httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Boyle Owen" <Owen.Bo...@swx.com>
Subject RE: [users@httpd] No response recieved from Apache at some external locations, but not others
Date Thu, 19 Oct 2006 10:38:40 GMT
> -----Original Message-----
> From: Robert Elliot [mailto:Rob@lidalia.org.uk] 
> Sent: Thursday, October 19, 2006 12:08 PM
> To: users@httpd.apache.org
> Subject: [users@httpd] No response recieved from Apache at 
> some external locations, but not others
> 
> Hi, I'm having issues running Apache/2.0.59 (Win32) DAV/2 
> mod_auth_sspi/1.0.4 mod_ssl/2.0.59 OpenSSL/0.9.8c SVN/1.4.0 
> Server on Windows Server 2003.
> 
> I reckon about 60% of external people can see the website, 
> and 40% cannot.  Unfortunately all three of my external 
> attempts to retrieve a flat HTML file fail, from work, client 
> site and my PDA's GPRS.  IE and Firefox both sit waiting for 
> a response forever if I request a legitimate file.  If I 
> request a nonsense one I get an accurate 404 from the server, 
> examining the response in Fiddler reveals it is definitely an 
> HTTP response served by my server, it shows my server's 
> config.  What's more, Apache does seem to log my attempts 
> that fail as 200 requests, and nothing appears in the error 
> log.  So my request is getting through; but no response gets 
> back to me.  nmap run from work also correctly identified my 
> server as running Apache configured the way I have it, so 
> nmap can get a response back. Just not, it would seem, any 
> web browser when asked to serve a valid file.
>  
> Obviously it is not a firewall ... issue

I wouldn't be too quick to jump to that conclusion. Mystery timeouts
very often *are* a FW issue - it is standard practice for a FW to drop
silently disallowed packets. This makes it harder for an attacker to
determine if he's really being denied or if the network is just slow, so
it slows him down.

Mind you, it would mean a FW that was dropping outgoing packets based on
their HTTP response code which is a bit weird... 

What is different between clients who *can* access the site and those
who cannot? Are you sure the logs are really identical too?

Can you post an example URL for us to try?

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

> or DNS issue as lots of people 
> can get to the site from outside using the domain name, I can 
> get a 404 from the server, nmap can get a response and my 
> requests get logged.
>  
> Any bright ideas?  I'm currently very confused.  It's either 
> Apache, my router or my ISP losing or misdirecting the HTTP 
> response, I presume... unless certain networks refuse HTTP 
> responses from my ISP?  But my ISP swears blind that several 
> companies run web servers using accounts with them, and the 
> fact that the 404 response gets through suggests the 
> communications channel is OK.
>
 
 
This message is for the named person's use only. It may contain confidential, proprietary
or legally privileged information. No confidentiality or privilege is waived or lost by any
mistransmission. If you receive this message in error, please notify the sender urgently and
then immediately delete the message and any copies of it from your system. Please also immediately
destroy any hardcopies of the message. You must not, directly or indirectly, use, disclose,
distribute, print, or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail communications through their
networks. Any views expressed in this message are those of the individual sender, except where
the message states otherwise and the sender is authorised to state them to be the views of
the sender's company.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message