Re: [users@httpd] Incompatibility Apache reverse proxy and Internet Explorer?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Olli,

What OS and apache version are/were you using? Also Windows? Also 2.2.x?

(Secretly I'm hoping that all will be better on *n[iu]x)

Spil.

On 14/11/06, Kirchel Oliver <Kirchel@xxxxxxxxxxxxxxx> wrote:
Hi,
I think we had the same error.

"The DMZ1 proxy is connected via ssl, the other connections are plain http."

Try to connect "the other connection" via ssl, too.

That was our solution.

Greetings

Olli

-----Ursprüngliche Nachricht-----
Von: Spil Oss [mailto:spil.oss@xxxxxxxxxxxxxx]
Gesendet: Dienstag, 14. November 2006 13:22
An: users@xxxxxxxxxxxxxxxx
Betreff: [users@httpd] Incompatibility Apache reverse proxy and Internet Explorer?

Hi all,

Spuriously we get "Server not found or DNS Error" in Internet Explorer
for a site that is reversed proxied with Apache.
Please find a txt export of the pcap dump attached.

What seems to happen is that the reverse proxy returns FIN, ACK on the
3 connections from IE and subsequently a RST. This then triggers IE
into displaying the "Server not found or DNS Error" message.
Disabling "Show friendly HTTP error messages" seems to help, but we
can't force "the whole world" to change that setting in their Internet
Explorer browser (if that were possible for users in a business
environment anyway)

The setup:
Internet Explorer ->
Reverse Proxy DMZ1 ->
Reverse Proxy DMZ2 ->
Application Server
v.v.

The reverse proxies have simple proxy rules like
ProxyPass /b2b_portal/ http://dmz2web.domain.com:8080/b2b_portal/
<Location /b2b_portal/>
  ProxyPassReverse /b2b_portal/
</Location>

and on dmz2web
ProxyPass /b2b_portal/ http://app1.domain.com:80/b2b_portal/
<Location /b2b_portal/>
  ProxyPassReverse /b2b_portal/
</Location>

The DMZ1 proxy is connected via ssl, the other connections are plain http.

Anyone experience this before and/or can explain this behaviour of the
apache reverse proxy? (2.2.3-ssl running on Windows 2003)

PS. We used IIS as reverse proxy before and that was fine.....
PS. No such behaviour using Firefox 1.5/2.0

Help is very much appreciated!

Kind regards,

Spil.

D:\Apache2.2>bin\httpd.exe -V
Server version: Apache/2.2.3
Server built: Aug 10 2006 17:29:16
Server's Module Magic Number: 20051115:3
Server loaded: APR 1.2.7, APR-Util 1.2.7
Compiled using: APR 1.2.7, APR-Util 1.2.7
Architecture: 32-bit
Server MPM: WinNT
threaded: yes (fixed thread count)
forked: no
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/winnt"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D DYNAMIC_MODULE_LIMIT=128
-D HTTPD_ROOT="/apache"
-D SUEXEC_BIN="/apache/bin/suexec"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_ERRORLOG="logs/error.log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

D:\Apache2.2>bin\httpd.exe -M
Loaded Modules:
core_module (static)
win32_module (static)
mpm_winnt_module (static)
http_module (static)
so_module (static)
actions_module (shared)
alias_module (shared)
asis_module (shared)
auth_basic_module (shared)
authn_default_module (shared)
authn_file_module (shared)
authz_default_module (shared)
authz_groupfile_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
cgi_module (shared)
dir_module (shared)
env_module (shared)
imagemap_module (shared)
include_module (shared)
isapi_module (shared)
log_config_module (shared)
mime_module (shared)
proxy_module (shared)
proxy_connect_module (shared)
proxy_http_module (shared)
negotiation_module (shared)
rewrite_module (shared)
setenvif_module (shared)
userdir_module (shared)
ssl_module (shared)
Syntax OK


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux