httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joshua Slive <jsl...@gmail.com>
Subject Re: [users@httpd] Confused, is it open proxy or not?
Date Tue, 29 Jun 2004 14:22:29 GMT
On Tue, 29 Jun 2004 20:24:55 +0700, Fajar Priyanto <fajarpri@arinet.org> wrote:
> My server recently got blacklisted by rbl.org as open proxy.
> So, I read the FAQ at apache.org website, and follow the direction. I even add
> more extreme as not to load the mod_proxy and lib_proxy, because I don't want
> my server to be proxy at all.
> 
> Also I add this:
> ProxyRequests Off

There's a lot of stuff that doesn't make sense here.  For starters, if
mod_proxy is not loaded, then you should get an error because the
ProxyRequests directive is provided by mod_proxy.  You shouldn't even
be able to start the server.  This leads me to believe you are not
editting the correct config file or you have not really removed
mod_proxy.

> CONNECT smtp.centrin.net.id:25 HTTP/1.0
> 
> HTTP/1.0 200 Connection established
> 
> 220 smtp2.centrin.net.id ESMTP Sendmail 8.12.8/8.12.8; Tue, 29 Jun 2004
> 20:00:43 +0700

This does look like an open proxy.

> 
> It connects! And in access_log there is this line:
> 202.158.108.181 - - [29/Jun/2004:20:51:44 +0700] "CONNECT 192.168.0.250:25
> HTTP/1.0" 405 428 "-" "-" (192.168.0.250 is my gateway ip)

This access log entry does not correspond at all to the request made
above.  The "CONNECT ..." part should be an *exact* copy of what you
typed.

You are either very confused or you have some very weird configuration
here, possible involving some transparent proxy that you are not aware
of.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message