A little background on what this host is doing.
We have a winblows updates server. The clients on the inside (private ip, LAN) have no problems getting updates from this server. The clients that are not on the inside or connected by VPN do not get the updates from this server. So i write a rule in apache host:
Currently, i have configured a rewrite:
<VirtualHost *:80>
ServerAdmin admin email address
ServerName subdomain.domain.net
RewriteEngine On
#RewriteCond %{HTTP_HOST} !^subdomain.domain.net$ [NC]
RewriteRule ^/(.*)$ http://private ip/selfupdate [P,L]
# if not specified, the global error log is used
ErrorLog /var/log/apache2/subdomain.domain.net-error_log
CustomLog /var/log/apache2/subdomain.domain.net-access_log combined
According to the host apache logs, it is being "redirected" correctly. The problem is that on the client, updates are not happening. According to the host apache log:
24.106.207.154 - - [16/Oct/2012:10:18:59 -0400] "HEAD /selfupdate/wuident.cab?1210161421 HTTP/1.1" 301 - "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:10:19:22 -0400] "HEAD /selfupdate/wuident.cab?1210161421 HTTP/1.1" 301 - "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:10:19:45 -0400] "HEAD /selfupdate/wuident.cab?1210161421 HTTP/1.1" 301 - "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:10:20:09 -0400] "HEAD /selfupdate/wuident.cab?1210161421 HTTP/1.1" 301 - "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:10:20:40 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:10:24:51 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:10:33:20 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:10:40:14 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:10:48:40 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:10:59:45 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:11:04:09 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:11:14:58 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:11:17:45 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:11:17:45 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:11:20:03 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:11:20:03 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:11:36:29 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:11:48:29 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:11:50:20 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:12:05:22 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:12:06:17 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
108.169.158.241 - - [16/Oct/2012:12:28:56 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
24.106.207.154 - - [16/Oct/2012:12:28:59 -0400] "POST /SimpleAuthWebService/SimpleAuth.asmx HTTP/1.1" 405 1293 "-" "Windows-Update-Agent"
I run wireshark on the "redirecting" server and see 0 errors regarding this issue. It appears to me that the problem is the connection back to the client. Let me see if i can explain:
the admin UI of the winblows updates shows the outside client (the ones not getting the updates) as the "redirecting/apache" server ip address (192.168.123.xxx). So any connection from the winblows updates server goes to the apache server. Maybe this is the problem, maybe not. Just my 2 cents as i think this through
I am wondering if this needs to be a proxy statement instead of a rewrite rule? Or do i need to use some other module?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|