APE wont allow IP addresses

[sethwid Profile]

Hi all,
I have this .htaccess file and the usernames/passwords are working. But I still get asked for a password even though my pc is in the 172.30. range. Can anyone see what the problem is? This works under Apache/Linux just the way it is, but not under APE/IIS7...

Code: Select all

AuthType Basic
AuthName "Zugriff auf Kat 2"
AuthUserFile E:\websites\Sicherheit\.htpasswd
AuthGroupFile E:\websites\Sicherheit\.htgroup
Require group kat2
Order deny,allow
Deny from all
Allow from 172.27.
Allow from 172.28.
Allow from 172.31.
Allow from 172.16.
Allow from 172.30.
Allow from 172.26.
Satisfy any

[HeliconAndrew]

Hello,

Please, try to replace:

Code: Select all

Order deny,allow

with

Code: Select all

Order allow,deny

This is described in the following documentation

Regards
Andrew

[sethwid Profile]

Hi Andrew,
I had a look at the documentation and swapped the "allow,deny" directives like you suggested. Once I commented out the "Deny from all" I wasnt asked for my password when entering the site which made me think the IP address filtering was finally working.

But then when trying to access a protected page, I dont get a login popup, just a 403 - Forbidden: Access is denied screen.

Here is my updated htaccess file, any more ideas?

Code: Select all

AuthType Basic
AuthName "Zugriff auf TROGDOR Kat 2"
AuthUserFile E:\websites\Sicherheit\.htpasswd
AuthGroupFile E:\websites\Sicherheit\.htgroup
Require group kat2
Order allow,deny
Allow from 172.27
Allow from 172.28
Allow from 172.31
Allow from 172.16
Allow from 172.30
Allow from 172.26
#Deny from all

[HeliconAndrew]

We need both at the bottom:

Code: Select all

Deny from all
Satisfy any

Regards
Andrew