Return-Path: Delivered-To: apmail-httpd-wiki-changes-archive@minotaur.apache.org Received: (qmail 64240 invoked from network); 10 Jul 2009 11:01:41 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 10 Jul 2009 11:01:41 -0000 Received: (qmail 19838 invoked by uid 500); 10 Jul 2009 11:01:51 -0000 Delivered-To: apmail-httpd-wiki-changes-archive@httpd.apache.org Received: (qmail 19809 invoked by uid 500); 10 Jul 2009 11:01:51 -0000 Mailing-List: contact wiki-changes-help@httpd.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: docs@httpd.apache.org Delivered-To: mailing list wiki-changes@httpd.apache.org Received: (qmail 19799 invoked by uid 99); 10 Jul 2009 11:01:51 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 10 Jul 2009 11:01:51 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.130] (HELO eos.apache.org) (140.211.11.130) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 10 Jul 2009 11:01:48 +0000 Received: from eos.apache.org (localhost [127.0.0.1]) by eos.apache.org (Postfix) with ESMTP id 183DD118AA for ; Fri, 10 Jul 2009 11:01:27 +0000 (GMT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Apache Wiki To: wiki-changes@httpd.apache.org Date: Fri, 10 Jul 2009 11:01:26 -0000 Message-ID: <20090710110126.25987.52563@eos.apache.org> Subject: [Httpd Wiki] Update of "DebianDeb0rkification" by jmcg X-Virus-Checked: Checked by ClamAV on apache.org Dear Wiki user, You have subscribed to a wiki page or wiki category on "Httpd Wiki" for change notification. The following page has been changed by jmcg: http://wiki.apache.org/httpd/DebianDeb0rkification ------------------------------------------------------------------------------ We defused the danger of ambiguity, by changing and moving the ''NameVirtualHost *:80'' directive above the ''Include'' line for the virtual hosts, thus enabling new administrators to simply copy, paste, and edit this file. + === mods-enabled === + ''a2enmod'' and ''a2dismod'' can be used to link configuration sinplets from ''mods-available'' to ''mods-enabled'' which then get's included into ''apache2.conf''. This is supposed to ease administration. + Yet special caution has to be taken with certain modules when enabled in Debian. An wiki page has already been devoted to [http://wiki.apache.org/httpd/DebianPHP PHP]. + + Another module worth mentioning is ''mod_proxy''. It's default configuration is that of a Reverse-Proxy, and this is emphasized in Debian's default config: + {{{ + + #turning ProxyRequests on and allowing proxying from all may allow + #spammers to use your proxy to send email. + + ProxyRequests Off + + + AddDefaultCharset off + Order deny,allow + Deny from all + #Allow from .example.com + + + # Enable/disable the handling of HTTP/1.1 "Via:" headers. + # ("Full" adds the server version; "Block" removes all outgoing Via: headers) + # Set to one of: Off | On | Full | Block + + ProxyVia On + + }}} + Now the problem here is the directive {{{Deny from all}}}, which effectively denies access to the proxy, leading to {{{403 Errors}}} ClientDeniedByServerConfiguration errors in the ErrorLog. +