https://bz.apache.org/bugzilla/show_bug.cgi?id=58120

--- Comment #3 from Andrew Chadwick <[email protected]> ---
Created attachment 38215
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=38215&action=edit
testcase.tar.gz

Minimal test case, for Debian 11. I hope the little tarball attaches.

If your test instance is on Debian 11, unpack the tarball to / (or somewhere
safe and then move the files). Don't forget to "a2enmod proxy" and a2enmod
proxy_http".

If you're using something else, note that Debian 11 does the following from its
main config file, and adapt yours accordingly to include the two config stubs
in that tarball.

----------------8<-------------
root@debian11test:/etc/apache2# grep ^Include /etc/apache2/apache2.conf 
IncludeOptional mods-enabled/*.load
IncludeOptional mods-enabled/*.conf
Include ports.conf
IncludeOptional conf-enabled/*.conf
IncludeOptional sites-enabled/*.conf
---------------->8-------------

Once this is set up, you can test it as follows by tailing the logs.

HEAD http://YOUR.IP         # hits the default page on the default site
HEAD http://YOUR.IP:1080    # hits the default page on the port 1080 vhost
HEAD http://YOUR.IP:1081    # hits the default page on the port 1081 vhost
HEAD http://YOUR.IP/port1080/  # proxied to the port 1080 vhost, hits the
default page
HEAD http://YOUR.IP/port1081/  # proxied to the port 1081 vhost, hits the
default page
HEAD http://YOUR.IP/port1080/other/xxx  # double proxy! hits the *port 1081*
vhost, and 404s
HEAD http://YOUR.IP/port1081/other/xxx  # double proxy! hits the *port 1080*
vhost, and 404s

The 1080 and 1081 vhosts are configured with a further /other ProxyPass
directive, which does not exist on the default port 80 site. This is just to
demonstrate that ProxyPass is working for the 108[12] default vhosts, and is
expected behaviour.

After this, the *incorrect* behaviour can be confirmed by tailing the logs

HEAD http://YOUR.IP/port1080/port1081/yyy  # hits the :1081 vhost (where it
404s)
    # Should be 404ed by the port 1080 vhost because ProxypassInherit is Off
everywhere.
HEAD http://YOUR.IP/port1081/port1080/zzz  # hits the :1080 vhost (where it
404s)
    # Again, this is being proxied on to the wrong local vhost.
ProxyPassInherit Off
    # is blocking inheritance of the wrong directives.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to