Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Importance: normal
Priority: normal
Date: Thu, 19 Oct 2006 12:38:40 +0200
Message-ID: 
 <FDD5D99066749040AF9098A720E989770377FF41@CIWMEXZSA0E.ex.ordersx.org>
Thread-Topic: [users@httpd] No response recieved from Apache at some external
 locations, but not others
thread-index: AcbzZm/8d1WMUsevTGigDY4bDJiGlQAA6N/g
From: "Boyle Owen" <Owen.Boyle@swx.com>
To: <users@httpd.apache.org>
Subject: RE: [users@httpd] No response recieved from Apache at some external
 locations, but not others

> -----Original Message-----
> From: Robert Elliot [mailto:Rob@lidalia.org.uk]=20
> Sent: Thursday, October 19, 2006 12:08 PM
> To: users@httpd.apache.org
> Subject: [users@httpd] No response recieved from Apache at=20
> some external locations, but not others
>=20
> Hi, I'm having issues running Apache/2.0.59 (Win32) DAV/2=20
> mod_auth_sspi/1.0.4 mod_ssl/2.0.59 OpenSSL/0.9.8c SVN/1.4.0=20
> Server on Windows Server 2003.
>=20
> I reckon about 60% of external people can see the website,=20
> and 40% cannot.  Unfortunately all three of my external=20
> attempts to retrieve a flat HTML file fail, from work, client=20
> site and my PDA's GPRS.  IE and Firefox both sit waiting for=20
> a response forever if I request a legitimate file.  If I=20
> request a nonsense one I get an accurate 404 from the server,=20
> examining the response in Fiddler reveals it is definitely an=20
> HTTP response served by my server, it shows my server's=20
> config.  What's more, Apache does seem to log my attempts=20
> that fail as 200 requests, and nothing appears in the error=20
> log.  So my request is getting through; but no response gets=20
> back to me.  nmap run from work also correctly identified my=20
> server as running Apache configured the way I have it, so=20
> nmap can get a response back. Just not, it would seem, any=20
> web browser when asked to serve a valid file.
> =20
> Obviously it is not a firewall ... issue

I wouldn't be too quick to jump to that conclusion. Mystery timeouts
very often *are* a FW issue - it is standard practice for a FW to drop
silently disallowed packets. This makes it harder for an attacker to
determine if he's really being denied or if the network is just slow, so
it slows him down.

Mind you, it would mean a FW that was dropping outgoing packets based on
their HTTP response code which is a bit weird...=20

What is different between clients who *can* access the site and those
who cannot? Are you sure the logs are really identical too?

Can you post an example URL for us to try?

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.=20

> or DNS issue as lots of people=20
> can get to the site from outside using the domain name, I can=20
> get a 404 from the server, nmap can get a response and my=20
> requests get logged.
> =20
> Any bright ideas?  I'm currently very confused.  It's either=20
> Apache, my router or my ISP losing or misdirecting the HTTP=20
> response, I presume... unless certain networks refuse HTTP=20
> responses from my ISP?  But my ISP swears blind that several=20
> companies run web servers using accounts with them, and the=20
> fact that the 404 response gets through suggests the=20
> communications channel is OK.
>
=20
=20
This message is for the named person's use only. It may contain =
confidential, proprietary or legally privileged information. No =
confidentiality or privilege is waived or lost by any mistransmission. =
If you receive this message in error, please notify the sender urgently =
and then immediately delete the message and any copies of it from your =
system. Please also immediately destroy any hardcopies of the message. =
You must not, directly or indirectly, use, disclose, distribute, print, =
or copy any part of this message if you are not the intended recipient. =
The sender's company reserves the right to monitor all e-mail =
communications through their networks. Any views expressed in this =
message are those of the individual sender, except where the message =
states otherwise and the sender is authorised to state them to be the =
views of the sender's company.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org