ProxyRequest Off not working ?

Hi everyone,

I have invested lots of hours, now I hope I can get help here. I have
Apache 2.2.0 on a linux mandrake. Build using a "./configure
--enable-rewrite --enable-proxy". I need the rewrite proxy support [P]
for some URLs on my site.

Everything works great .. and I love it :) But suddenly our site
appeared on http://dsbl.org/listing?xxx.xxx.xxx.xxx because of the
possibility to proxy requests to mail-server over our webserver.

Why is Apache proxying requests? I never enabled it somewhere, and even
configured it with "ProxyRequests Off" which is the default. :(

There is no chance of stoping Apache from proxiing every request :(

I can disable it with:
<Proxy *>
Order Allow,Deny
Deny from all
Allow from 127.0.0.1/255.255.255.255
</Proxy>

But this will also disable the mod_rewrite proxy entry I really need :(

Some help out there .... Would be very happy
Thanx in advance
Alexander Zbiek

ARMistice@gmx.de wrote:
> because of the
> possibility to proxy requests to mail-server over our webserver.

ProxyRequests Off disables the forward proxy. What has this to do with
your mail daemon? Apache can handle forward/reverse http(s) proxying.

The site http://dsbl.org/sender doesn't talk about a web server proxy
but about an open mail relay. So check your mail program e.g. sendmail
or postfix. Use e.g. SMTP AUTH to close the open relay.

--
Robert

Hello Robert,

thanx for your reply. Dsbl lists our server because you can acces a
mail server via our webserver with a request like this "POST
htpp://a.mail.server:25/". So our mail server is not the problem. DSBL
states this for our server.

And if I disable it with "ProxyRequests Off". I still can do this
accessing of mailservers via our webserver :(

It seems to me that its not possible to turn off ProxyRequests, because
there is no difference between the configuration "ProxyRequests On" or
"ProxyRequests Off"

Thanks to all readers again :)
Alexander Zbiek

ARMistice@gmx.de wrote:
> It seems to me that its not possible to turn off ProxyRequests, because
> there is no difference between the configuration "ProxyRequests On" or
> "ProxyRequests Off"

Hm... That should be not the case, of course.
Regarding
Allow from 127.0.0.1/255.255.255.255

did you check, if the ENV SERVER_ADDR is 127.0.0.1? Depending upon
configuration, apache might identify itself with an other IP (if there
is such an internal identification at all).
BTW: Your order directive is wrong, it must be Deny,Allow

If that all doesn't work: An other way in restricting access _might_ be


<Proxy *>
RewriteEngine On
RewriteRule ^[a-z]+://[^/:]+:25(/|$) - [F,NC]
</Proxy>

but I don't know, what is seen here and what gets striped from the
filepath of the RewriteRule. You might check that with a Rewritelog.

Or may be

<Proxy *:25>
Order Allow,Deny
Deny from all
</proxy>

works? The proxy container expects a wildcard-url.

--
Robert