[OT] User problem: Apache-Rewrite - Firewall - Problem

[Igor Stroh]

Hi Andreas,

Andreas Tille wrote:
> On Fri, 23 Mar 2007, Fabio Tranchitella wrote:

[...]

Your setup basically looks right. You just need to allow the reverse
proxying for your upstream source, i.e. 127.0.0.1:9673.
Consider this example of a virtual host:

=========== /etc/apache2/sites-enabled/plone.conf ==========
UseCanonicalName Off
NameVirtualHost a.b.c.d:80

<VirtualHost a.b.c.d:80>
    ServerName my.plone.site

    RewriteEngine On
    RewriteRule ^(.*)
http://127.0.0.1:9673/VirtualHostBase/http/%{SERVER_NAME}:80/myfolder/VirtualHostRoot$1
[P,L]

    <Proxy http://127.0.0.1:9673>
        Allow from all
    </Proxy>
</VirtualHost>
============================================================

[...]

> My browser said:
> 
>   You don't have permission to access / on this server.
> 
> Apache error.log sais:
> 
> [Fri Mar 23 18:44:52 2007] [error] [client 217.81.80.129] client denied
> by server configuration:
> proxy:http://127.0.0.1:9673/VirtualHostBase/http/a.b.c.d:80/agi/VirtualHostRoot/
> 
> [Fri Mar 23 18:44:53 2007] [error] [client 217.81.80.129] client denied
> by server configuration:
> proxy:http://127.0.0.1:9673/VirtualHostBase/http/a.b.c.d:80/agi/VirtualHostRoot/favicon.ico
> 

Yep, that's clearly a missing access rule in your proxy
cofiguration. Just add the stuff from my example and it should work
fine.

@Fabio: Maybe we should mention this issue in Zope's README.Debian

HTH,
Igor