Prevent Access to APEX Login

Question

I have installed 3.0.1 on XE using port 8095 and need to allow access to two applications via the Internet using two different domain names. I have set iptables to only allow outside access to port 80 on IP 123.123.123.123. I am using Apache to direct requests to the correct application. Here is the code that I am using:
<VirtualHost *:80>
ServerName domain.com
ServerAdmin [email protected]
RewriteEngine on
RewriteRule ^/$ http://domain.com/apex/ [R]
RewriteRule ^/apex/$ http://123.123.123.123:8095/apex/f?p=100:1 [P]
RewriteRule ^/apex/(.*)$ http://123.123.123.123:8095/apex/$1 [P]
ProxyPass / http:///123.123.123.123:8095/
ProxyPassReverse / http:///123.123.123.123:8095/
<Location />
Order allow,deny
Allow from all
</Location>
</VirtualHost>
Outsiders cannot directly access 123.123.123.123:8095 and http://domain.com is directed to 123.123.123.123:8095/apex/f?p=100:1. Users will see http://domain.com/apex/f?p100:1:andalotmorehere as they browse. However, I realized that I could get to the APEX login with http://domain.com:80/apex or http://domain.com/apex/f?p=4550:1. Is there any way to prevent access to the APEX login to people outside of our local network? I would appreciate any help.
Thank you,
Minh

Answer 1

How exactly the APEX engine forces a '404' to be returned, I am not entirely sure. Perhaps it sends back the Response with the Header Status set to 404 ?Yes, with this process on the login page.
begin
  if not #OWNER#.wwv_flow_security.ip_check then
      #OWNER#.wwv_flow.g_unrecoverable_error := true;
      sys.owa_util.status_line(404, 'Page Not Found');
      sys.owa_util.http_header_close;
  end if;
end;Scott