You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Richard Lowe <lo...@hotmail.com> on 2002/03/10 18:59:02 UTC

mod_proxy forward/reverse control

Hi,

I want to use mod_proxy for reverse proxy access to internal servers.  
However if I enable a browser for forward proxy and point it to my apache 
instance that I want to use as a reverse proxy, I can go anywhere.  The 
proxy forwards all requests along to whereever.

How does one prevent someone from using mod_proxy intended for reverse 
proxy, as a forward proxy?

Have read thru the docs and can not seem to find the answer to this.

Thanks in advance,
rick

_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

RE: mod_proxy forward/reverse control

Posted by Joshua Slive <jo...@slive.ca>.
> From: Richard Lowe [mailto:lowe_richard@hotmail.com]

>
> I want to use mod_proxy for reverse proxy access to internal servers.
> However if I enable a browser for forward proxy and point it to my apache
> instance that I want to use as a reverse proxy, I can go anywhere.  The
> proxy forwards all requests along to whereever.
>
> How does one prevent someone from using mod_proxy intended for reverse
> proxy, as a forward proxy?
>
> Have read thru the docs and can not seem to find the answer to this.

See
http://httpd.apache.org/docs/mod/mod_proxy.html#proxyrequests

Where it tells you that turning "ProxyRequests off" disables the regular
proxy functionality without effecting proxypass/reverse proxy.

Joshua.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org