Bookmarks

Yahoo Gmail Google Facebook Delicious Twitter Reddit Stumpleupon Myspace Digg

Search queries

bind-address mysql multiple, sanibleone xxxx, ftp://192.168.100.100/, www.xxxcon, which comes first ob_start or session, wwwxxx/58/2010, xxxxdup, xxxxdup, mailx informatii, should producers of software-based services, such as atms, be held liable for economic injuries suffered when their systems fail?

Links

XODOX
Impressum

#1: Problem with ProxyPass

Posted on 2010-10-07 07:51:44 by Michelle Konzack

--=_samba3-31077-1286430706-0001-2
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Good morning,

I have to use a singel backup IP on a VHDSL and redirect the whole :80
traffic to a DMZ where I want to use "apache2" as proxy to redirect
traffic to some internal servers.

I tried to use

----[ '/etc/apache2/conf.d/apache_proxy' ]------------------------------
NameVirtualHost 192.168.0.69:80

<VirtualHost 192.168.0.69:80>
ServerName www.tdipmedia.net
ProxyPass / http://192.168.0.208:80/
ProxyPassReverse / http://192.168.0.208:80/
<Directory proxy:http://192.168.0.208:80/*>
Order deny,allow
Allow from all
</Directory>
</VirtualHost>
------------------------------------------------------------ ------------

but the redirection to the IP 192.168.0.208 does not work.

What I am missing here?

Thanks, Greetings and nice Day/Evening
Michelle Konzack

--=20
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux

itsystems@tdnet France EURL itsystems@tdnet UG (limited liability)
Owner Michelle Konzack Owner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstra=DFe 17
67100 Strasbourg/France 77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +33-9-52705884 fix

<http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/>
<http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/>

Jabber linux4michelle@jabber.ccc.de

Linux-User #280138 with the Linux Counter, http://counter.li.org/

--=_samba3-31077-1286430706-0001-2
Content-Type: application/pgp-signature; name="signature.pgp"
Content-Transfer-Encoding: 7bit
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFMrV/wC0FPBMSS+BIRAruGAJ9BBig6/SK+5uvwjIURJpxrQJ7mKQCf RYvd
gXoGelh98WBI4hDgbEDwzOo=
=i0WK
-----END PGP SIGNATURE-----

--=_samba3-31077-1286430706-0001-2--

Report this message

#2: Re: Problem with ProxyPass

Posted on 2010-10-07 11:55:59 by Tom Evans

On Thu, Oct 7, 2010 at 6:51 AM, Michelle Konzack
<linux4michelle@tamay-dogan.net> wrote:
> Good morning,
>
> I have to use a singel backup IP on a VHDSL and redirect the àwhole =
à:80
> traffic to a DMZ where I want to use à"apache2" àas àproxy=
àto àredirect
> traffic to some internal servers.
>
> I tried to use
>
> ----[ '/etc/apache2/conf.d/apache_proxy' ]------------------------------
> NameVirtualHost à à à à 192.168.0.69:80
>
> <VirtualHost 192.168.0.69:80>
> à àServerName à à à à àwww.tdipmedia.n=
et
> à àProxyPass à à à à à / http://192.16=
8.0.208:80/
> à àProxyPassReverse à à/ http://192.168.0.208:80/
> à à<Directory proxy:http://192.168.0.208:80/*>
> à à à àOrder à à à à à deny,=
allow
> à à à àAllow à à à à à from =
all
> à à</Directory>
> </VirtualHost>
> ------------------------------------------------------------ ------------
>

Your config doesn't look right to me:

NameVirtualHost 192.168.0.69:80

This says 'When a request comes in on the socket listening on IP
192.168.0.69, port 80, use the Host header from the request to infer
the virtualhost to use'.

<VirtualHost 192.168.0.69:80>
ServerName www.tdipmedia.net

</VirtualHost>

This says: 'When a request comes in on 192.168.0.69:80, with Host
header 'www.tdipmedia.net', use this virtualhost to serve the request'

ProxyPass / http://192.168.0.208:80/
ProxyPassReverse / http://192.168.0.208:80/

This says: 'Proxy / to the website on http://192.168.0.208:80/'

<Directory proxy:http://192.168.0.208:80/*>
Order deny,allow
Allow from all
</Directory>

This is nonsense. A <Directory> refers to a disk location, nothing
else. If you wish to restrict who can access a reverse proxy, use a
<Proxy> directive or a <Location> directive.


> but the redirection to the IP 192.168.0.208 does not work.
>
> What I am missing here?
>
> Thanks, Greetings and nice Day/Evening
> Michelle Konzack
>

Well, you haven't specified anything in your config that would result
in a redirect, you have configured a proxy. Apart from that...

So there are a couple of things you can check.

1) When you connect to the webserver, are you connecting to 192.168.0.69:80=
?
2) What Host header are you sending to the server? Typically a browser
will send the host portion of the URL you type in the address bar -
does that match 'www.tdipmedia.net'?
3) Where are your logs? What 'does not work' - explain what you've
tried, what the server does when you try that, and what error/info
messages are printed in the access and error logs.

Cheers

Tom

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Report this message

#3: Re: Problem with ProxyPass

Posted on 2010-10-07 14:27:38 by Michelle Konzack

--=_samba3-31884-1286454460-0001-2
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Tom Evans,

Am 2010-10-07 10:55:59, hacktest Du folgendes herunter:
> On Thu, Oct 7, 2010 at 6:51 AM, Michelle Konzack
> <linux4michelle@tamay-dogan.net> wrote:
> > ----[ '/etc/apache2/conf.d/apache_proxy' ]------------------------------
> > NameVirtualHost =A0 =A0 =A0 =A0 192.168.0.69:80
> >
> > <VirtualHost 192.168.0.69:80>
> > =A0 =A0ServerName =A0 =A0 =A0 =A0 =A0www.tdipmedia.net
> > =A0 =A0ProxyPass =A0 =A0 =A0 =A0 =A0 / http://192.168.0.208:80/
> > =A0 =A0ProxyPassReverse =A0 =A0/ http://192.168.0.208:80/
> > =A0 =A0<Directory proxy:http://192.168.0.208:80/*>
> > =A0 =A0 =A0 =A0Order =A0 =A0 =A0 =A0 =A0 deny,allow
> > =A0 =A0 =A0 =A0Allow =A0 =A0 =A0 =A0 =A0 from all
> > =A0 =A0</Directory>
> > </VirtualHost>
> > ------------------------------------------------------------ ------------
> Your config doesn't look right to me:

Hmmm, since my three pootle instances where confliction with Apache, I
have setup last year the following config which is working:

----[ '/VServer_10/APACHE_available/pootle.tdwave.net' ]----------------
<VirtualHost 192.168.0.69:80>
ServerAdmin linux4michelle@tamay-dogan.net
ServerName pootle.tdwave.net

ProxyPass /images !
ProxyPass /js !
ProxyPass /pootle.css !
ProxyPass /favicon.ico !
ProxyPass / http://localhost:8888/
ProxyPassReverse / http://localhost:8888/
<Directory proxy:http://localhost:8888/*>
Order deny,allow
Allow from all
</Directory>

DocumentRoot /usr/share/pootle/html/
<Directory /usr/share/pootle/html/>
Order deny,allow
Allow from all
</Directory>

<Directory />
Options FollowSymLinks Indexes
AllowOverride None
Order deny,allow
Allow from all
</Directory>

# debug, info, notice, warn, error, crit, alert, emerg.
LogLevel warn
ErrorLog /VServer_10/CONFIG_pootle.tdwave.net/log/apache/err=
or.log

LogFormat "%{[%Y-%m-%d %H:%M:%S %z]}t %h [%V] %l %u \"%r\" %>=
s %b \"%{Referer}i\" \"%{User-Agent}i\"" vhost
CustomLog /VServer_10/CONFIG_pootle.tdwave.net/log/apache/acc=
ess.log vhost

ServerSignature On
</VirtualHost>
------------------------------------------------------------ ------------

and now modified it. the only difference is, that the newServer is NOT
on <localhost> but on IP <192.168.0.208>

> NameVirtualHost 192.168.0.69:80
>=20
> This says 'When a request comes in on the socket listening on IP
> 192.168.0.69, port 80, use the Host header from the request to infer
> the virtualhost to use'.

Right

> <VirtualHost 192.168.0.69:80>
> ServerName www.tdipmedia.net
>=20
> </VirtualHost>
>=20
> This says: 'When a request comes in on 192.168.0.69:80, with Host
> header 'www.tdipmedia.net', use this virtualhost to serve the request'

Right too.

> ProxyPass / http://192.168.0.208:80/
> ProxyPassReverse / http://192.168.0.208:80/
>=20
> This says: 'Proxy / to the website on http://192.168.0.208:80/'

Right too.

> <Directory proxy:http://192.168.0.208:80/*>
> Order deny,allow
> Allow from all
> </Directory>
>=20
> This is nonsense. A <Directory> refers to a disk location, nothing
> else. If you wish to restrict who can access a reverse proxy, use a
> <Proxy> directive or a <Location> directive.

Hmmm...

> Well, you haven't specified anything in your config that would result
> in a redirect, you have configured a proxy. Apart from that...
>=20
> So there are a couple of things you can check.
>=20
> 1) When you connect to the webserver, are you connecting to 192.168.0.69:=
80 ?

Yes, and I get:

----[ command 'wget -S -O /dev/null http://www.tdipmedia.net/' ]--------

--2010-10-07 14:26:26-- http://www.tdipmedia.net/
Resolving www.tdipmedia.net... 88.168.69.36
Connecting to www.tdipmedia.net|88.168.69.36|:80... connected.
HTTP request sent, awaiting response...=20
HTTP/1.1 403 Forbidden
Date: Thu, 07 Oct 2010 12:26:26 GMT
Content-Length: 390
Keep-Alive: timeout=3D15, max=3D100
Connection: Keep-Alive
Content-Type: text/html; charset=3Diso-8859-1
2010-10-07 14:26:26 ERROR 403: Forbidden.

------------------------------------------------------------ ------------

<88.168.69.36> is my fixed PUBLIC IP address and all :80 traffic is
redirected to my DMZ on <192.168.0.69> and some of the servers should be
proxyied to Servers behind it like the <192.168.0.208>.

> 2) What Host header are you sending to the server? Typically a browser
> will send the host portion of the URL you type in the address bar -
> does that match 'www.tdipmedia.net'?
> 3) Where are your logs? What 'does not work' - explain what you've
> tried, what the server does when you try that, and what error/info
> messages are printed in the access and error logs.

[Thu Oct 07 14:16:45 2010] [error] [client 192.168.0.65] client denied by s=
erver configuration: proxy:http://192.168.0.208:80/

Thanks, Greetings and nice Day/Evening
Michelle Konzack

--=20
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux

itsystems@tdnet France EURL itsystems@tdnet UG (limited liability)
Owner Michelle Konzack Owner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstra=DFe 17
67100 Strasbourg/France 77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +33-9-52705884 fix

<http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/>
<http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/>

Jabber linux4michelle@jabber.ccc.de
ICQ #328449886

Linux-User #280138 with the Linux Counter, http://counter.li.org/

--=_samba3-31884-1286454460-0001-2
Content-Type: application/pgp-signature; name="signature.pgp"
Content-Transfer-Encoding: 7bit
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFMrby6C0FPBMSS+BIRAhPdAJ9oup4zs1VMIdCyWNw1wuZisvlI0gCf br5W
+1AOsrRIYbrEXXDk/1rErLM=
=yl4c
-----END PGP SIGNATURE-----

--=_samba3-31884-1286454460-0001-2--

Report this message

#4: Re: Problem with ProxyPass

Posted on 2010-10-07 15:23:03 by Michelle Konzack

--=_samba3-31203-1286457785-0001-2
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Forgotten one hing:

If I change the=20
<VirtualHost 192.168.0.69:80>
to
<VirtualHost *:80>
I get

----[ command 'wget -S -O /dev/null http://www.tdipmedia.net/ 2>&1' ]---

--2010-10-07 15:20:26-- http://www.tdipmedia.net/
Resolving www.tdipmedia.net... 88.168.69.36
Connecting to www.tdipmedia.net|88.168.69.36|:80... connected.
HTTP request sent, awaiting response...=20
HTTP/1.1 302 Found
Date: Thu, 07 Oct 2010 13:20:26 GMT
Server: Apache/2.2.3 (Debian) Embperl/2.2.0 DAV/2 PHP/5.2.0-8+etch16 mod_=
perl/2.0.2 Perl/v5.8.8
X-Powered-By: PHP/5.2.0-8+etch16
Location: /?what=3Dindex
Content-Length: 0
Keep-Alive: timeout=3D15, max=3D100
Connection: Keep-Alive
Content-Type: text/html; charset=3DUTF-8
Location: /?what=3Dindex [following]
--2010-10-07 15:20:27-- http://www.tdipmedia.net/?what=3Dindex
Reusing existing connection to www.tdipmedia.net:80.
HTTP request sent, awaiting response...=20
HTTP/1.1 200 OK
Date: Thu, 07 Oct 2010 13:20:27 GMT
Server: Apache/2.2.3 (Debian) Embperl/2.2.0 DAV/2 PHP/5.2.0-8+etch16 mod_=
perl/2.0.2 Perl/v5.8.8
X-Powered-By: PHP/5.2.0-8+etch16
Connection: close
Content-Type: text/html; charset=3DUTF-8
Length: unspecified [text/html]
Saving to: `/dev/null'

0K ...... 241K=3D0.03s

2010-10-07 15:20:27 (241 KB/s) - `/dev/null' saved [6343]

------------------------------------------------------------ ------------

which mean, it has hit the DEFAULT VHost and never arrived at the config
of <www.tdipmedia.net> which mean, the <VirtualHost 192.168.0.69:80> is
required.

Thanks, Greetings and nice Day/Evening
Michelle Konzack

--=20
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux

itsystems@tdnet France EURL itsystems@tdnet UG (limited liability)
Owner Michelle Konzack Owner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstra=DFe 17
67100 Strasbourg/France 77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +33-9-52705884 fix

<http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/>
<http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/>

Jabber linux4michelle@jabber.ccc.de
ICQ #328449886

Linux-User #280138 with the Linux Counter, http://counter.li.org/

--=_samba3-31203-1286457785-0001-2
Content-Type: application/pgp-signature; name="signature.pgp"
Content-Transfer-Encoding: 7bit
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFMrcm3C0FPBMSS+BIRAi5JAKDUhYsVt5QzdNB9qQa9Ng0B73i6UgCg jE9J
4gJ2bZGhNAUeZjOrOLFHTqE=
=oQQX
-----END PGP SIGNATURE-----

--=_samba3-31203-1286457785-0001-2--

Report this message

#5: Re: Re: Problem with ProxyPass

Posted on 2010-10-07 15:52:41 by Tom Evans

On Thu, Oct 7, 2010 at 1:27 PM, Michelle Konzack
<linux4michelle@tamay-dogan.net> wrote:
> Hello Tom Evans,
>
> Am 2010-10-07 10:55:59, hacktest Du folgendes herunter:
>> On Thu, Oct 7, 2010 at 6:51 AM, Michelle Konzack
>> <linux4michelle@tamay-dogan.net> wrote:
>> > ----[ '/etc/apache2/conf.d/apache_proxy' ]----------------------------=
--
>> > NameVirtualHost à à à à 192.168.0.69:80
>> >
>> > <VirtualHost 192.168.0.69:80>
>> > à àServerName à à à à àwww.tdipmedi=
a.net
>> > à àProxyPass à à à à à / http://192=
..168.0.208:80/
>> > à àProxyPassReverse à à/ http://192.168.0.208:80/
>> > à à<Directory proxy:http://192.168.0.208:80/*>
>> > à à à àOrder à à à à à de=
ny,allow
>> > à à à àAllow à à à à à fr=
om all
>> > à à</Directory>
>> > </VirtualHost>
>> > ------------------------------------------------------------ ----------=
--
>> Your config doesn't look right to me:
>
> Hmmm, since my three pootle instances where confliction with àApache=
, àI
> have setup last year the following config which is working:
>
> ----[ '/VServer_10/APACHE_available/pootle.tdwave.net' ]----------------
> <VirtualHost 192.168.0.69:80>
> à àServerAdmin à à à à linux4michelle@tamay=
-dogan.net
> à àServerName à à à à àpootle.tdwave.n=
et
>
> à àProxyPass à à à à à/images !
> à àProxyPass à à à à à/js !
> à àProxyPass à à à à à/pootle.css !
> à àProxyPass à à à à à/favicon.ico !
> à àProxyPass à à à à à/ http://localho=
st:8888/
> à àProxyPassReverse à / http://localhost:8888/
> à à<Directory proxy:http://localhost:8888/*>
> à à à àOrder à à à à àdeny,a=
llow
> à à à àAllow à à à à àfrom a=
ll
> à à</Directory>
>
> à àDocumentRoot à à à à/usr/share/pootle/ht=
ml/
> à à<Directory /usr/share/pootle/html/>
> à à à àOrder à à à à à deny,=
allow
> à à à àAllow à à à à à from =
all
> à à</Directory>
>
> à à<Directory />
> à à à àOptions à à à à FollowSymL=
inks Indexes
> à à à àAllowOverride à None
> à à à àOrder à à à à à deny,=
allow
> à à à àAllow à à à à à from =
all
> à à</Directory>
>
> à à# debug, info, notice, warn, error, crit, alert, emerg.
> à àLogLevel à à à à à àwarn
> à àErrorLog à à à à à à/VServer_1=
0/CONFIG_pootle.tdwave.net/log/apache/error.log
>
> à àLogFormat à à à à à "%{[%Y-%m-%d %H=
:%M:%S %z]}t %h [%V] %l %u \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"=
" vhost
> à àCustomLog à à à à à /VServer_10/CON=
FIG_pootle.tdwave.net/log/apache/access.log vhost
>
> à àServerSignature à à On
> </VirtualHost>
> ------------------------------------------------------------ ------------
>
> and now modified it. àthe only difference is, that the newServer is =
àNOT
> on <localhost> but on IP <192.168.0.208>
>
>> à à NameVirtualHost à à à à 192.168.0.69:8=
0
>>
>> This says 'When a request comes in on the socket listening on IP
>> 192.168.0.69, port 80, use the Host header from the request to infer
>> the virtualhost to use'.
>
> Right
>
>> <VirtualHost 192.168.0.69:80>
>> à àServerName à à à à àwww.tdipmedia.=
net
>>
>> </VirtualHost>
>>
>> This says: 'When a request comes in on 192.168.0.69:80, with Host
>> header 'www.tdipmedia.net', use this virtualhost to serve the request'
>
> Right too.
>
>> à àProxyPass à à à à à / http://192.1=
68.0.208:80/
>> à àProxyPassReverse à à/ http://192.168.0.208:80/
>>
>> This says: 'Proxy / to the website on http://192.168.0.208:80/'
>
> Right too.
>
>> à à<Directory proxy:http://192.168.0.208:80/*>
>> à à à àOrder à à à à à deny=
,allow
>> à à à àAllow à à à à à from=
all
>> à à</Directory>
>>
>> This is nonsense. A <Directory> refers to a disk location, nothing
>> else. If you wish to restrict who can access a reverse proxy, use a
>> <Proxy> directive or a <Location> directive.
>
> Hmmm...
>
>> Well, you haven't specified anything in your config that would result
>> in a redirect, you have configured a proxy. Apart from that...
>>
>> So there are a couple of things you can check.
>>
>> 1) When you connect to the webserver, are you connecting to 192.168.0.69=
:80 ?
>
> Yes, and I get:
>
> ----[ command 'wget -S -O /dev/null http://www.tdipmedia.net/' ]--------
>
> --2010-10-07 14:26:26-- àhttp://www.tdipmedia.net/
> Resolving www.tdipmedia.net... 88.168.69.36
> Connecting to www.tdipmedia.net|88.168.69.36|:80... connected.
> HTTP request sent, awaiting response...
> àHTTP/1.1 403 Forbidden
> àDate: Thu, 07 Oct 2010 12:26:26 GMT
> àContent-Length: 390
> àKeep-Alive: timeout=3D15, max=3D100
> àConnection: Keep-Alive
> àContent-Type: text/html; charset=3Diso-8859-1
> 2010-10-07 14:26:26 ERROR 403: Forbidden.
>
> ------------------------------------------------------------ ------------
>
> <88.168.69.36> is my fixed PUBLIC IP address àand àall à:8=
0 àtraffic àis
> redirected to my DMZ on <192.168.0.69> and some of the servers should be
> proxyied to Servers behind it like the <192.168.0.208>.
>
>> 2) What Host header are you sending to the server? Typically a browser
>> will send the host portion of the URL you type in the address bar -
>> does that match 'www.tdipmedia.net'?
>> 3) Where are your logs? What 'does not work' - explain what you've
>> tried, what the server does when you try that, and what error/info
>> messages are printed in the access and error logs.
>
> [Thu Oct 07 14:16:45 2010] [error] [client 192.168.0.65] client denied by=
server configuration: proxy:http://192.168.0.208:80/
>
> Thanks, Greetings and nice Day/Evening
> à àMichelle Konzack
>
> --

Can you spot the difference, or shall I point it out? :)

In your working vhost, you have specified a documentroot, and have
granted access to it. In your non working vhost, you haven't done
either, and your <Directory> block doesn't ever get applied, thus
requests are denied.

Either replace your <Directory> block with an appropriate <Location>
block, or give your vhost an empty document root, and change your
Directory block to point at that (/var/empty is where I usually use).

Cheers

Tom

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Report this message

#6: Re: Re: Problem with ProxyPass

Posted on 2010-10-07 15:55:00 by Tom Evans

On Thu, Oct 7, 2010 at 2:23 PM, Michelle Konzack
<linux4michelle@tamay-dogan.net> wrote:
> Forgotten one hing:
>
> If I change the
> à à<VirtualHost 192.168.0.69:80>
> to
> à à<VirtualHost *:80>
> I get
>
><snip>
>
> which mean, it has hit the DEFAULT VHost and never arrived at the config
> of <www.tdipmedia.net> which mean, the <VirtualHost 192.168.0.69:80> =C2=
=A0is
> required.
>
> Thanks, Greetings and nice Day/Evening
> à àMichelle Konzack
>

If you did not also add a NameVirtualHost for *:80, then that is to be
expected. If you don't do any IP/port based virtual hosting, then it
is usually easiest to do:

NameVirtualHost *

<VirtualHost *>

Cheers

Tom

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Report this message

#7: Re: Re: Problem with ProxyPass

Posted on 2010-10-08 09:58:19 by i.galic

----- Tom Evans <tevans.uk@googlemail.com> wrote:
> On Thu, Oct 7, 2010 at 2:23 PM, Michelle Konzack
> <linux4michelle@tamay-dogan.net> wrote:
> > Forgotten one hing:
> >
> > If I change the
> > à à<VirtualHost 192.168.0.69:80>
> > to
> > à à<VirtualHost *:80>
> > I get

what does apachectl -S say?

> ><snip>
> >
> > which mean, it has hit the DEFAULT VHost and never arrived at the confi=
g
> > of <www.tdipmedia.net> which mean, the <VirtualHost 192.168.0.69:80> =
àis
> > required.
> >
> > Thanks, Greetings and nice Day/Evening
> > à àMichelle Konzack
> >
>=20
> If you did not also add a NameVirtualHost for *:80, then that is to be
> expected. If you don't do any IP/port based virtual hosting, then it
> is usually easiest to do:
>=20
> NameVirtualHost *
>=20
> <VirtualHost *>

that's ambigous. a better practice is to use *:80 (when Listen-ing on port =
80)

> Cheers
>=20
> Tom
>=20
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project=
..
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20
--=20
Igor GaliÃÂ
Tel: +43 (0) 664 886 22 883
Mail: i.galic@brainsware.org
URL: http://brainsware.org/

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Report this message

#8: Re: Re: Problem with ProxyPass

Posted on 2010-10-08 11:01:36 by Tom Evans

2010/10/8 Igor GaliÃÂ <i.galic@brainsware.org>:
> ----- Tom Evans <tevans.uk@googlemail.com> wrote:
>> If you did not also add a NameVirtualHost for *:80, then that is to be
>> expected. If you don't do any IP/port based virtual hosting, then it
>> is usually easiest to do:
>>
>> NameVirtualHost *
>>
>> <VirtualHost *>
>
> that's ambigous. a better practice is to use *:80 (when Listen-ing on por=
t 80)
>

(I call FUD)

What is ambiguous about it? Is it open to more than one
interpretation? What is better about using *:80, in your opinion
(since you seem to have one about it)?

It's two less characters to type, and means that however I configure
the Listen directives, or how I connect to the server, my list of
configured vhosts is applied correctly.

Tom

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Report this message

#9: Re: Re: Problem with ProxyPass

Posted on 2010-10-08 17:09:36 by i.galic

----- "Tom Evans" <tevans.uk@googlemail.com> wrote:

> 2010/10/8 Igor GaliÃÂ <i.galic@brainsware.org>:
> > ----- Tom Evans <tevans.uk@googlemail.com> wrote:
> >> If you did not also add a NameVirtualHost for *:80, then that is to
> be
> >> expected. If you don't do any IP/port based virtual hosting, then
> it
> >> is usually easiest to do:
> >>
> >> NameVirtualHost *
> >>
> >> <VirtualHost *>
> >
> > that's ambigous. a better practice is to use *:80 (when Listen-ing
> on port 80)
> >
>=20
> (I call FUD)
>=20
> What is ambiguous about it? Is it open to more than one
> interpretation? What is better about using *:80, in your opinion
> (since you seem to have one about it)?

I quote fajita, #httpd's bot:

17:04 <jMCg> namevirtualhost *
17:04 <fajita> Consider using NameVirtualHost *:80 instead, to avoid port o=
verlap.
17:04 <jMCg> virtualhost *
17:04 <fajita> BAD because it makes things confused when making apache list=
en on multiple sockets/ports. Try to use <VirtualHost *:80>, for instance, =
unless one knows what they are doing.
=20
> It's two less characters to type, and means that however I configure
> the Listen directives, or how I connect to the server, my list of
> configured vhosts is applied correctly.

The last part ``unless one knows what they are doing'' is important here.

We see too many people who are incapable of configuring their vhosts,
apachectl -S shows overlapping most of the time, so we're preaching
this good practice wherever we can.

I think a better long term solution would be to not allow a start of
a server if apachectl -S returns warnings ;)

> Tom

i

--=20
Igor GaliÃÂ

Tel: +43 (0) 664 886 22 883
Mail: i.galic@brainsware.org
URL: http://brainsware.org/

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Report this message