httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Bennett <baha...@digitalelf.net>
Subject [users@httpd] desperately seeking help rewriting proxy requests
Date Wed, 16 Feb 2005 00:53:09 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

First of all let me point out that I am NOT doing reverse proxy.

I have a number of proxy servers that are available via subscription.  
So they're regular normal proxies, nothing wierd.  I need to block 
certain URL's from being proxied.  E.g., deny all access to formail.pl 
or formail.cgi from the proxy.

I have been pulling my hair out for days (there is literally a pile of 
hair by my desk) because basically Apache will not rewrite proxy 
requests at all.  I have been reading websites, google, Apache: The 
Definitive Guide from O'Reilly and Apache Cookbook (also from ORA), and 
I've spent several hours in #apache on irc.freenode.net.  All of these 
sources would seem to indicate what I am trying to do is not only 
possible, but easy.  I have found neither to be the case.

Basically, I started out with this:
RewriteEngine On
RewriteLog /var/log/apache/rewrite.log
RewriteLogLevel 9
RewriteRule formmail - [F]

If I send a non-proxy request to apache for /formmail it returns a 403 
error, as it should.  However if I send a proxy request for 
http://www.somesite.com/formmail it gets ignored by mod_rewrite (it 
doesn't even show up in the rewrite.log), and the request is passed to 
the remote site.

I've tried quoting the arguements, not quoting them, changing formmail 
to . and .*, none of which seem to make one whit of difference at all.  
I have also tried wrapping the RewriteRule within <Directory 
proxy:*></Directory> tags.  The only difference I can see is that 
regular non-proxy requests no longer return 403 errors.  Proxy requests 
however,  still do not get blocked.

Can anyone tell me how many of which animal and whom to sacrifice them 
to in order to make apache rewrite proxy requests?

- -- 
Brian Bennett
System Administrator
Anonymizer Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFCEpl6REYdwLXKa5IRAutNAJ4sogDeZFwTi4u53ycwDi272AW2nACghjPs
+I4N+PsWpF923kF8QFBZcBg=
=nAbe
-----END PGP SIGNATURE-----


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message