Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-13 Thread James
On Wed, 13 Mar 2002 10:14:04 -0500 Pierre Fortin <[EMAIL PROTECTED]> wrote: > On Wed, 13 Mar 2002 00:48:26 -0800 James <[EMAIL PROTECTED]> wrote: > > > I didn't even get the connect... but as strange as my nets been today > > I'm not suprised. If 8200 isn't working then the problem is not > > p

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-13 Thread Pierre Fortin
On Wed, 13 Mar 2002 00:48:26 -0800 James <[EMAIL PROTECTED]> wrote: > I didn't even get the connect... but as strange as my nets been today > I'm not suprised. If 8200 isn't working then the problem is not > perl-httpd, or so I would think. Now for any who know, is this > something that should

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-13 Thread James
On Wed, 13 Mar 2002 01:11:26 -0500 Pierre Fortin <[EMAIL PROTECTED]> wrote: > On Tue, 12 Mar 2002 20:21:46 -0800 James <[EMAIL PROTECTED]> wrote: > > > > Pierre, > > I never doubted you. Just wondering how it was supposed to work > > when it's bad that is. To clear up turning off pro

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-12 Thread Pierre Fortin
On Tue, 12 Mar 2002 20:21:46 -0800 James <[EMAIL PROTECTED]> wrote: > Pierre, > I never doubted you. Just wondering how it was supposed to work > when it's bad that is. To clear up turning off proxy, are you > refering to removing the following line from httpd.conf? [snip] Yes; turn

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-12 Thread James
On Tue, 12 Mar 2002 17:42:22 -0500 Pierre Fortin <[EMAIL PROTECTED]> wrote: > On Tue, 12 Mar 2002 13:33:00 -0600 "J. Craig Woods" <[EMAIL PROTECTED]> > wrote: > > > James wrote: > > > > > > > On Sun, 2002-03-10 at 20:26, Pierre Fortin wrote: > > > > > Ooops... forgot to add that I needed to hi

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-12 Thread Pierre Fortin
On Tue, 12 Mar 2002 13:33:00 -0600 "J. Craig Woods" <[EMAIL PROTECTED]> wrote: > James wrote: > > > > > On Sun, 2002-03-10 at 20:26, Pierre Fortin wrote: > > > > Ooops... forgot to add that I needed to hit Return after sending > > > > the GET; so the full instructions are: > > > > > > > >te

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-12 Thread J. Craig Woods
James wrote: > > > On Sun, 2002-03-10 at 20:26, Pierre Fortin wrote: > > > Ooops... forgot to add that I needed to hit Return after sending the GET; > > > so the full instructions are: > > > > > >telnet 80 > > >GET http:// HTTP/1.0 > > > > > > > > > Without the extra return, the com

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-11 Thread James
On 11 Mar 2002 09:18:58 -0500 Mark Weaver <[EMAIL PROTECTED]> wrote: > On Sun, 2002-03-10 at 20:26, Pierre Fortin wrote: > > Ooops... forgot to add that I needed to hit Return after sending the GET; > > so the full instructions are: > > > >telnet 80 > >GET http:// HTTP/1.0 > > > >

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-11 Thread Pierre Fortin
On Mon, 11 Mar 2002 16:31:24 -0600 Michael Viron <[EMAIL PROTECTED]> wrote: > The latest apache, 1.3.23, disables the passthrough feature by default > -- I'm not sure about the 2.x series, since I've not used it. When I found this, I checked the www.apache.org (2.0.32) and it was either correctl

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-11 Thread Michael Viron
The latest apache, 1.3.23, disables the passthrough feature by default -- I'm not sure about the 2.x series, since I've not used it. Michael -- Michael Viron <[EMAIL PROTECTED]> Database Administrator / Web Statistician Simple End User Linux At 09:18 AM 3/11/2002 -0500, you wrote: >On Sun, 2002

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-11 Thread Mark Weaver
On Sun, 2002-03-10 at 20:26, Pierre Fortin wrote: > Ooops... forgot to add that I needed to hit Return after sending the GET; > so the full instructions are: > >telnet 80 >GET http:// HTTP/1.0 > > > Without the extra return, the command "just sits" there as you discovered. > > Sor

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-10 Thread Pierre Fortin
Ooops... forgot to add that I needed to hit Return after sending the GET; so the full instructions are: telnet 80 GET http:// HTTP/1.0 Without the extra return, the command "just sits" there as you discovered. Sorry for the oversight, Pierre On Sun, 10 Mar 2002 18:01:13 -0700 Ken T

Re: [expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-10 Thread Ken Thompson
Pierre, When I do that I get the html from this server then the connection is "closed by forign host" Before the "GET" command, nothing, just sits there waiting for input. But, it doesn't get any info from the server I tried, www.foo.com format.. On Sunday 10 March 2002 05:41 pm, you wrote: > FY

[expert] Fw: RE: Apache 1.3.x allows passthrough

2002-03-10 Thread Pierre Fortin
FYI... I found a scumbag using my web server to hide behind while [s]he accessed other servers. Mandrake: your server is also configured to allow these passthrough requests! To test your server, issue these comamds: telnet 80 GET http:// HTTP/1.0 If you get the output from , is all