[users@httpd] Security problem with mod_proxy

[trashMan <tr...@httconsulting.com>]

In the log file i've a ton of request... for example:

213.10.115.30 - - [01/Feb/2004:16:45:45 +0100] "GET
http://members.macandbumble.com/ HTTP/1.0" 200 21112
"http://members.macandbumble.com:80" "Mozilla/5.0 ( compatible; MSIE 5.5;
Windows NT5.0; DigiExt )"
218.17.78.64 - - [01/Feb/2004:16:45:41 +0100] "GET http://217.ipofmyserver/
HTTP/1.1" 200 21112 "http://linkburst.com/account.php" "Mozilla/4.0
(compatible; MSIE 5.0; Windows 98)"

 

:-(



-----Messaggio originale-----
Da: Andre Malo [mailto:nd@perlig.de] 
Inviato: domenica 1 febbraio 2004 13.44
A: users@httpd.apache.org
Oggetto: Re: [users@httpd] R: [users@httpd] Security problem with mod_proxy

On Sun, 1 Feb 2004 13:39:08 +0100
"trashMan" <tr...@httconsulting.com> wrote:

> I've an application server and i use apache as front end so apache 
> must redirect only the request for Zope (the app.server). I use the 
> virtualhost and rewriterule with [p] flag for activate the reverse 
> proxy.
> 
> With  ProxyRequests Off directive the forward proxy is disable but the 
> problem persists.

Again: How do you know?

nd

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org