Hi Andrea: I just tested with MapServer 6.4 and 7.4 and it works as expected, at least with WMS GetMap requests. My process was:
1. Make a WMS request and check the logs to confirm the IP I was showing up as. 2. Edit the mapfile and add “ows_denied_ip_list” “my IP” to the WEB METADATA section. 3. Perform the same WMS request in the browser – result was a WMS exception. 4. Edit the mapfile and change the ip slightly so it shouldn’t match but leaving the directive in place. 5. Perform the same WMS request in the browser – result was a PNG image. I did tried multiple IPs in the list, with and without my IP and everything worked as expected. I did not try using an external file. I did notice with my IP in the list a GetMap request was blocked, a GetCapabilities request was not. I didn’t try a GetFeature… request. Makes me wonder if you have the right IP for your test setup? --Steve From: Andrea Peri [mailto:[email protected]] Sent: Tuesday, July 30, 2019 2:30 PM To: Lime, Steve D (MNIT) <[email protected]>; [email protected] Subject: Re: [mapserver-users] ows_denied_ip_list is working ? Hi, I was using a compiled version from a recent clone of master . I try to apply ot to WEB-> METADATA section section using this kind of values: I try to use a list of IP directly listed using a space as separator "ows_denied_ip_list" "xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy zzz.zzz.zzz.zzz" or using a file where there is the same list one IP for line "ows_denied_ip_list" "file:/path-to-file/file-with-ip-list.txt" The values listed are the possibly values of our proxy. So I guess setting them as denied IP mapserver should refuse to give a map to every client wms using them. Instead the map are still showed. I'm using QGIS as wms client to test it. A. Il mar 30 lug 2019, 04:21 Lime, Steve D (MNIT) <[email protected]<mailto:[email protected]>> ha scritto: I will test and reply back. What specific version, config and tests did you try on your end? ________________________________ From: mapserver-users <[email protected]<mailto:[email protected]>> on behalf of Andrea Peri <[email protected]<mailto:[email protected]>> Sent: Saturday, July 27, 2019 9:02:07 AM To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: [mapserver-users] ows_denied_ip_list is working ? Hi, I see my version of mapserver don't work the ows_denied_ip_list. I see ths other mex: http://osgeo-org.1560.x6.nabble.com/ows-allowed-ip-list-ows-denied-ip-list-not-working-td5202667.html<https://gcc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fosgeo-org.1560.x6.nabble.com%2Fows-allowed-ip-list-ows-denied-ip-list-not-working-td5202667.html&data=02%7C01%7CSteve.Lime%40state.mn.us%7Ca2bef76fd62f471db1e608d715245908%7Ceb14b04624c445198f26b89c2159828c%7C0%7C0%7C637001118169695729&sdata=PWJxX4BJMhOodJ7FadppgR%2F3XAk9lLW%2FHJadeWehSRQ%3D&reserved=0> I try all the same option but nothing is work. So I guess that instead that the ows_denied_ip_list was dismissed. Is this confirmed ? Thx. A. -- ----------------- Andrea Peri . . . . . . . . . qwerty àèìòù -----------------
_______________________________________________ mapserver-users mailing list [email protected] https://lists.osgeo.org/mailman/listinfo/mapserver-users
