Notices


 
 
LinkBack Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 22-Apr-2008, 02:55 PM
nopsam@nospam.com
NNTP User
 
Posts: n/a
Default secure page redirect

I had a security issue, someone was using webaccess and users passwords
to play havoc - not really sure how they were getting the passwords, as
a result I changed the web server to force secure webaccess connections.
An unwanted side effect of the way I did it is that ALL web pages are
redirected including iManager. I believe there is a better way to do it
than I did but I don't know it. I added these lines to the httpd.conf file:

redirect /index.html https://mail.domain.com/gw/webacc

RewriteEngine On
RewriteCond %{REQUEST_URI} ^\/
RewriteRule ^/(.*) https://%{SERVER_NAME}/gw/webacc [L,R]

Actually I'm doing two things here. I am skipping over the page that has
the language selection and then forcing https. I am willing to modify
the index.html page if necessary to accomplish the change I want, if I
can find out how. I would like to have it redirect only the requests for
the /gw/webacc page and leave the others alone? I do want to force all
webaccess users to use the https connection. Thanks.
Reply With Quote
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -6. The time now is 04:39 AM.


© 2007 Novell, Inc. All Rights Reserved.

Search Engine Friendly URLs by vBSEO 3.3.2