I changed configuration. Mandriva's default configuration is:

<IfModule mod_proxy.c>

   # <Proxy> - Container for directives affecting resources located
in the proxied location
   <Proxy *>
       Order deny,allow
       Deny from all
   #    Allow from .your-domain.com
   </Proxy>
   ...
   # ProxyRequests - on if the true proxy requests should be accepted
   ProxyRequests On
   ...
</IfModule>

In this environment, apache will return code 403 for those:
   ProxyPass /compras http://192.168.4.4/compras/
   ProxyPassReverse /compras http://192.168.4.4/compras/

Is there any alternative? Is it possible to limit access to known
users/passwords?

Thanks,
Leo.

2006/11/9, Joshua Slive <[EMAIL PROTECTED]>:
On 11/9/06, Leonardo Neves <[EMAIL PROTECTED]> wrote:
> My ip was in the list, but it is not any more.
> I would like to know if it's possible to use mod_proxy in a server
> connected to the internet in a safe way.

Of course.  It just needs to be protected by authentication or access
restrictions.  See:
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#access

And by the way, if Mandriva had the proxy turned on and unprotected in
any sort of a default configuration, then you should report this as a
bug to them.  (If you configured it yourself, you should read the docs
first next time.)

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to