Hello, Unfortunately, there is no restriction of any sort on intra-8.lan. I can access the website with links2 on the proxy server and remember that when someone is browsing this proxy from Internet without a proxy, it's working. To clarify : This is working with apache 2.2 and apache 1.3 : Customer => *Internet* => httpd reverse proxy => intranet web server This is only working with apache 1.3 : Customer => Customer proxy server => *Internet* => httpd reverse proxy => Intranet web server Also remember that the httpd reverse proxy is serving https while the Intranet web server is serving http (reverse proxy http from http is working, but it's not an option for me). Regards, Jeremie 2009/12/21 Devraj Mukherjee <devraj@xxxxxxxxx>: > At first guess it seems like your server intra-8.lan is dropping > connections for the new server. > > Does intra-8.lan restrict connections from certain IPs? > > On Thu, Dec 17, 2009 at 11:54 PM, Jérémie G <aceslash@xxxxxxxxx> wrote: >> Hello, >> >> I have to migrate a working reverse proxy from apache-ssl >> 1.3.33-6sarge3 to apache2 2.2.9-10+lenny6 with ssl but I encounter a >> critical issue : when I try to access the website from behind a proxy, >> it's working with apache 1.3 but not with apache 2.2 (without proxy, >> it's working fine for both version). >> >> The error displayed in the error.log is : [error] (104)Connection >> reset by peer: proxy: prefetch request body failed to 192.168.20.8 >> (intra-8.lan) from a.b.c.d () >> >> Both server have IP address in the same subnet and have only this >> virtual host enabled. >> >> I have tried some tweak in the configuration but I'm clueless to find >> any parameter correcting this behavior. Bellow is the apache-ssl 1.3 >> config vhost file : >> <VirtualHost *> >> ServerName extranet.enterprise.com >> ServerAdmin support@xxxxxxxxxxxxxx >> SSLCertificateFile /etc/apache-ssl/ssl/ip-13.crt >> SSLCertificateKeyFile /etc/apache-ssl/ssl/ip-13.key >> ProxyPass / http://intra-8.lan/ >> ProxyPassReverse / http://intra-8.lan/ >> </VirtualHost> >> >> An here is the apache 2.2 config file : >> <IfModule mod_ssl.c> >> <VirtualHost xx.xx.xx.xx:443> >> ServerName extranet-new.enterprise.com >> ServerAdmin support@xxxxxxxxxxxxxx >> SSLEngine On >> SSLCertificateFile /etc/apache2/ssl/ip-14.crt >> SSLCertificateKeyFile /etc/apache2/ssl/ip-14.key >> ProxyRequests Off >> <Proxy *> >> Order Deny,Allow >> Allow from all >> </Proxy> >> ProxyPass / http://intra-8.lan/ >> ProxyPassReverse / http://intra-8.lan/ >> </VirtualHost> >> </IfModule> >> >> I really need to migrate this website to the new server, any idea ? >> >> Jeremie >> >> --------------------------------------------------------------------- >> The official User-To-User support forum of the Apache HTTP Server Project. >> See <URL:http://httpd.apache.org/userslist.html> for more info. >> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx >> " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx >> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx >> >> > > > > -- > "The secret impresses no-one, the trick you use it for is everything" > - Alfred Borden (The Prestiege) > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|