You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Sonixxfx <so...@gmail.com> on 2007/05/09 15:26:02 UTC

[users@httpd] How to prevent "proxy" usage?

Hi,

>From what I understand from my logs some people seem to use my Apache
install as a proxy server or something like that. I am looking for a
solution to prevent that. I hope someone can help me out.


Lines like this one appear in my logs once in a while:

111.222.333.444 - - [08/May/2007:10:34:31 +0200] "GET
http://somewebsite.com/ <http://icq.com/> HTTP/1.1" 200 6751 "-"
"Mozilla/5.0 (compatible; MSIE 5.01; Win2000)"

(somewebsite.com is not my website)



---------------------------------------------

I am using apache 2.2.4 from apache.org. The installed modules are:

core.c
mod_authz_host.c
mod_log_config.c
prefork.c
http_core.c
mod_mime.c
mod_dir.c

---------------------------------------------

This is my config:

# =================================================
# Basic settings
# =================================================
Listen 0.0.0.0:80 <http://0.0.0.0/>
User apache
Group apache
ServerAdmin sonixxfx@gmail.com <so...@planet.nl>
UseCanonicalName Off
ServerSignature Off
HostnameLookups Off
ServerTokens Prod
ServerRoot "/usr/local/apache2"
DocumentRoot "/www/mywebsite"
PidFile /usr/local/apache2/logs/httpd.pid
ScoreBoardFile /usr/local/apache2/logs/httpd.scoreboard
<IfModule mod_dir.c>
   DirectoryIndex index.html
</IfModule>
# =================================================
# HTTP and performance settings
# =================================================
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
<IfModule prefork.c>
   MinSpareServers 5
   MaxSpareServers 10
   StartServers 5
   MaxClients 150
   MaxRequestsPerChild 0
</IfModule>
# =================================================
# Access control
# =================================================
<Directory />
Options None
   AllowOverride None
   Order deny,allow
   Deny from all
</Directory>
<Directory "/www/mywebsite">
   Order allow,deny
   Allow from all
</Directory>
# =================================================
# MIME encoding
# =================================================
<IfModule mod_mime.c>
   TypesConfig /usr/local/apache2/conf/mime.types
</IfModule>
DefaultType text/plain
<IfModule mod_mime.c>
   AddEncoding x-compress .Z
   AddEncoding x-gzip .gz .tgz
   AddType application/x-compress .Z
   AddType application/x-gzip .gz .tgz
   AddType application/x-tar .tgz
</IfModule>
# =================================================
# Logs
# =================================================
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
ErrorLog /usr/local/apache2/logs/error_log
CustomLog /usr/local/apache2/logs/access_log combined
# =================================================
# Virtual hosts
# =================================================
NameVirtualHost *:80
<VirtualHost *:80>
   DocumentRoot "/www/mywebsite"
   ServerName "mywebsite"
   ErrorLog logs/mywebsite/error_log
   CustomLog logs/mywebsite/access_log combined
</VirtualHost>


Thanks for your help.

Regards,

Ben

Re: [users@httpd] How to prevent "proxy" usage?

Posted by Sonixxfx <so...@gmail.com>.
Thank you very much Joshua, I am going too take a look at that.

Regards,

Ben

2007/5/9, Joshua Slive <jo...@slive.ca>:
>
> On 5/9/07, Sonixxfx <so...@gmail.com> wrote:
> > Hi,
> >
> > From what I understand from my logs some people seem to use my Apache
> > install as a proxy server or something like that. I am looking for a
> > solution to prevent that. I hope someone can help me out.
> >
> >
> > Lines like this one appear in my logs once in a while:
> >
> > 111.222.333.444 - - [08/May/2007:10:34:31 +0200] "GET
> > http://somewebsite.com/ HTTP/1.1" 200 6751 "-" "Mozilla/5.0 (compatible;
> > MSIE 5.01; Win2000)"
> >
> > (somewebsite.com is not my website)
>
> http://httpd.apache.org/docs/1.3/misc/FAQ.html#proxyscan
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

Re: [users@httpd] How to prevent "proxy" usage?

Posted by Joshua Slive <jo...@slive.ca>.
On 5/9/07, Sonixxfx <so...@gmail.com> wrote:
> Hi,
>
> From what I understand from my logs some people seem to use my Apache
> install as a proxy server or something like that. I am looking for a
> solution to prevent that. I hope someone can help me out.
>
>
> Lines like this one appear in my logs once in a while:
>
> 111.222.333.444 - - [08/May/2007:10:34:31 +0200] "GET
> http://somewebsite.com/ HTTP/1.1" 200 6751 "-" "Mozilla/5.0 (compatible;
> MSIE 5.01; Win2000)"
>
> (somewebsite.com is not my website)

http://httpd.apache.org/docs/1.3/misc/FAQ.html#proxyscan

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org