You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Philip Rhoades <ph...@gmail.com> on 2007/06/01 13:00:48 UTC

[users@httpd] Problems with mod_proxy etc and open proxy

People,

I have:

Server version: Apache/2.2.4

running on FC6 - I have commented out these lines in httpd.conf:

# LoadModule proxy_module modules/mod_proxy.so
# LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
# LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
# LoadModule proxy_http_module modules/mod_proxy_http.so
# LoadModule proxy_connect_module modules/mod_proxy_connect.so

# <IfModule mod_proxy.c>
# ProxyRequests On

#<Proxy *>
#    Order deny,allow
#    Deny from all
#    Allow from .example.com
#</Proxy>

#ProxyVia On

have moved:

/etc/httpd/conf.d/proxy_ajp.conf

out of that dir and have restarted the httpd service but I still get lines in:

/var/log/httpd/access.log

like:

72.28.205.136 - - [01/Jun/2007:12:15:24 +1000] "GET
http://www.sun.com/ HTTP/1.1" 200 1261 "-" "Mozilla/5.0 ( Windows; U;
Windows NT4.0; DigiExt )"

What else do I need to do?

Thanks,

Phil.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problems with mod_proxy etc and open proxy

Posted by Philip Rhoades <ph...@gmail.com>.
Graeme,

On 6/2/07, Graeme Fowler <gr...@graemef.net> wrote:
> On Sat, 2007-06-02 at 10:59 +1000, Philip Rhoades wrote:
> > Not sure what you mean - do you mean load the page:
> >
> >    http://www.sun.com/
> >
> > into my browser on the same machine that is running httpd? - that just
> > returns the sun page . .
>
> No, I mean have you connected to your webserver using an appropriate
> text-based client such as netcat or good ol' telnet and asked it for the
> same thing? Something like this:
>
> [graeme@ernie ~]$ telnet www.graemef.net 80
> Trying 82.113.142.73...
> Connected to www.graemef.net (82.113.142.73).
> Escape character is '^]'.
> GET http://www.sun.com/ HTTP/1.1
> Host: www.graemef.net
>
> HTTP/1.1 200 OK
> Date: Sat, 02 Jun 2007 08:01:25 GMT
> Server: Apache/2.2.0 (Fedora)
> Last-Modified: Mon, 30 Oct 2006 20:13:59 GMT
> ETag: "1297e0-1c7-e8fc0fc0"
> Accept-Ranges: bytes
> Content-Length: 455
> Connection: close
> Content-Type: text/html; charset=UTF-8
>
> <snip the rest of mt default site>
>
> Note: this does not return Sun's site!


Yes, you are quite right (although I had to leave off the "HTTP/1.1"
to get it to work) but this raises further questions:

- Why are some requests generating 404 etc responses and these ones
generating 200 reponses?

- What is the point of sending someone to the sun site? - is it a DoS
attack on my site?

- Does someone actually see my home page come up?

Thanks again!

Phil.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problems with mod_proxy etc and open proxy

Posted by Graeme Fowler <gr...@graemef.net>.
On Sat, 2007-06-02 at 10:59 +1000, Philip Rhoades wrote:
> Not sure what you mean - do you mean load the page:
> 
>    http://www.sun.com/
> 
> into my browser on the same machine that is running httpd? - that just
> returns the sun page . .

No, I mean have you connected to your webserver using an appropriate
text-based client such as netcat or good ol' telnet and asked it for the
same thing? Something like this:

[graeme@ernie ~]$ telnet www.graemef.net 80
Trying 82.113.142.73...
Connected to www.graemef.net (82.113.142.73).
Escape character is '^]'.
GET http://www.sun.com/ HTTP/1.1
Host: www.graemef.net

HTTP/1.1 200 OK
Date: Sat, 02 Jun 2007 08:01:25 GMT
Server: Apache/2.2.0 (Fedora)
Last-Modified: Mon, 30 Oct 2006 20:13:59 GMT
ETag: "1297e0-1c7-e8fc0fc0"
Accept-Ranges: bytes
Content-Length: 455
Connection: close
Content-Type: text/html; charset=UTF-8

<snip the rest of mt default site>

Note: this does not return Sun's site!

Graeme


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problems with mod_proxy etc and open proxy

Posted by Philip Rhoades <ph...@gmail.com>.
Graeme,


On 6/1/07, Graeme Fowler <gr...@graemef.net> wrote:
> On Fri, 2007-06-01 at 21:00 +1000, Philip Rhoades wrote:
> > 72.28.205.136 - - [01/Jun/2007:12:15:24 +1000] "GET
> > http://www.sun.com/ HTTP/1.1" 200 1261 "-" "Mozilla/5.0 ( Windows; U;
> > Windows NT4.0; DigiExt )"
> >
> > What else do I need to do?
>
> Probably nothing.
>
> Have you tried to make the same request yourself?


Not sure what you mean - do you mean load the page:

   http://www.sun.com/

into my browser on the same machine that is running httpd? - that just
returns the sun page . .


> If so, what does your
> webserver return? I'd pitch a guess that it returns the index page from
> your default virtual host, rather than Sun's. That's what mine does, at
> any rate.


Thanks,

Phil.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problems with mod_proxy etc and open proxy

Posted by Pid <p...@pidster.com>.
Graeme Fowler wrote:
> On Fri, 2007-06-01 at 21:00 +1000, Philip Rhoades wrote:
>> 72.28.205.136 - - [01/Jun/2007:12:15:24 +1000] "GET
>> http://www.sun.com/ HTTP/1.1" 200 1261 "-" "Mozilla/5.0 ( Windows; U;
>> Windows NT4.0; DigiExt )"
>>
>> What else do I need to do?
> 
> Probably nothing.
> 
> Have you tried to make the same request yourself? If so, what does your
> webserver return? I'd pitch a guess that it returns the index page from
> your default virtual host, rather than Sun's. That's what mine does, at
> any rate.
> 
> Graeme

[waves]

p

> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 


Re: [users@httpd] Problems with mod_proxy etc and open proxy

Posted by Graeme Fowler <gr...@graemef.net>.
On Fri, 2007-06-01 at 21:00 +1000, Philip Rhoades wrote:
> 72.28.205.136 - - [01/Jun/2007:12:15:24 +1000] "GET
> http://www.sun.com/ HTTP/1.1" 200 1261 "-" "Mozilla/5.0 ( Windows; U;
> Windows NT4.0; DigiExt )"
> 
> What else do I need to do?

Probably nothing.

Have you tried to make the same request yourself? If so, what does your
webserver return? I'd pitch a guess that it returns the index page from
your default virtual host, rather than Sun's. That's what mine does, at
any rate.

Graeme


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org