Can I make Virtual Host accessible to local network only?

Question

On our web server (with only one interface and IP address), we have two virtual hosts:
-An intranet site which should not be viewed by general public.
-A public website accessible by general public over the internet.
How do I ensure that our web server only serves the intranet site to the local 192.168.0.0/16 network, whilst still allowing anyone to view the public website?

Answer 1

Quick thoughts. You can handle this a few ways. Here are two fast ones.
You can just use the host name and order your virtual hosts public first, private second. Then make sure that the URL for the public site is the only one on you public DNS. For example, if you have two VHs, www.yourdomain.com and wiki.yourdomain.com. Then on the public DNS servers, create a record for the www host only. That way, if the wiki host is entered outside of the environment, it will not resolve to an address. Now if you are using wildcards on the outside, then this may cause some issues and I can not predict this early in the morning if the wildcard would resolve to the primary VH or pass the URL in the header.
So the other option is to modify the directory container within the virtual host file. For example, your VH file has a Directory container that probably looks something like this.
<Directory "/Library/WebServer/Documents">
Options All -Includes -ExecCGI -Indexes +MultiViews
AllowOverride None
<IfModule mod_dav.c>
DAV Off
</IfModule>
</Directory>
And to it the following:
order deny,allow
deny from all
allow from 192.168
This will restrict access the to the 192.168 subnet. Refine it more if needed to 192.168.0 etc.
Hope this helps