<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hello,</p>
<p>I want to secure a site using the allow/deny directives so that
only allowed networks will be able to access it. There is one
"public" directory, however, that I want to be accessible for
everyone.</p>
<p>nginx serves as a reverse proxy on that site, and requests for
URIs that end with the suffix ".cfm" are proxied to Tomcat.</p>
<p>So I currently have something like:</p>
<p><tt>location / {</tt><tt><br>
</tt><tt> allow 10.0.0.0/24;</tt><tt><br>
</tt><tt> deny all;</tt><tt><br>
</tt><tt>}</tt><tt><br>
</tt></p>
<p><tt>location /public/ {</tt><tt><br>
</tt><tt> allow all; # does that make sense?</tt><tt><br>
</tt><tt>}</tt></p>
<p><tt>location ~ \.cfm$ {</tt><tt><br>
</tt><tt> ## proxy settings go here</tt><tt><br>
</tt><tt>}</tt><br>
</p>
<p>Keep in mind that .cfm scripts are both in /public/ as well as in
other directories.<br>
</p>
<p>How can I achieve that?<br>
</p>
Thanks,<br>
<br>
<div class="moz-signature">
<p>Igal Sapir
<br>
Lucee Core Developer
<br>
<a href="http://lucee.org/">Lucee.org</a></p>
</div>
</body>
</html>