I’m trying to restrict access to a web resource to the intranet of a company via
.htaccess. Unfortunately, the approach via
Allow from … isn’t working for me and and I don’t understand subnets well enough to troubleshoot the issue.
My IP address is (replaced the first two blocks for privacy) 188.8.131.52, the netmask is given by
ifconfig as 0xffff0000, i.e. 255.255.0.0. I’ve used an IP address calculator go get the subnet from this.
An answer on Stack Overflow led me to believe that the following should work:
Order deny,allow Deny from all Allow from 184.108.40.206/255.255.0.0
Or, using CIDR (only showing the last line):
Allow from 220.127.116.11/16
Neither works. Nor does the following work, as implied by answer on this very site:
Allow from 1.2
In fact, not even the following works:
Allow from 127.0.0.1
But this does work:
Allow from localhost
Although I thought these two to be equivalent. Clearly, I have a gap in my understanding.
For completeness, this is the output of
ifconfig | grep inet[^6]:
inet 127.0.0.1 netmask 0xff000000 inet 18.104.22.168 netmask 0xffff0000 broadcast 22.214.171.124
What am I doing wrong?