RE: [users@httpd] limit CONNECT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Would it not be simpler just not to load mod_proxy ? I am not too sure it is a good idea to run mod_proxy on an Apache that also runs PHP.

-ascs 

-----Original Message-----
From: Bohumil Holubec [mailto:bozek@xxxxxxx] 
Sent: Tuesday, June 21, 2005 2:33 AM
To: users@xxxxxxxxxxxxxxxx
Subject: [users@httpd] limit CONNECT

I have apache 2.0.54 with PHP4.3.11 and I would like to deny method CONNECT like this: (its on the end of apache2.conf) <Location />
   <Limit CONNECT>
     Order Deny,Allow
     Deny from all
   </Limit>
</Location>

Now when i try:
$ telnet www.somehost.com 80
Trying ###.###.###.###...
Connected to www.somehost.com.
Escape character is '^]'.
CONNECT www.google.com:80 HTTP/1.0
[enter]
[enter]

I have response HTTP/1.1 403 Forbidden
BUT all other directives and settings using order... doesnt works. For
example:
<IfModule mod_access.c>
<Files ~ "^\.ht">
     Order allow,deny
     Deny from all
</Files>
</IfModule>
from apache config file doesnt works (all .ht files are accessible). 
Settings from .htaccess files has no effects too etc.

Without <limit CONNECT>... the response on telnet is HTTP/1.1 200 and i dont want it.
Can someone help me with deny method connect please.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux