Make nftables block various invalid TCP flag combinations

[chef.git] / cookbooks / apache / templates / default / status.conf.erb

diff --git a/cookbooks/apache/templates/default/status.conf.erb b/cookbooks/apache/templates/default/status.conf.erb
index 25cda1a25651961ae59bc9bad6e7cfd83281094a..6b8b98ee7f8e19b13b2f6cab289ae46fd2a665b9 100644 (file)
--- a/cookbooks/apache/templates/default/status.conf.erb
+++ b/cookbooks/apache/templates/default/status.conf.erb
@@ -6,16 +6,14 @@ ExtendedStatus On
 
 <Location /server-status>
     SetHandler server-status
 
 <Location /server-status>
     SetHandler server-status

-    Order deny,allow
-    Deny from all

 <% node.ipaddresses do |address| -%>
 <% node.ipaddresses do |address| -%>

-    Allow from <%= address %>
+    Require ip <%= address %>

 <% end -%>
 <% end -%>

-    Allow from 127.0.1.1
-    Allow from 127.0.0.1
-    Allow from ::1
+    Require ip 127.0.1.1
+    Require ip 127.0.0.1
+    Require ip ::1

 <% @hosts.each do |host| -%>
 <% @hosts.each do |host| -%>

-    Allow from <%= host %>
+    Require ip <%= host %>

 <% end -%>
 </Location>
 
 <% end -%>
 </Location>