httpd-docs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joshua Slive" <jos...@slive.ca>
Subject Re: [Httpd Wiki] Update of "Recipes/TomcatReverseProxy" by megaspaz
Date Sat, 28 Oct 2006 17:58:40 GMT
On 10/28/06, Roy T. Fielding <fielding@gbiv.com> wrote:

> > + ***Note*** If you get proxy forbidden errors in your error log,
> > you can add the following code block below and restart Apache to
> > try to fix the error.
> > +
> > + {{{<Proxy *>
> > +   Order deny,allow
> > +   Allow from all
> > + </Proxy>
> > + }}}
>
> Shouldn't this include some discussion of proxy access control and
> the danger of open proxies?  Generally speaking, we should not recommend
> such a config on any server accessible from the Internet.

It's actually ok because they put "ProxyRequests Off" earlier in the
example.  So the open config applies only to reverse proxy requests.

Joshua.

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org


Mime
View raw message