################################################################################
#
# Apache2 KIT access file
#
# The KIT access file contains configuration options that allow access from all
# KIT hosts. It can be included from within a <Directory> or <Location> but not
# from a .htaccess file. A common setup would be:
#
#   Include	/etc/apache2/include/kit
#
# This is a broad definition of KIT addresses: it includes campus IPs and VPN
# addresses as well as student dorms and joint facilities like the Black Forest
# Observatory (BFO).

<IfModule mod_authz_host.c>
<RequireAny>
	# Localhost
	Require	ip 127.0.0.0/8
	Require	ip ::1
	# RFC 1918 private IP addresses
	# 10.0.0.0/8 is only used for unrouted subnets
	# 192.168.0.0/16 is not assigned at all since it is used by most home networks
	Require	ip 172.16.0.0/12
	# RFC 6598 shared IP addresses
	Require	ip 100.64.0.0/10
	# Campus
	Require	ip 129.13.0.0/16 141.3.0.0/16 141.52.0.0/16 185.237.152.0/22
	Require	ip 2a00:1398::/32
	# Joint facilities
	Require	ip 193.196.32.0/20
	Require	ip 2a00:139e::/32
	# Wohnheime (IPv4 liegt z.T. innerhalb 172.16.0.0/12 und 100.64.0.0/10)
	Require	ip 141.70.44.0/23 141.70.81.0/24
	Require	ip 2001:7c7:2000::/40
</RequireAny>
</IfModule>
