Search squid archive

Re: Inspite squid in front of apache : direct connection from foreign IP address ? how to deny this ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 3/28/08, Ric <lists@xxxxxxxxxxx> wrote:
>
>  On Mar 27, 2008, at 11:37 PM, kk CHN wrote:
>
>  > On 3/28/08, Ric <lists@xxxxxxxxxxx> wrote:
>  >>
>  >> On Mar 27, 2008, at 9:57 PM, kk CHN wrote:
>  >>
>  >>> People:  in my server box , I am using squid as http accelerator
>  >>> ;setup is as follows
>  >>>
>  >>> Flow of requests from users should be like this
>  >>>
>  >>> squid listens on public ip port:80   --->apache(127.0.0.1:80) ---
>  >>> RewriteRule for apache to--->zope:8080/plonesite
>  >>>
>  >>>
>  >>>
>  >>> Important  NOTE :     for the last couple of days I am experiencing
>  >>> that my  plone site on zope :8080 is become not acceesible after 5/6
>  >>> hours ,after the services I restarted :
>  >>>
>  >>> when I run the command # ` sockstat -4p 80 `
>  >>> here I can see a specific IP address (164.115.5.2 )    connecting
>  >>> directly  ande  using   python2.4 as  pasted below .
>  >>
>  >>
>  >>
>  >> Umm... Zope is a python process.  Are you perchance connecting to the
>  >> Zope server directly yourself?
>  >
>  > Yes I do from my lan machine , by ssh tunnel :   but thsi IP address
>  > "164.115.5.2 "  noway  related to ours :
>  >
>  > I know that a couple of members other than me has  admin privileged
>  > accounts in the Zopeserver;  but last week I changed all their account
>  > passwords to make sure only me as the admin to check  how the site
>  > going down after few hours a service restart.
>  >
>  > any more info ...?
>
>
>
>
> What then is on ports 65287 and 64313 on your server?

www      python2.4  44496 20 tcp4   my_Serverbox_public_IPAddress
:65287 164.115.5.2:80

Here the pid 44496 I greped

$ ps -aux|grep 44496
www     44496  0.0 21.3 445368 442940  ??  S    Thu11AM 203:49.39
/usr/local/bin/python2.4 /usr/local/www/Zope28/lib/python/Zope

its conecting to the zope process :  So it means some thing going
wrong with my machine? that foreign  ip  has access through some holes
 of my plone/zope application right?

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux