[OT] User problem: Apache-Rewrite - Firewall - Problem

Fabio Tranchitella kobold at kobold.it
Fri Mar 23 21:09:18 UTC 2007


* 2007-03-23 18:52, Andreas Tille wrote:
> $ ls -l /etc/apache2/mods-enabled/p*
> lrwxrwxrwx 1 root root 33 2007-03-22 10:33 
> /etc/apache2/mods-enabled/proxy_http.load -> 
> ../mods-available/proxy_http.load
> lrwxrwxrwx 1 root root 28 2007-03-22 15:58 
> /etc/apache2/mods-enabled/proxy.load -> ../mods-available/proxy.load
> 
> What else can I do to convince you? Is there any way to proof that these
> modules are really loaded?

You don't need to convince me, I believe! I'm sure that the module is
loaded (see below).

> >   <Proxy *>
> >       Order deny,allow
> >       Allow from all
> >   </Proxy>

...

> >   <IfModule mod_proxy.c>
> >       ProxyVia On
> >       # prevent the webserver from beeing used as proxy
> >       <LocationMatch "^[^/]">
> >           Deny from all
> >       </LocationMatch>
> >   </IfModule>

This is the typical error message for the mod_proxy: it looks like you do
not have the permission to use the reverse proxy. From the snippets below,
we allow from everybody by default and we deny for all requests which do
not start with a / (eg. external URL like http://www.debian.org).

I would try to move my snippets of configuration in your virtual host
directive, and if still doesn't work to try an open proxy configuration
(Order allow,deny ; Allow from all) to see if the problem is really the
proxy authorization.

> I would say this promotes my theory that the browser tries to query
> my client localhost.

I wouldn't say so: the error message in the log says that the client can't
use the reverse proxy. If the client would have tried the connection to
localhost, you wouldn't have seen any message in the apache log.

Cheers,

-- 
Fabio Tranchitella                         http://www.kobold.it
Free Software Developer and Consultant     http://www.tranchitella.it
_____________________________________________________________________
1024D/7F961564, fpr 5465 6E69 E559 6466 BF3D 9F01 2BF8 EE2B 7F96 1564



More information about the pkg-zope-developers mailing list