I allready tried it but with no effects. In apache2.conf i have: #LoadModule proxy_module modules/mod_proxy.so #LoadModule proxy_connect_module modules/mod_proxy_connect.so #LoadModule proxy_ftp_module modules/mod_proxy_ftp.so #LoadModule proxy_http_module modules/mod_proxy_http.so and response on telnet is still HTTP/1.1 200 On Tue, 21 Jun 2005, Axel-Stéphane SMORGRAV wrote:
Would it not be simpler just not to load mod_proxy ? I am not too sure it is a good idea to run mod_proxy on an Apache that also runs PHP.
-ascs
-----Original Message-----
From: Bohumil Holubec [mailto:bozek@xxxxxxx]
Sent: Tuesday, June 21, 2005 2:33 AM
To: users@xxxxxxxxxxxxxxxx
Subject: [users@httpd] limit CONNECT
I have apache 2.0.54 with PHP4.3.11 and I would like to deny method CONNECT like this: (its on the end of apache2.conf) <Location />
<Limit CONNECT>
Order Deny,Allow
Deny from all
</Limit>
</Location>
Now when i try:
$ telnet www.somehost.com 80
Trying ###.###.###.###...
Connected to www.somehost.com.
Escape character is '^]'.
CONNECT www.google.com:80 HTTP/1.0
[enter]
[enter]
I have response HTTP/1.1 403 Forbidden
BUT all other directives and settings using order... doesnt works. For
example:
<IfModule mod_access.c>
<Files ~ "^\.ht">
Order allow,deny
Deny from all
</Files>
</IfModule>
from apache config file doesnt works (all .ht files are accessible).
Settings from .htaccess files has no effects too etc.
Without <limit CONNECT>... the response on telnet is HTTP/1.1 200 and i dont want it.
Can someone help me with deny method connect please.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|