where to configure FilesMatch on Litessped ?

[Dolirow]

Hey, Im using sucuri firewall and I should free some IPs and Deny the others... they gave me 2 options (apache and gnix, but dont have example how to add in litespeed, so I dont know how to implement it here)

Apache2 we can use:

<FilesMatch ".*">
    Order deny,allow
    Deny from all
    Allow from 111.11.134.0/23
    Allow from 111.11.228.0/22
    Allow from 2b12:fe81::/29
    Allow from 11.118.200.0/22
    Allow from 218.101.0.0/22
</FilesMatch>

nginx we can use:

location / {
    allow 111.11.134.0/23;
    allow 111.11.228.0/22;
    allow 2b12:fe81::/29;
    allow 11.118.200.0/22;
    allow 218.101.0.0/22;
    deny all;
    # Existing NGINX rules
}

and on litespeed, where I should add that? thanks <3

@David
Cold-Egg

 

[Cold-Egg]

Hi,
Controlling Access to Files by context should help, https://openlitespeed.org/kb/access-control/

 

[Dolirow]

Hi,
Controlling Access to Files by context should help, https://openlitespeed.org/kb/access-control/

Thanks, worked!

Another thing, where I can place that?

<IfModule mod_headers.c>
    <FilesMatch "\.(ttf|ttc|otf|eot|woff|woff2|css|js)$">
         Header set Access-Control-Allow-Origin "*"
    </FilesMatch>
</IfModule>

 

[Cold-Egg]

Hi,
Good to know it works. For the custom header, please check https://openlitespeed.org/kb/how-to-set-up-custom-headers/

 

[Dolirow]

Hi,
Good to know it works. For the custom header, please check https://openlitespeed.org/kb/how-to-set-up-custom-headers/

Hey bro, thanks

I did that, configuration: https://prnt.sc/1277xuo

but Im still having troubles, maybe you know why?

Access to resource at 'https://cloudflareinsights.com/cdn-cgi/rum' from origin 'https://mydomain.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

 

[Cold-Egg]

Try the simple setup first to make sure it works. e.g.
Simply set the URI to /
Header Operations to Access-Control-Allow-Origin * ( no "set" needed)

https://openlitespeed.org/kb/setting-up-cors-on-openlitespeed/