httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Axel-St├ęphane SMORGRAV <Axel-Stephane.SMORG...@europe.adp.com>
Subject RE: [users@httpd] limit CONNECT
Date Tue, 21 Jun 2005 06:02:47 GMT
Would it not be simpler just not to load mod_proxy ? I am not too sure it is a good idea to
run mod_proxy on an Apache that also runs PHP.

-ascs 

-----Original Message-----
From: Bohumil Holubec [mailto:bozek@mstu.cz] 
Sent: Tuesday, June 21, 2005 2:33 AM
To: users@httpd.apache.org
Subject: [users@httpd] limit CONNECT

I have apache 2.0.54 with PHP4.3.11 and I would like to deny method CONNECT like this: (its
on the end of apache2.conf) <Location />
   <Limit CONNECT>
     Order Deny,Allow
     Deny from all
   </Limit>
</Location>

Now when i try:
$ telnet www.somehost.com 80
Trying ###.###.###.###...
Connected to www.somehost.com.
Escape character is '^]'.
CONNECT www.google.com:80 HTTP/1.0
[enter]
[enter]

I have response HTTP/1.1 403 Forbidden
BUT all other directives and settings using order... doesnt works. For
example:
<IfModule mod_access.c>
<Files ~ "^\.ht">
     Order allow,deny
     Deny from all
</Files>
</IfModule>
from apache config file doesnt works (all .ht files are accessible). 
Settings from .htaccess files has no effects too etc.

Without <limit CONNECT>... the response on telnet is HTTP/1.1 200 and i dont want it.
Can someone help me with deny method connect please.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message