Securing forward proxy for CONNECT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi there,

 

I am using apache to proxy https requests to a remote server using the AllowCONNECT method and am using ProxyRemote to send everything. What I really need to do is limit what the proxy will send but everything I try is not giving me what I want.

 

Client issues the request for https://www.anotherdomain.com:8444/URL after setting their browser proxy settings to my proxy server.

 

Which is fine and gets proxied using the CONNECT Method, but if the browser issues any other request, e.g hourly RSS get, different homepage on startup etc. then these all get sent to the Proxy and onwards. This is okay but I want the proxy to stop these requests unless they match the URI specified.

 

My current config is as follows:

 

ProxyRequests On

ProxyTimeout 60

 

<Proxy *>

Order Allow,Deny

Allow from all

</Proxy>

 

ProxyPass /server-status !

 

ProxyRemote * http://a.n.otherproxy:8080

AllowCONNECT 8444

 

I have tried using the mod_setenvif to set access control,e.g:

 

SetEnvIf Request_URI ^/URL/* let_me_in

<Proxy *>

Order Deny,Allow

Deny from all

Allow from env=let_me_in

</Proxy>

 

However this only seems to work on straight HTTP calls and not on the CONNECT method.

 

Any ideas?

 

Cheers

 

Steve

Capgemini is a trading name used by the Capgemini Group of companies which includes Capgemini UK plc, a company registered in England and Wales (number 943935) whose registered office is at No. 1 Forge End, Woking, Surrey, GU21 6DB.

This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux