Some of my Apache pages are served only to clients on the local network. Using IPv4, it was easy to
Allow from the local subnet. Nowadays, most machines are autoconfigured for IPv6 as well as IPv6, and local traffic seems to go over IPv6 (entries in my Apache log file prove that). Not being up-to-date on IPv6 addressing schemes, I spent some time looking for the solution. The default Apache config file already contains references to
ip6-localhost (resolves to ::1). It appears that the link-local unicast addresses can be masked using
fe80::/10 (see
Internet Protocol Version 6 Address Space).
Hence the syntax to allow from the local network only apache2.conf is:
Allow from fe80::/10