On Mon, Jul 27, 2009 at 10:28 PM, Ricardo Newbery 
<[email protected]>wrote:

>
> On Jul 27, 2009, at 9:19 PM, Mark Phillips wrote:
>
>  I added the stanza:
>>
>> <Proxy *>
>>  Order Deny,Allow
>>  Allow from all
>> </Proxy>
>>
>> and I now can get to my plone site. However, doesn't that <Proxy *> make
>> may server an open proxy for everyone to use?
>>
>> Mark
>>
>
>
> Not when configured as a reverse proxy.  You may want to read up on the
> difference between a forward proxy and a reverse proxy.
> http://httpd.apache.org/docs/2.2/mod/mod_proxy.html
>
> Ric
>
> Ric,

Thanks for all your help. One last question. I have read almost all of the
help pages on the plone site about setting up zope behind apache, and one of
them recommended this addition to the apache config:

    # prevent the webserver from being used as proxy
    <LocationMatch "^[^/]">
       Deny from all
    </LocationMatch>

Is it necessary?

Also, (ok, two questions...;-) ) how can I test if my server is acting as an
open proxy from the command line - my server does not have X running? I
google that, and found one reference that suggested

telnet xxx.xxx.xxx.xxx 80
GET http://www.yahoo.com HTTP/1.1

If yahoo is returned, then it is acting as an open proxy. Are there other
ways?

Thanks!

Mark
_______________________________________________
Product-Developers mailing list
[email protected]
http://lists.plone.org/mailman/listinfo/product-developers

Reply via email to