httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 42508] New: - "Deny from all" failing occasionally inside Location directive
Date Thu, 24 May 2007 12:25:06 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42508>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42508

           Summary: "Deny from all" failing occasionally inside Location
                    directive
           Product: Apache httpd-2
           Version: 2.2.4
          Platform: Sun
        OS/Version: Solaris
            Status: NEW
          Severity: major
          Priority: P2
         Component: Core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: ladadadada@hotmail.com


While developing a new site we had a Location directive similar to the one below:
  <Location />
        Order deny,allow
        Deny from all

        Allow from 10.20.30.
        Allow from 140.211.11.4/32
        Allow from 140.211.11.130/32

        # Allow from the W3C validator
        Allow from 128.30.52.13/32
  </Location>

During this time we saw that most requests in the log files for IP addresses not
on that list were returning 403 errors but occasionally Apache would return a 200.
We verified that it was actually returning the requested page and not a logging
error by using anonymous web proxies.  Most received 403 errors but some
displayed the page.

The problem isn't consistent for a particular IP address.  We saw the Google bot
crawling the site from a single IP address.  Most of the time it would receive
403 errors but occasionally it would receive the page it was requesting.

It's also not consistent for a particular file.  Of the 117 requests for
robots.txt that the Google bot has made over the last two months, only three
were returned as 200, the rest were 403.

Return codes and their counts for all files and all IP addresses apart from the
IP addresses in the Location directive are:
  139 304
 1172 302
 1193 200
20142 403

Let me know if you would like any more information to help find this bug.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message