Apache - listen only on specific domain, not IP

Question

How can I configure apache so that it refuses connections coming directly to the IP address (http://xxx.xxx.xxx.xxx) instead of the vhost name http://example.com?

My VirtualHost configuration:

ServerName example.com

<VirtualHost *:80>

        ServerName example.com

        DocumentRoot /var/www/           
        <Directory /var/www/>                    
                AllowOverride All
                Order allow,deny
                allow from all
        </Directory>

</VirtualHost>

apache 2.2 virtualhost

Shane Madden · Accepted Answer

You cannot have it refuse connections, since the hostname (or IP) that the user is trying to use as their HTTP host is not known to the server until the client actually sends an HTTP request. The TCP listener is always bound to the IP address.

Would an HTTP error response be acceptable instead?

<VirtualHost *:80>
    ServerName catchall
    <Location />
        Order allow,deny
        Deny from all
    </Location>
</VirtualHost>

<VirtualHost *:80>
    ServerName example.com
    DocumentRoot /var/www/
    <Directory /var/www/>
        AllowOverride All
        Order allow,deny
        allow from all
    </Directory>
</VirtualHost>

BongSey · Answer

ServerName xxx.xxx.xxx.xxx #your server web server IP Order deny,allow Deny from all This is will Forbidden access for accessing by IP

Chuck Replogle · Answer

A clean way to handle this is with a RewriteRule as follows RewriteRule ^.*$ http://www.example.com/$1 [L]

Chaddy · Answer

You Have to go to lower layer it only comes to my mind in the firewall chain having a validation check for the REQUEST HOST & what you have with Apache this will allow the package to be ignored or dropped

Answered by Chaddy on February 23, 2021

Apache - listen only on specific domain, not IP

4 Answers

Add your own answers!

Ask a Question