Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 19 Feb 2004 09:24:12 +0100
Message-ID: 
 <FAB6A3A2CC5BDB448DADFA1C8C0752965F7442@SOMEXEVS001.ex.ordersx.org>
Importance: normal
Priority: normal
Thread-Topic: [users@httpd] virtual hosting on a lan - hard limitations?
thread-index: AcP2Vt5pF+QLQMV7TWWLnty2vxThSwAaM8Qw
From: "Boyle Owen" <Owen.Boyle@swx.com>
To: <users@httpd.apache.org>
Subject: RE: [users@httpd] virtual hosting on a lan - hard limitations?

> -----Original Message-----
> From: Marty Landman [mailto:MLandman@face2interface.com]
>
>... were you saying that=20
> "ProxyRequests Off" isn't needed? It's setup that way on my=20
> conf file right=20
> now because I'm following the example from the manual,=20
> strictly pro forma=20
> though as this is the only proxy I'm doing, i.e. a reverse.

It's a common point of confusion. Apache can function at two levels as a
proxy, depending on what you want to do.=20

- If you have a live webserver on the internet and you want the internet
to be able to access another webserver *inside* your DMZ, you use
ProxyPass. That lets the world see into an internal webspace.

- If you want clients (browsers) inside your DMZ to be able to browse
the web by going via your server, you set "ProxyRequests on" (and you
tell the clients to use your webserver as a proxy). This way, apache
will fetch any pages from the web for your internal clients. To avoid
that your server becomes an open relay and gets used by hackers to cover
their tracks, you have to secure your server a little (see
http://httpd.apache.org/docs-2.0/mod/mod_proxy.html#access).

The confusion arises because most people think of Proxying as a a single
thing and assume that since they need to use ProxyPass, they have to
"switch on" proxying with "ProxyRequests on". You don't - it depends on
what you want to do. It wouldn't matter much except that if you do set
"ProxyRequests on" without understanding what it does, you create an
open relay - anyone, anywhere can request anything using your machine
and you will be logged as the client.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.=20

>=20
> One thing that became clear immediately was why absolute=20
> links are a mess=20
> if there's any chance a site will be reverse proxied, right?
>=20
> Also (yeah I know this is lazy on my part) I played with the=20
> proxy mods,=20
> commented out by default on my Apache2 conf file and am just enabling=20
> proxy_module and proxy_connect_module in the LoadModule section.
>=20
> Thanks.
>=20
> Marty Landman   Face 2 Interface Inc 845-679-9387
> This Month's New Quiz --- Past Superbowl Winners
> Make a Website: http://face2interface.com/Home/Demo.shtml
>=20
>=20
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP=20
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20
>=20
Diese E-mail ist eine private und pers=F6nliche Kommunikation. Sie hat
keinen Bezug zur B=F6rsen- bzw. Gesch=E4ftst=E4tigkeit der SWX Gruppe. =
This
e-mail is of a private and personal nature. It is not related to the
exchange or business activities of the SWX Group. Le pr=E9sent e-mail =
est
un message priv=E9 et personnel, sans rapport avec l'activit=E9 =
boursi=E8re du
Groupe SWX.

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company.=20


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org