mod_proxy will not allow CONNECT
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Hi
I have mod_proxy and mod_proxy_connect compiled into httpd if i run httpd -l.
I'm using the following mod_proxy configuration.
<VirtualHost proxy.domain.tld:8000>
DocumentRoot /usr/local/apache/htdocs
Customlog logs/proxy.domain.tld-access.log combined
ErrorLog logs/proxy.domain.tld-error.log
HostnameLookups On
ProxyRequests on
AllowCONNECT 22 1022
ProxyVia on
### Deny everything by default
<Proxy *>
Order deny,allow
Deny from all
</Proxy>
<Proxy *>
Order deny,allow
Deny from all
### External (customer) sites allowed to connect
Allow from 10.10.10.10
</Proxy>
</VirtualHost>
The whole web server has 8000 has Listen directive in httpd.conf also.
No matter what i try, i've tried removing all restrictions, it doesn't give me CONNECT as an allowed method, i keep getting 405 errors when i try to use it.
Here is output from the program proxytunnel when it tries to connect.
Tunneling to server.domain.tld:1022 (remote proxy)
Communication with local proxy:
-> CONNECT server.domain.tld:1022 HTTP/1.0
-> Proxy-Connection: Keep-Alive
-> User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)\n
<- HTTP/1.1 405 Method Not Allowed
HTTP return code: 405 Method Not Allowed
<- Date: Sun, 02 Aug 2009 16:41:11 GMT
<- Server: Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8e PHP/5.2.8
<- Allow: GET,HEAD,POST,OPTIONS,TRACE
<- Content-Length: 236
<- Connection: close
<- Content-Type: text/html; charset=iso-8859-1
ssh_exchange_identification: Connection closed by remote host
I can connect just fine from the client machine with netcat and proxytunnel but i can't get the CONNECT method to be allowed, what am i missing?
--
Med vänliga hälsningar
Stefan Midjich aka nocturnal
[SWEHACK] http://swehack.se
[Index of Archives]
[Open SSH Users]
[Linux ACPI]
[Linux Kernel]
[Linux Laptop]
[Kernel Newbies]
[Security]
[Netfilter]
[Bugtraq]
[Squid]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Samba]
[Video 4 Linux]
[Device Mapper]