Re: [PATCH] ProxyRemote + ProxyBlock oddness

[Eric Covener <co...@gmail.com>]

On 6/15/05, Jeff Trawick <tr...@gmail.com> wrote:
> On 4/25/05, Eric Covener <co...@gmail.com> wrote:
>
> > I've attached a patch that resolves the hostname in the URI and hands
> > that off separately to ap_proxy_checkproxyblock().

> Any comments from the peanut gallery, particularly the proxy portion?

Just revisiting this issue that still appears in 2.1.8...when proxying
by way of another proxy (ProxyRemote), httpd will compare that
ProxyRemote backend address to the list of ProxyBlocks. It should
compare the address in the URI.

<VirtualHost *:8080>
    ProxyRequests on
    ProxyRemote * http://nextproxy:8081
   ProxyBlock blockedhost
</VirtualHost>


When a browser requests something from the server 'blockedhost':

[debug] proxy_util.c(872): proxy: checking remote machine [nextproxy]
against [blockedhost]

Would expect to see a check of blockedhost against blockedhost, as in 2.0

--
Eric Covener
covener@gmail.com

Re: [PATCH] ProxyRemote + ProxyBlock oddness

[Jeff Trawick <tr...@gmail.com>]

On 10/3/05, Eric Covener <co...@gmail.com> wrote:
> On 6/15/05, Jeff Trawick <tr...@gmail.com> wrote:
> > On 4/25/05, Eric Covener <co...@gmail.com> wrote:
> >
> > > I've attached a patch that resolves the hostname in the URI and hands
> > > that off separately to ap_proxy_checkproxyblock().
>
> > Any comments from the peanut gallery, particularly the proxy portion?
>
> Just revisiting this issue that still appears in 2.1.8...when proxying
> by way of another proxy (ProxyRemote), httpd will compare that
> ProxyRemote backend address to the list of ProxyBlocks. It should
> compare the address in the URI.

unclear to me that uri_addr is always set in this patch (probably I'm
confused, but hints would be appreciated)