I changed configuration. Mandriva's default configuration is:
<IfModule mod_proxy.c>
# <Proxy> - Container for directives affecting resources located
in the proxied location
<Proxy *>
Order deny,allow
Deny from all
# Allow from .your-domain.com
</Proxy>
...
# ProxyRequests - on if the true proxy requests should be accepted
ProxyRequests On
...
</IfModule>
In this environment, apache will return code 403 for those:
ProxyPass /compras http://192.168.4.4/compras/
ProxyPassReverse /compras http://192.168.4.4/compras/
Is there any alternative? Is it possible to limit access to known
users/passwords?
Thanks,
Leo.
2006/11/9, Joshua Slive <joshua@xxxxxxxx>:
On 11/9/06, Leonardo Neves <leonardo.neves@xxxxxxxxx> wrote: > My ip was in the list, but it is not any more. > I would like to know if it's possible to use mod_proxy in a server > connected to the internet in a safe way. Of course. It just needs to be protected by authentication or access restrictions. See: http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#access And by the way, if Mandriva had the proxy turned on and unprotected in any sort of a default configuration, then you should report this as a bug to them. (If you configured it yourself, you should read the docs first next time.) Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|