list.txt"

The values listed are the possibly values of our proxy.
So I guess setting them as denied IP mapserver should refuse to give a map to 
every client wms using them.
Instead the map are still showed.

I'm using QGIS as wms client to test it.

A.


Il mar 30 lug 2019, 04:21 Lime, Steve D (MNIT) 
<[email protected]<mailto:[email protected]>> ha scritto:
I will test and reply back. What specific version, config and tests did you try 
on your end?
________________________________
From: mapserver-users 
<[email protected]<mailto:[email protected]>>
 on behalf of Andrea Peri <[email protected]<mailto:[email protected]>>
Sent: Saturday, July 27, 2019 9:02:07 AM
To: [email protected]<mailto:[email protected]> 
<[email protected]<mailto:[email protected]>>
Subject: [mapserver-users] ows_denied_ip_list is working ?

Hi,
I see my version of mapserver don't work the ows_denied_ip_list.
I see ths other mex:
http://osgeo-org.1560.x6.nabble.com/ows-allowed-ip-list-ows-denied-ip-list-not-working-td5202667.html<https://gcc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fosgeo-org.1560.x6.nabble.com%2Fows-allowed-ip-list-ows-denied-ip-list-not-working-td5202667.html&data=02%7C01%7CSteve.Lime%40state.mn.us%7Ca2bef76fd62f471db1e608d715245908%7Ceb14b04624c445198f26b89c2159828c%7C0%7C0%7C637001118169695729&sdata=PWJxX4BJMhOodJ7FadppgR%2F3XAk9lLW%2FHJadeWehSRQ%3D&reserved=0>

I try all the same option but nothing is work.

So I guess that instead that the ows_denied_ip_list was dismissed.
Is this confirmed ?

Thx.

A.


--
-----------------
Andrea Peri
. . . . . . . . .
qwerty àèìòù
-----------------
_______________________________________________
mapserver-users mailing list
[email protected]
https://lists.osgeo.org/mailman/listinfo/mapserver-users

Reply via email to