Alias /__scripts/heartbeat /afs/athena.mit.edu/contrib/scripts/web_scripts/heartbeat
Alias /__scripts/django/static/admin /usr/lib/python2.7/site-packages/django/contrib/admin/static/admin
Alias /__scripts /etc/httpd/scripts-special
Alias /.well-known/acme-challenge /etc/httpd/scripts-special/.well-known/acme-challenge
SetHandler none
SSILegacyExprParser off
SetHandler none
RewriteEngine On
RewriteCond %{HTTP_HOST} !:444$
RewriteCond %{SERVER_NAME} ^(.*\.)?scripts$
RewriteCond %{THE_REQUEST} ^[^\ ]*\ (.*)\ .*
RewriteRule ^ https://%{SERVER_NAME}.mit.edu:444%1 [L,R]
RewriteCond %{HTTP_HOST} !:444$
RewriteCond %{SERVER_NAME} !=scripts-cert.mit.edu
RewriteCond %{SERVER_NAME} !=scripts-cert
RewriteCond %{THE_REQUEST} ^[^\ ]*\ (.*)\ .*
RewriteRule ^ https://%{SERVER_NAME}:444%1 [L,R]
RewriteCond %{HTTP_USER_AGENT} Mac\ OS\ X.*AppleWebKit
RewriteRule /etc/httpd/scripts-special/needcerts(.*) /__scripts/certerror$1 [L]
RewriteRule /etc/httpd/scripts-special/needcerts(.+) $1 [L]
RewriteRule /etc/httpd/scripts-special/needcerts /__scripts/unauthorized.html [L]
SSLVerifyClient require
RewriteRule /etc/httpd/scripts-special/certerror(.+) $1 [L]
RewriteRule /etc/httpd/scripts-special/certerror /__scripts/unauthorized.html [L]
ErrorDocument 403 /__scripts/forbidden.shtml
Require all denied
ErrorDocument 403 /__scripts/disabled.html
# Generated from http://kb.mit.edu/confluence/x/F4DCAg, 2017-06-27
SetEnvIf REMOTE_ADDR ^(10|18\.(\d\d?|1([0-2]\d|3[1-57-9]|4[0-369]|5[024-9]|6[135-9]|7[0-46-8]|8[013679]|9[02389])|2(29|3[089]|4[0-578]|5[0-245]))|128\.(3[01]|52))\. SCRIPTS_REMOTE_MITNET