Server :: How Does ProxyPass (Directive / Reverse) Works
Jun 4, 2010
I want to know how does directive ProxyPass and ProxyPassReverse work. If I have an application on an internal webserver running on port 8080 on Lan but I want it to be accessible on internet via Server A which has public IP but firewall (which I do not have control blocks all except port 80).
Code:
Server A -----------------------------------------Server B
Public IP LAN
(Port 8080 blocked)
if I write
Code:
ProxyPass /application http://192.168.1.5:8080
ProxyPassReverse /application http://192.168.1.5:8080
Will the application be accessible outside. Or do I need to contact sysadmin to open 8080 in A in above diagram. Is there any other way to do the same in apache2.
View 2 Replies
ADVERTISEMENT
Apr 23, 2010
Its a silly problem but I am facing it.The OS is Debian Lenny ,apache2. I am having a webserver.www.mydomain.comand site1.mydomain.comsite1 is on a webserver which is on LAN.
On main server i.e. our Gateway
in /etc/apache2/sites-available/
I have
[code].....
View 4 Replies
View Related
Oct 12, 2009
I am using RHEL5. These are my config files:
Code:
options {
listen-on port 53 { 127.0.0.1; 192.168.14.54; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
[code]....
View 3 Replies
View Related
Jan 15, 2010
So im setting up my own server never done it before so should be interesting Im going to install apache but it says in my instructionsFirst thing is make sure you open up /etc/httpd/conf/httpd.conf and at least change the ServerName directiveSo ive found the file, and i managed to open it with hte command ed httpd.conf But it just showed a 5 or 6 digit number.Do i need to edit this and why ?What command should i use to edit? what should i put into this file ? how do i close the file when ive edited it?
View 6 Replies
View Related
Jul 22, 2010
I want to pass a directive to all but one or two locations. How do I do that?
Like:
<Location /1>
xxx
</Location>
<Location /2>
[code]...
View 2 Replies
View Related
Apr 26, 2011
So I am brand new to the Ubuntu Server realm and Linux in general (15 years MS development utilizing MS Servers), and so far have been able to tackle some of the most pain in the butt installs and configs ever (VMWare Server being the worst and least stable, but running good now). I have done the site search thing to find out if there were similar issues surrounding Apache and if the answers were found within those posts.
The issue that I am having is in utilizing Apache as a proxy server for redirecting web traffic on one external IP to multiple internal IP addresses. I have multiple virtual servers and I need apache to act as a pass through / redirection proxy for web traffic. So far, it worked for a bit, then it becomes flaky and starts failing randomly while clicking through some of my sites. The worst offender being my SharePoint site.I rebooted the linux server, and when I try to access one of my pass-through sites, all I received was an error message about server difficulties and possibly too much traffic. After some time had passed, and few refreshes later, I finally received the authentication prompt from my windows web server, but this whole configuration is still unreliable. I sometimes get the password prompt several times where it does not allow me to login with my proper credentails, etc, and other times it just fails to display the page full stop.This is an externally facing SharePoint site.
So there's the Windows side. I also have a WordPress site that has similar issues. With WordPress it's even more odd as I have set the WP site settings to not include the directory /wordpress/ and setup my Proxy to point to the http://xxx.xxx.xxx.xxx/wordpress/ landing. Yet on some actions (i.e. browsing themes) it decides to throw in the wordpress directory causing it to 404, and in other sections it doesn't. This actually sounds more likely a WordPress bug than a Apache bug. file: Default (from available sites):
Code:
<VirtualHost *:80>
ServerAdmin webmaster@localhost
[code]....
View 2 Replies
View Related
Jun 7, 2010
After searching the forum I could not find a clear answer to my question so I am giving it a try...
I have installed a LAMP server with Postfix as mail server. The scripts send email as user www-data using the mail server on the same machine.
However, the email got rejected by external mail servers (failed reverse DNS check) so I setup a mail server that meets all needed requirements.
Now I would like to use this second server instead of the mail server on the LAMP server. I found that this could be done with changing sendmail settings in php.ini (I think).
However I am not sure how that will go: www-data is no actual user on the new email server (which requires authentication before sending). Do I need to create a new user on the email server or change the settings in php.ini to match an existing user?
View 1 Replies
View Related
Aug 30, 2010
We currently have a SUSE Apache2 reverse proxy server setup to reverse proxy (proxy_mod) our GroupWise Web Access server. Our SUSE box is located at www.domain.com. Our GroupWise Web Access server is located internally and is called GWMail. We are in the process of migrating from Novell to Windows, so we will have an exchange server with OWA access running on a Windows Server 2008 IIS7 box. That one will be called EXMail internally. Right now when someone goes to www.domain.com/gw/webacc it goes to the GWMail internal server from the outside world. This was all set up by previous techs who used Linux more.
We would like to set up reverse proxy to be able to reverse proxy to the Exchange Server from the outside world. Unfortunately the snag we are running into is that Exchange needs to run on port 443, and forwarding to port 443 has been a little tricky. I've read elsewhere we need to implement a generic TCP proxy, such as IPtables. what we need to do to get our SUSU Apache2 server to be able to reverse proxy to our Exchange server on port 443. For the save of argument lets call our SUSE server ExtranetServer. Below is our default-configuration.conf file's configuration:
[Code]....
View 12 Replies
View Related
Mar 10, 2010
I have a query on mod_rewite/apache/.htaccessIt is like this:Suppose a company have a website www.abc.com,when a user types in this URL in his browser he should get a login and passwd prompt say he enters username as user1 and some passwd, upon successful authentication he should get redirected to another url similary for user2 and user3...mod_rewite is loaded htpsd.conf has "rewrite engine on" directive enabled.
View 1 Replies
View Related
Nov 25, 2010
I'm trying to blind deluge torrent to port 80 but as I'm running already a server on this port, I've decided to use the ProxyPass option in a vhost. As I prefer running through HTTPS, I've used my vhost 443 that I already use for bind AjaxTerm (SSH with a web interface)
But whereas AjaxTerm works, Deluge doesn't...I only get a black page but the tab name is correct (ie, Deluge: Web UI 1.3.1)
Here is my vhost
Code:
<VirtualHost *:443>
SSLEngine On
SSLCertificateFile /etc/ssl/private/localhost.pem
ProxyRequests Off
[Code].....
View 1 Replies
View Related
Jul 22, 2011
I have done configuration of webserver and i want it to pick some information from application server,but i don want people to see that application server,please can someone tell me in detail on how to setup squid reverse proxy server so that each time people want to access my servers they can just see one server,i mean one server must act as a loadbalancer to other servers,let say a sum of up to three servers.I am using redhat 5 servers with apache 2,and squid version that i have is 2.6.
View 5 Replies
View Related
Apr 16, 2010
I have a scenario. A domain [URL] then there are 4 private computers on which applications are hosted at port 80. So when some one from outside access the site it should look as [URL] in apache2.conf where [URL] is hosted I added
Code:
ProxyPass /site1 http://192.168.0.2
ProxyReversePass /site1 http://192.168.0.2
is it correct ? I am able to see [URL] but when some one logs in from internet to [URL] it is redirecting to www.mydomain.com and not taking to page where a successful login will go
in [URL]what should I check or do ?
View 14 Replies
View Related
Jan 25, 2011
I have a server in a corporate data center for a project. I have an SSH access to this machine at port 22.There are some virtual machines running on this server and then at the back of every thing many other Operating systems are working. Now Since I am behind the data centers firewall my supervisor asked me if I can do some thing by which I can give many people on Internet access to these virtual machines directly. I know if I were allowed to get traffic on port other than 22 then I can do a port forwarding. But since I am not allowed this so what can be a solution in this case.
The people who would like to connect might be complete idiots.Who may be happy just by opening putty at their machines or may be even filezilla.I have configured an Apache Reverse Proxy for redirecting the Internet traffic to the virtual machines on these hosts.But I am not clear as for SSH what can I do.So is there some thing equivalent to an Apache Reverse Proxy which can do similar work for SSH in this situation.I do not have firewall in my hands or any port other than 22 open and in fact even if I request they wont allow to open.2 times SSH is not some thing that my supervisor wants.
View 8 Replies
View Related
Aug 24, 2011
I've been struggling with this for a couple of days now. I'm trying to setup a reverse proxy with SSL. The config works when it's not using SSL, but as soon as I setup the virtualhost for 443, I get a ERR_CONNECTION_REFUSED in my browser.
The setup is that it's a CentOS 5.6 running Apache 2.2.3. I was configuring it via this guide: [URL]
This server is acting as a reverse proxy for a Windows server running Apache. Currently, I'm just trying to get the manager page from the Windows server to go through the reverse proxy. Here's the virtual host section of my httpd.conf file on the reverse proxy:
<VirtualHost *:443>
ServerName aspwebview.vtinfo.com
SSLEngine On
SSLCertificateFile /etc/httpd/ssl/star_vtinfo.com.crt
[Code]....
Thoughts? Is there anything I have to do on the Windows server (maybe in the connector section of server.xml)?
View 13 Replies
View Related
Dec 9, 2010
I config a revers dns im my domain, but him pointer to external server. Check all dns, virtual servers and apache configurations and dont find where it pointer to out. I too check with:
# host -t ptr 4.204.120.64.in-addr.arpa
4.204.120.64.in-addr.arpa domain name pointer srv.businessconnection.com.br. Should point to another server, this no is the correct!
I make equal config another server and work very well, but in this are some erro. Somebody know what I doing wrong?
View 1 Replies
View Related
Oct 4, 2010
I have a question to masters of Apache. In my operating system (CentOS 5) I have installed two Apaches. One is Apache (port 80) from repository where I planning to configure proxy and second one is Apache integrated(port 8090) with KnowledgeTree software. The problem is that when I am trying to configure proxy reverse it simply doesn't work.
This is link to KnowledgeTree software:
- http://127.0.0.1:8090/knowledgeTree
This link I would like to rewrite with proxy like this:
https://myserver.com/knowledgeTree
(HTTPS dont forget)
In my ssl.conf in VirtualHost part I have created something like this:
Code:
<IfModule mod_proxy.c>
<Proxy *>
Order allow,deny
Allow from all
</Proxy>
ProxyRequests off
ProxyPass /knowledgeTree http://127.0.0.1:8090/knowledgeTree
ProxyPassReverse /knowledgeTree http://127.0.0.1:8090/knowledgeTree
<Location /knowledgeTree/>
ProxyPassReverse /
</Location>
</IfModule>
When I am trying to connect I see only: Unable to connect. Firefox can't establish a connection to the server at ifdocu.contaxt.biz:8090.
View 4 Replies
View Related
Mar 22, 2011
I am trying to configure a reverse proxy server that can act as a reverse proxy for ms sharepoint server that uses https. Usually when I accessed the sharepoint server at [URL], I will be prompted to enter active directory login. But what was "500 internal server error" and in error.log: failed to enable ssl support for 10.10.1.1 (sharepoint.mycompany)
View 2 Replies
View Related
Feb 24, 2011
how to configure reverse zone for x.x.x.x/18 subnet ,all the example on the internet are for /24 or /16 subnets?
View 9 Replies
View Related
Jul 2, 2011
I want Install nginx As Reverse Proxy for Apache
View 5 Replies
View Related
Mar 16, 2011
I've been using squid-cache for a long time for authentication/authorization. It has work fine for years, but now it starts working too slow only in one computer (the others, works fine).
It's configured as a reverse proxy.
I see it can be a DNS problem, but the computer is configured with the same dns servers in resolv.conf that the other computers have.
I use squid 2.6.stable14 on RHEL 4.4.
If I restart the service (service squid restart) it works fine, but 15-20 minutes later, the problem repeats.
View 1 Replies
View Related
Jan 6, 2010
Here my setup of Apache :
I have two virtual hosts on separate IP and on both I am using port :80 one is main website domain.name and another webmail.domain.name. And to get full link path I am using index.html with redirection derectives. My question how I can setup each Vhost to he is own redirection directive to set two full link like:
when type webmail.domainname -----> redirect to webmail.domainname/horde/imp/file.php
and www.domainname ------> redirect to www.domainname/csr/
Right now working only one of this Vhosts, just problem to separate them when I type www.domainname -----> apache redirect to webmail.domainname.
index.html
<html>
<head>
<title>WebSite</title>
<meta http-equiv="REFRESH" content="1;url=http://www.domainname/csr/"></HEAD>
<BODY>REDIRECTION</BODY>
</HTML> .....
View 8 Replies
View Related
Nov 4, 2009
How can I setup "reverse dns check" option in Postfix ?
View 1 Replies
View Related
Aug 28, 2010
I keep getting the error "reverse mapping checking getaddrinfo for fileserver.0.0.10.in-addr.arpa [10.0.0.10] failed - POSSIBLE BREAK-IN ATTEMPT!" in /var/log/auth.log I have a DNS (bind9) setup on my Linux router with the following config:
Code:
router:~# less /etc/bind/named.conf.local
// Local zone definitions here.
zone "0.0.10.in-addr.arpa" {
type master;
file "/etc/bind/db.0.0.10";
[Code]...
View 1 Replies
View Related
Apr 22, 2010
I am using a reverse proxy on Debian Lenny and using apache2.
I have a site
Code:
And a site
Code:
Two files in
Code:
Code:
But the problem is [url]and [url]are both pointing to [url] I am unable to find why.I do not want to touch apache2.conf so want to go by having a VirtualHost site1.[url]
View 3 Replies
View Related
Apr 25, 2011
I have got a reverse proxy that is working just fine, it accepts requests on port 443 and port 80 and ONLY sends traffic upstream to port 80 to the apache server listening on localhost. I use the following config:
https_port 10.14.1.72:443 cert=/etc/squid/self_certs/site.crt key=/etc/squid/self_certs/site.key defaultsite=site vhost
cache_peer 127.0.0.1 parent 443 80 no-query originserver login=PASS
http_port 10.14.1.72:80 vhost
My problem is the following : The site should act differently in some occasions based on whether http or https was requested. So my idea is to setup second http vhost on apache listening to port 8080 and on that vhost I would server the https code. So is it possible to use SQUID to :
Send traffic destined for port 443 to localhost:8080
and
Send traffic destined for port 80 to localhost:80 ?
View 13 Replies
View Related
Apr 28, 2010
I have a webserver apache2 on debian Lenny. I am using gateway as Dom0 and rest of the operating systems are different Dom's .Using a xen virtualization setup.
I want to have a few websites
http://site1.myserver.com
http://myserver.com
and http://myserver.com/site2
I did set up a reverse proxy environment for doing this.
Code:
Dom0 LAN IP ----> 192.168.1.1 Gateway (where reverse proxy is set)
DomU1 LAN IP ----> 192.168.1.13 (here myserver.com and site1.myserver.com both are hosted.)
Domu2 LAN IP ----> 192.168.1.17 myserver.com/site2 is here.
Configuration on Dom0 of sites site1.myserver.com and myserver.com
Virtual Host Configurations on Dom0 in /etc/apache2/sites-enabled/myserver.com (on gateway)
Code:
<VirtualHost *:80>
ServerAdmin webmaster@localhost
ServerName myserver.com
ProxyRequests off
<Proxy *>
Order deny,allow
Allow from all .....
View 10 Replies
View Related
May 17, 2010
I'm burning my lashes out on this and still can't make it happen! I need a pro support.
Problem: I want to add reverse DNS on my server. I allready asked my ISP to add my server ip address (213.13.112.20) and the name of the server: ithkul.medianet.pt
I need the reverse because in these days most of mail servers need to reverse addresses, otherwise you may be considered a mail spammer. I'm using BINd 9.3.6 here is the NAMED.CONF
acl local {
213.13.112.16/28;
};
acl recursionyes { 213.13.112.16/28; };
[Code]...
View 7 Replies
View Related
Jan 18, 2011
I have an enormous quadcore machine with 16gb ram and dual gigabit NICs. It used to be for MySQL but we have upgraded the whole database infrastructure so now this server is left floating. I had the great idea of turning this into a reverse-proxy (using apache mod_proxy) and it really handles a ton of requests. But I have a feeling that we are not getting the most use out of what it can offer.
Our traffic consists of a few thousand very small (less than 10 byte) ajax calls per second, and frequently I find we are running out of kernel allocated network stack to handle all the requests. Often we get the kern.log warning "possible SYN flooding on port 80. Sending cookies." and other things like this. Obviously we are not getting SYN flooded, we just have very high demand.
So far I have found a few kernel tuning guides to tell the kernel to allocate more of the base system memory for networking but every guide I have found has been for the purpose of increasing the performance between WAN links (direct backbones between offices etc) and usually with very large file sizes being the priority. One such example (and great) write up is here:
cyberciti.biz/faq/linux-tcp-tuning/
I was hoping some people could provide further input, such as along the lines of disabling nf_conntrack (to speed up socket set up/tear down time) or anything that will speed up a high throughput proxy like mine. Any links to studies or benchmarks between different configurations or hardware gets extra points!
View 7 Replies
View Related
Mar 8, 2011
I've run into a strange issue with a DHCP/DDNS setup whereby when the DHCP server asks the DNS server to add a new host, the forward map is added correctly but the reverse map has the subdomain added twice (e.g. 192.168.25.192.168.25.250)I'm running ISC DHCPd version 3.0.1 and BIND version 9.2.3 on SuSE 9.2 - 32bit.Here is my dhcpd.conf file:
# dhcpd.conf
authoritative;
include "/etc/named.keys";
[code]....
View 2 Replies
View Related
Oct 8, 2010
We use a reverse proxy to forward a lot of websites via 1 central place.so hould forward to an internal server.I already managed to forward a lot of website correctly, except for this one:hen I type:ttp://blablahblah/smt/webtier-7-11 it doesn't work correctly, but How can I make the first url to work ?
ProxyPass /smt http://192.168.10.38:8080
ProxyPassReverse /smt http://192.168.10.38:8080
ProxyPassMatch ^/((smt|webtier-7.11)(/.*)?)?$ http://192.168.10.38:8080/$1
[code]....
View 5 Replies
View Related
