[us...@httpd] Custom headers in Connect message

2010-07-09 Thread David Vaughan
Hi there, I'm running Apache 2.2.11 on Windows XP configured as a forward proxy. One of it's functions is to add a custom header to the request using the RequestHeader set directive. The server does not include mod_ SSL but is configured to tunnel HTTPS traffic using the AllowCONNECT directive.

RE: [us...@httpd] Re: Custom headers in Connect message

2010-07-09 Thread David Vaughan
Not as I understand MITM. I've no desire to poke around with https headers or data. All I need to do is add an additional header into the CONNECT message. Apache already inserts a Proxy-agent header into this message and I just want to do insert a further X-Forwarded-For header which a second

[us...@httpd] ProxyBlock

2009-06-18 Thread David Vaughan
Hi there. I have been experimenting with the ProxyBlock directive when running Apache 2.2 as a forward proxy. When Apache is the final proxy in a chain, everything works as expected. However if I configure Apache to chain requests to another proxy (using ProxyRemote *

RE: [us...@httpd] Use of NoProxy without a DNS lookup

2009-06-01 Thread David Vaughan
, DNS or no DNS, and your proxy would send these request to nowhere. IMHO, Chris -Original Message- From: David Vaughan [mailto:david.vaug...@satemail.com] Sent: Thursday, May 28, 2009 12:46 PM To: users@httpd.apache.org Subject: [us...@httpd] Use of NoProxy without a DNS lookup

[us...@httpd] Use of NoProxy without a DNS lookup

2009-05-28 Thread David Vaughan
Hi there. I have an Apache server (2.2.11 running on Windows XP) which acts as a forward proxy for a small network connected via a slow IP link to a main proxy server. The network has an intranet so the NoProxy command is used to prevent sending these requests to the main proxy. However this

[us...@httpd] Locking down a proxy server

2009-03-23 Thread David Vaughan
I have a number of networks (think of them as being in local offices), each of which is connected to the internet via a NAT'ed firewall. Users on these networks access the internet via an Apache server acting as a forwarding proxy. These local office proxies are then chained to a single central

RE: [us...@httpd] Locking down a proxy server

2009-03-23 Thread David Vaughan
Davide Bianchi wrote: Use your local firewall to implement a transparent proxy, configure each local proxy to forward his request to the main proxy on a special port, filter on the main proxy with that port only and implement certificate authentication between the local and the central proxy. See

RE: [us...@httpd] Locking down a proxy server

2009-03-23 Thread David Vaughan
From: Krist van Besien [mailto:krist.vanbes...@gmail.com] While apache can be used as a general web proxy it is not the best suited program for this. I'd look in to squid. You can install squid on all your local office, and configure it to use the central office as a parent cache. Squid

[us...@httpd] Error updating cache on Windows

2009-03-10 Thread David Vaughan
I am running Apace 2.2.11 on Windows XP as a caching proxy. An attempt by Apache to refresh a cached header always results in an access denied warning. This is shown in the error log as: cache_storage.c(272): Cached response for url isn't fresh. Adding/replacing conditional request headers.