Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: domain of spil.oss@googlemail.com
 designates 66.249.92.171 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=googlemail.com;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=Qan6iLm4/By/q1t0V+Eesdezfm55yL7gC+qcjMpRmQMTCSbShFAfCcv8n9hJQSs387L4zq7InBH+xKb8MF5Iq/6Qclb5+S6pvpgiFOebLtfytgTeDry4a5PY7UO2tsk/84SNhMOUPiSknWwjo05DM/rnzUct5yYAnslu/cfSORI=
Message-ID: <5fbf03c20611150344q6cf3066fuf6317cf28723e2c1@mail.gmail.com>
Date: Wed, 15 Nov 2006 12:44:49 +0100
From: "Spil Oss" <spil.oss@googlemail.com>
Reply-To: spil.oss@gmail.com
To: "Christian Gottschalch" <masro@llbc.de>, users@httpd.apache.org
In-Reply-To: <4559E680.7090203@llbc.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <3F97E504FCE3C646A14E71793196E64201AEB9B1@vgmex005.vgm.vlnetz.de>
	 <4559E680.7090203@llbc.de>
Subject: Re: AW: [users@httpd] Incompatibility Apache reverse proxy and
 Internet Explorer?

Christian,

Thanks for that!
Seems to work!

Hadn't been looking at the fact that we're using ssl on the connections...

Kind regards,

Spil

On 14/11/06, Christian Gottschalch <masro@llbc.de> wrote:
> using ssl in backend may be not a good idea, because it slows down
> everything,
>
> try
> BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> or
> BrowserMatch ".*MSIE.*" ssl-unclean-shutdown
>
>
> Kirchel Oliver schrieb:
> > Hi,
> > I think we had the same error.
> >
> > "The DMZ1 proxy is connected via ssl, the other connections are plain h=
ttp."
> >
> > Try to connect "the other connection" via ssl, too.
> >
> > That was our solution.
> >
> > Greetings
> >
> > Olli
> >
> > -----Urspr=FCngliche Nachricht-----
> > Von: Spil Oss [mailto:spil.oss@googlemail.com]
> > Gesendet: Dienstag, 14. November 2006 13:22
> > An: users@httpd.apache.org
> > Betreff: [users@httpd] Incompatibility Apache reverse proxy and Interne=
t Explorer?
> >
> > Hi all,
> >
> > Spuriously we get "Server not found or DNS Error" in Internet Explorer
> > for a site that is reversed proxied with Apache.
> > Please find a txt export of the pcap dump attached.
> >
> > What seems to happen is that the reverse proxy returns FIN, ACK on the
> > 3 connections from IE and subsequently a RST. This then triggers IE
> > into displaying the "Server not found or DNS Error" message.
> > Disabling "Show friendly HTTP error messages" seems to help, but we
> > can't force "the whole world" to change that setting in their Internet
> > Explorer browser (if that were possible for users in a business
> > environment anyway)
> >
> > The setup:
> > Internet Explorer ->
> > Reverse Proxy DMZ1 ->
> > Reverse Proxy DMZ2 ->
> > Application Server
> > v.v.
> >
> > The reverse proxies have simple proxy rules like
> > ProxyPass /b2b_portal/ http://dmz2web.domain.com:8080/b2b_portal/
> > <Location /b2b_portal/>
> >    ProxyPassReverse /b2b_portal/
> > </Location>
> >
> > and on dmz2web
> > ProxyPass /b2b_portal/ http://app1.domain.com:80/b2b_portal/
> > <Location /b2b_portal/>
> >    ProxyPassReverse /b2b_portal/
> > </Location>
> >
> > The DMZ1 proxy is connected via ssl, the other connections are plain ht=
tp.
> >
> > Anyone experience this before and/or can explain this behaviour of the
> > apache reverse proxy? (2.2.3-ssl running on Windows 2003)
> >
> > PS. We used IIS as reverse proxy before and that was fine.....
> > PS. No such behaviour using Firefox 1.5/2.0
> >
> > Help is very much appreciated!
> >
> > Kind regards,
> >
> > Spil.
> >
> > D:\Apache2.2>bin\httpd.exe -V
> > Server version: Apache/2.2.3
> > Server built: Aug 10 2006 17:29:16
> > Server's Module Magic Number: 20051115:3
> > Server loaded: APR 1.2.7, APR-Util 1.2.7
> > Compiled using: APR 1.2.7, APR-Util 1.2.7
> > Architecture: 32-bit
> > Server MPM: WinNT
> > threaded: yes (fixed thread count)
> > forked: no
> > Server compiled with....
> > -D APACHE_MPM_DIR=3D"server/mpm/winnt"
> > -D APR_HAS_SENDFILE
> > -D APR_HAS_MMAP
> > -D APR_HAS_OTHER_CHILD
> > -D AP_HAVE_RELIABLE_PIPED_LOGS
> > -D DYNAMIC_MODULE_LIMIT=3D128
> > -D HTTPD_ROOT=3D"/apache"
> > -D SUEXEC_BIN=3D"/apache/bin/suexec"
> > -D DEFAULT_SCOREBOARD=3D"logs/apache_runtime_status"
> > -D DEFAULT_ERRORLOG=3D"logs/error.log"
> > -D AP_TYPES_CONFIG_FILE=3D"conf/mime.types"
> > -D SERVER_CONFIG_FILE=3D"conf/httpd.conf"
> >
> > D:\Apache2.2>bin\httpd.exe -M
> > Loaded Modules:
> > core_module (static)
> > win32_module (static)
> > mpm_winnt_module (static)
> > http_module (static)
> > so_module (static)
> > actions_module (shared)
> > alias_module (shared)
> > asis_module (shared)
> > auth_basic_module (shared)
> > authn_default_module (shared)
> > authn_file_module (shared)
> > authz_default_module (shared)
> > authz_groupfile_module (shared)
> > authz_host_module (shared)
> > authz_user_module (shared)
> > autoindex_module (shared)
> > cgi_module (shared)
> > dir_module (shared)
> > env_module (shared)
> > imagemap_module (shared)
> > include_module (shared)
> > isapi_module (shared)
> > log_config_module (shared)
> > mime_module (shared)
> > proxy_module (shared)
> > proxy_connect_module (shared)
> > proxy_http_module (shared)
> > negotiation_module (shared)
> > rewrite_module (shared)
> > setenvif_module (shared)
> > userdir_module (shared)
> > ssl_module (shared)
> > Syntax OK
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server Proje=
ct.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org