.htaccess files not working from internet? intranet access fine

Hi,

this is my first post here :-)

basically I have google'd this issue a bit and finally realized that
there was no viable solution that I could deduce results from!

I have a few servers running apache and some folders which have
..htaccess files in them, I can access these from any network inside the
NAT of my router however when it comes down to external access from
outside the NAT I always get permission denied; authorized access only??

My systems are behind a reverse proxy handled by Squid but also after
Google'ing found that Squid doesn't care about .htaccess and doesn't
even know what it is.

Another page I read claimed that it could be an issue of IPS protection
system in the firewall - however iptables doesn't contain any config
only default and isn't even running I think only in conjunction with
fail2ban to prevent DoS attacks. My router, a Cisco 857W, also doesn't
have IPS at all and IDS isn't enabled.

Can anyone help me find a solution to this situation?? I have checked
the logs for httpd/access_log and error_log only to find nothing
mentioned about denying anything.....

Any recommendations are appreciated! Thanks

An example of one config file which is the config from Munin is here:

[code]
ScriptAlias /munin/cgi/ /var/www/munin/cgi/
#
# Options ExecCGI
# SSLRequireSSL
# order deny,allow
# deny from all
# AuthType Basic
# AuthUserFile /site/cfg/passwd
# AuthGroupFile /site/cfg/group
# AuthName "munin"
# require group munin
# Satisfy Any
#
#
Alias /munin/ /var/www/munin/

Options None
# SSLRequireSSL
order deny,allow
deny from all
AuthType Basic
# AuthUserFile /site/cfg/passwd
AuthUserFile /var/http-passwords
# AuthGroupFile /site/cfg/group
#AuthGroupFile /var/http-group
# AuthName "munin"
AuthName "Restricted Files"
# require group munin
Require user admin
Satisfy Any

[/code]

I followed the .htaccess example from the apache.org website and have a
single file where password/username is stored for multiple pages.....

Kaya

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranet access fine

SXMgeW91ciBzcXVpZCBwcm94eSBzZXQgdXAgdG8gZm9yd2FyZCBvbiB0aGUg YmFzaWMgYXV0aGVu
dGljYXRpb24gaGVhZGVycz8gRG9lc24ndCBzb3VuZCBsaWtlIHRoZXkgYXJl IGJlaW5nIHNlbnQg
dG8geW91ciBicm93c2VyDQoNCg0KU2VudCBmcm9tIG15IEJsYWNrQmVycnmu IHdpcmVsZXNzIGRl
dmljZQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogS2F5 YSBTYW1hbiA8U2Ft
YW5LYXlhQG5ldHNjYXBlLm5ldD4NCkRhdGU6IE1vbiwgMTIgT2N0IDIwMDkg MDA6NTc6MjAgDQpU
bzogPHVzZXJzQGh0dHBkLmFwYWNoZS5vcmc+DQpTdWJqZWN0OiBbdXNlcnNA aHR0cGRdIC5odGFj
Y2VzcyBmaWxlcyBub3Qgd29ya2luZyBmcm9tIGludGVybmV0PyBpbnRyYW5l dCBhY2Nlc3MgZmlu
ZQ0KSGksDQoNCnRoaXMgaXMgbXkgZmlyc3QgcG9zdCBoZXJlIDotKQ0KDQpi YXNpY2FsbHkgSSBo
YXZlIGdvb2dsZSdkIHRoaXMgaXNzdWUgYSBiaXQgYW5kIGZpbmFsbHkgcmVh bGl6ZWQgdGhhdCAN
CnRoZXJlIHdhcyBubyB2aWFibGUgc29sdXRpb24gdGhhdCBJIGNvdWxkIGRl ZHVjZSByZXN1bHRz
IGZyb20hDQoNCkkgaGF2ZSBhIGZldyBzZXJ2ZXJzIHJ1bm5pbmcgYXBhY2hl IGFuZCBzb21lIGZv
bGRlcnMgd2hpY2ggaGF2ZSANCi5odGFjY2VzcyBmaWxlcyBpbiB0aGVtLCBJ IGNhbiBhY2Nlc3Mg
dGhlc2UgZnJvbSBhbnkgbmV0d29yayBpbnNpZGUgdGhlIA0KTkFUIG9mIG15 IHJvdXRlciBob3dl
dmVyIHdoZW4gaXQgY29tZXMgZG93biB0byBleHRlcm5hbCBhY2Nlc3MgZnJv bSANCm91dHNpZGUg
dGhlIE5BVCBJIGFsd2F5cyBnZXQgcGVybWlzc2lvbiBkZW5pZWQ7IGF1dGhv cml6ZWQgYWNjZXNz
IG9ubHk/Pw0KDQpNeSBzeXN0ZW1zIGFyZSBiZWhpbmQgYSByZXZlcnNlIHBy b3h5IGhhbmRsZWQg
YnkgU3F1aWQgYnV0IGFsc28gYWZ0ZXIgDQpHb29nbGUnaW5nIGZvdW5kIHRo YXQgU3F1aWQgZG9l
c24ndCBjYXJlIGFib3V0IC5odGFjY2VzcyBhbmQgZG9lc24ndCANCmV2ZW4g a25vdyB3aGF0IGl0
IGlzLg0KDQpBbm90aGVyIHBhZ2UgSSByZWFkIGNsYWltZWQgdGhhdCBpdCBj b3VsZCBiZSBhbiBp
c3N1ZSBvZiBJUFMgcHJvdGVjdGlvbiANCnN5c3RlbSBpbiB0aGUgZmlyZXdh bGwgLSBob3dldmVy
IGlwdGFibGVzIGRvZXNuJ3QgY29udGFpbiBhbnkgY29uZmlnIA0Kb25seSBk ZWZhdWx0IGFuZCBp
c24ndCBldmVuIHJ1bm5pbmcgSSB0aGluayBvbmx5IGluIGNvbmp1bmN0aW9u IHdpdGggDQpmYWls
MmJhbiB0byBwcmV2ZW50IERvUyBhdHRhY2tzLiBNeSByb3V0ZXIsIGEgQ2lz Y28gODU3VywgYWxz
byBkb2Vzbid0IA0KaGF2ZSBJUFMgYXQgYWxsIGFuZCBJRFMgaXNuJ3QgZW5h YmxlZC4NCg0KQ2Fu
IGFueW9uZSBoZWxwIG1lIGZpbmQgYSBzb2x1dGlvbiB0byB0aGlzIHNpdHVh dGlvbj8/IEkgaGF2
ZSBjaGVja2VkIA0KdGhlIGxvZ3MgZm9yIGh0dHBkL2FjY2Vzc19sb2cgYW5k IGVycm9yX2xvZyBv
bmx5IHRvIGZpbmQgbm90aGluZyANCm1lbnRpb25lZCBhYm91dCBkZW55aW5n IGFueXRoaW5nLi4u
Li4NCg0KQW55IHJlY29tbWVuZGF0aW9ucyBhcmUgYXBwcmVjaWF0ZWQhIFRo YW5rcw0KDQpBbiBl
eGFtcGxlIG9mIG9uZSBjb25maWcgZmlsZSB3aGljaCBpcyB0aGUgY29uZmln IGZyb20gTXVuaW4g
aXMgaGVyZToNCg0KW2NvZGVdDQpTY3JpcHRBbGlhcyAvbXVuaW4vY2dpLyAv dmFyL3d3dy9tdW5p
bi9jZ2kvDQojPERpcmVjdG9yeSAvdmFyL3d3dy9tdW5pbi9jZ2kvPg0KIyAg IE9wdGlvbnMgRXhl
Y0NHSQ0KIyAgIFNTTFJlcXVpcmVTU0wNCiMgICBvcmRlciBkZW55LGFsbG93 DQojICAgZGVueSBm
cm9tIGFsbA0KIyAgIEF1dGhUeXBlIEJhc2ljDQojICAgQXV0aFVzZXJGaWxl IC9zaXRlL2NmZy9w
YXNzd2QNCiMgICBBdXRoR3JvdXBGaWxlIC9zaXRlL2NmZy9ncm91cA0KIyAg IEF1dGhOYW1lICJt
dW5pbiINCiMgICByZXF1aXJlIGdyb3VwIG11bmluDQojICAgU2F0aXNmeSBB bnkNCiM8L0RpcmVj
dG9yeT4NCiMNCkFsaWFzIC9tdW5pbi8gL3Zhci93d3cvbXVuaW4vDQo8RGly ZWN0b3J5IC92YXIv
d3d3L211bmluLz4NCiAgIE9wdGlvbnMgTm9uZQ0KIyAgIFNTTFJlcXVpcmVT U0wNCiAgIG9yZGVy
IGRlbnksYWxsb3cNCiAgIGRlbnkgZnJvbSBhbGwNCiAgIEF1dGhUeXBlIEJh c2ljDQojICAgQXV0
aFVzZXJGaWxlIC9zaXRlL2NmZy9wYXNzd2QNCkF1dGhVc2VyRmlsZSAvdmFy L2h0dHAtcGFzc3dv
cmRzDQojICAgQXV0aEdyb3VwRmlsZSAvc2l0ZS9jZmcvZ3JvdXANCiNBdXRo R3JvdXBGaWxlIC92
YXIvaHR0cC1ncm91cA0KIyAgIEF1dGhOYW1lICJtdW5pbiINCkF1dGhOYW1l ICJSZXN0cmljdGVk
IEZpbGVzIg0KIyAgIHJlcXVpcmUgZ3JvdXAgbXVuaW4NClJlcXVpcmUgdXNl ciBhZG1pbg0KICAg
U2F0aXNmeSBBbnkNCjwvRGlyZWN0b3J5Pg0KWy9jb2RlXQ0KDQpJIGZvbGxv d2VkIHRoZSAuaHRh
Y2Nlc3MgZXhhbXBsZSBmcm9tIHRoZSBhcGFjaGUub3JnIHdlYnNpdGUgYW5k IGhhdmUgYSANCnNp
bmdsZSBmaWxlIHdoZXJlIHBhc3N3b3JkL3VzZXJuYW1lIGlzIHN0b3JlZCBm b3IgbXVsdGlwbGUg
cGFnZXMuLi4uLg0KDQpLYXlhDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KVGhlIG9mZmlj aWFsIFVzZXItVG8t
VXNlciBzdXBwb3J0IGZvcnVtIG9mIHRoZSBBcGFjaGUgSFRUUCBTZXJ2ZXIg UHJvamVjdC4NClNl
ZSA8VVJMOmh0dHA6Ly9odHRwZC5hcGFjaGUub3JnL3VzZXJzbGlzdC5odG1s PiBmb3IgbW9yZSBp
bmZvLg0KVG8gdW5zdWJzY3JpYmUsIGUtbWFpbDogdXNlcnMtdW5zdWJzY3Jp YmVAaHR0cGQuYXBh
Y2hlLm9yZw0KICAgIiAgIGZyb20gdGhlIGRpZ2VzdDogdXNlcnMtZGlnZXN0 LXVuc3Vic2NyaWJl
QGh0dHBkLmFwYWNoZS5vcmcNCkZvciBhZGRpdGlvbmFsIGNvbW1hbmRzLCBl LW1haWw6IHVzZXJz
LWhlbHBAaHR0cGQuYXBhY2hlLm9yZw0KDQo=

Re: .htaccess files not working from internet? intranetaccess fine

matt farey wrote:
> Is your squid proxy set up to forward on the basic authentication headers? Doesn't sound like they are being sent to your browser
>
>
> Sent from my BlackBerry® wireless device
>
>
Many thanks for the response! Is this the line I should be looking at in
Squid:

#auth_param basic realm Squid proxy-caching web server

uncomment then restart squid???



------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranet access fine

On Oct 11, 2009, at 2:57 PM, Kaya Saman wrote:

> I have a few servers running apache and some folders which
> have .htaccess files in them, I can access these from any network
> inside the NAT of my router however when it comes down to external
> access from outside the NAT I always get permission denied;
> authorized access only??

Sounds to me like this is a DNS issue.

> My systems are behind a reverse proxy handled by Squid but also
> after Google'ing found that Squid doesn't care about .htaccess and
> doesn't even know what it is.

Squid probably does not play a role in this.

> Another page I read claimed that it could be an issue of IPS
> protection system in the firewall - however iptables doesn't contain
> any config only default and isn't even running I think only in
> conjunction with fail2ban to prevent DoS attacks. My router, a Cisco
> 857W, also doesn't have IPS at all and IDS isn't enabled.

I doubt that is related, though possible, my gut tells me it is simpler.

> Can anyone help me find a solution to this situation?? I have
> checked the logs for httpd/access_log and error_log only to find
> nothing mentioned about denying anything.....

If you can load a hostname from within your network, yet not outside,
that would tell me that when you are inside the network, the
resolution of that hostname is turning up an IP that apache is happy
to serve the results for. When you are outside the network, that
hostname is not the same IP as what is returned when you are inside
the network.

> Any recommendations are appreciated! Thanks


I would run DNS lookups under both conditions. To keep it simple, if
your Web site you are trying to access is example.com, from the
working case, inside your network, open a terminal and run:
dig example.com A

Look for the result of the A record, and what IP address is is showing.

Now, go to the outside network where this is not working, and run the
same dig command. I suspect you will find there is a different IP
address being returned. If you are not seeing any hits to the
acces_log and error_log when outside the local network, it more than
likely means you are simply not reaching the machine you think you are.

However, you mention you get an access denied error, can you tell us
specifically what that error is, is it page 404 not found? What is
the http response code?

I do not see a Virtual Host container in your sample config you sent
in, you probably just need to set one up for the host you are trying
to reach.

Here is how I generally do it:
# START example.com

DocumentRoot "/var/www/munin"
ServerName example.com
ServerAlias www.example.com
DirectoryIndex index.html index.htm


Options FollowSymLinks
AllowOverride All
Order allow,deny
allow from all


# END example.com

--
Scott * If you contact me off list replace talklists@ with scott@ *


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccess fine

Scott Haneda wrote:
> On Oct 11, 2009, at 2:57 PM, Kaya Saman wrote:
>
>>
>
> Sounds to me like this is a DNS issue.

DNS is fine :-) URL's resolve no probs

>
>
> Squid probably does not play a role in this.

hmm.... that's exactly what I read but having slight second thoughts now!

>
>
> However, you mention you get an access denied error, can you tell us
> specifically what that error is, is it page 404 not found? What is
> the http response code?
>
>
There isn't an error as such it just doesn't let me in!!!

The browser goes directly back to password/uname input prompt after
values inputted?? Inside is ok let's me in but outside is issue... same
URLs as my internal DNS matches external DNS.

Also am in another country right now from the network so am having to
use combination of ssh and web to check stuff.


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranet access fine

On Oct 11, 2009, at 4:38 PM, Kaya Saman wrote:

> There isn't an error as such it just doesn't let me in!!!

Ahh, I think I see better what you are up against now.

> The browser goes directly back to password/uname input prompt after
> values inputted?? Inside is ok let's me in but outside is issue...
> same URLs as my internal DNS matches external DNS.
>
> Also am in another country right now from the network so am having
> to use combination of ssh and web to check stuff.


If you remove the http password parts from your config, do things
start to work for you?
--
Scott * If you contact me off list replace talklists@ with scott@ *


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccess fine

Scott Haneda wrote:
> On Oct 11, 2009, at 4:38 PM, Kaya Saman wrote:
>
>> There isn't an error as such it just doesn't let me in!!!
>
> Ahh, I think I see better what you are up against now.
>
>> The browser goes directly back to password/uname input prompt after
>> values inputted?? Inside is ok let's me in but outside is issue...
>> same URLs as my internal DNS matches external DNS.
>>
>> Also am in another country right now from the network so am having to
>> use combination of ssh and web to check stuff.
>
>
> If you remove the http password parts from your config, do things
> start to work for you?

Yes then it works no probs :-)

Internally is ok too with htaccess enabled (sorry if said this multiple
times) - when I left the network everything was fine internally but now
that I'm on the otherside of the fishbowl things are a bit different....

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccess fine

>>
>>
>> If you remove the http password parts from your config, do things
>> start to work for you?
>
> Yes then it works no probs :-)

Sorry if was unclear on this....

I can access the pages but then I have no security as .htaccess becomes
disabled!

Any thing else which can help me??

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccess fine

Hi guys,

sorry don't mean to be pushy or hasty but has anyone any idea of why my
security within .htaccess isn't working through the internet???

I kinda got some responses which at least I think helped identify the
problem more specifically but nothing to solve my issues... :-(

Thanks again, I do respect the fact that everyone has jobs and lives
which is why I waited till now as I assume the thread has got stale??

Many thanks for any solutions or probably ones ;-)

regards,

Kaya

Kaya Saman wrote:
>
>>>
>>>
>>> If you remove the http password parts from your config, do things
>>> start to work for you?
>>
>> Yes then it works no probs :-)
>
> Sorry if was unclear on this....
>
> I can access the pages but then I have no security as .htaccess
> becomes disabled!
>
> Any thing else which can help me??
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccess fine

RGlkIHlvdSBldmVyIGludmVzdGlnYXRlIHRoZSByZXNwb25zZSBoZWFkZXJz IG9yIGxvb2t1cCBi
YXNpYyBhdXRoIGluIHNxdWlkPw0KU2VudCBmcm9tIG15IEJsYWNrQmVycnmu IHdpcmVsZXNzIGRl
dmljZQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogS2F5 YSBTYW1hbiA8U2Ft
YW5LYXlhQG5ldHNjYXBlLm5ldD4NCkRhdGU6IFR1ZSwgMTMgT2N0IDIwMDkg MTE6MDI6NTIgDQpU
bzogPHVzZXJzQGh0dHBkLmFwYWNoZS5vcmc+DQpTdWJqZWN0OiBSZTogW3Vz ZXJzQGh0dHBkXSAu
aHRhY2Nlc3MgZmlsZXMgbm90IHdvcmtpbmcgZnJvbSBpbnRlcm5ldD8gaW50 cmFuZXQNCiBhY2Nl
c3MgZmluZQ0KSGkgZ3V5cywNCg0Kc29ycnkgZG9uJ3QgbWVhbiB0byBiZSBw dXNoeSBvciBoYXN0
eSBidXQgaGFzIGFueW9uZSBhbnkgaWRlYSBvZiB3aHkgbXkgDQpzZWN1cml0 eSB3aXRoaW4gLmh0
YWNjZXNzIGlzbid0IHdvcmtpbmcgdGhyb3VnaCB0aGUgaW50ZXJuZXQ/Pz8N Cg0KSSBraW5kYSBn
b3Qgc29tZSByZXNwb25zZXMgd2hpY2ggYXQgbGVhc3QgSSB0aGluayBoZWxw ZWQgaWRlbnRpZnkg
dGhlIA0KcHJvYmxlbSBtb3JlIHNwZWNpZmljYWxseSBidXQgbm90aGluZyB0 byBzb2x2ZSBteSBp
c3N1ZXMuLi4gOi0oDQoNClRoYW5rcyBhZ2FpbiwgSSBkbyByZXNwZWN0IHRo ZSBmYWN0IHRoYXQg
ZXZlcnlvbmUgaGFzIGpvYnMgYW5kIGxpdmVzIA0Kd2hpY2ggaXMgd2h5IEkg d2FpdGVkIHRpbGwg
bm93IGFzIEkgYXNzdW1lIHRoZSB0aHJlYWQgaGFzIGdvdCBzdGFsZT8/DQoN Ck1hbnkgdGhhbmtz
IGZvciBhbnkgc29sdXRpb25zIG9yIHByb2JhYmx5IG9uZXMgOy0pDQoNCnJl Z2FyZHMsDQoNCkth
eWENCg0KS2F5YSBTYW1hbiB3cm90ZToNCj4NCj4+Pg0KPj4+DQo+Pj4gSWYg eW91IHJlbW92ZSB0
aGUgaHR0cCBwYXNzd29yZCBwYXJ0cyBmcm9tIHlvdXIgY29uZmlnLCBkbyB0 aGluZ3MgDQo+Pj4g
c3RhcnQgdG8gd29yayBmb3IgeW91Pw0KPj4NCj4+IFllcyB0aGVuIGl0IHdv cmtzIG5vIHByb2Jz
IDotKQ0KPg0KPiBTb3JyeSBpZiB3YXMgdW5jbGVhciBvbiB0aGlzLi4uLg0K Pg0KPiBJIGNhbiBh
Y2Nlc3MgdGhlIHBhZ2VzIGJ1dCB0aGVuIEkgaGF2ZSBubyBzZWN1cml0eSBh cyAuaHRhY2Nlc3Mg
DQo+IGJlY29tZXMgZGlzYWJsZWQhDQo+DQo+IEFueSB0aGluZyBlbHNlIHdo aWNoIGNhbiBoZWxw
IG1lPz8NCj4NCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IFRoZSBvZmZpY2lhbCBVc2Vy LVRvLVVzZXIgc3Vw
cG9ydCBmb3J1bSBvZiB0aGUgQXBhY2hlIEhUVFAgU2VydmVyIA0KPiBQcm9q ZWN0Lg0KPiBTZWUg
PFVSTDpodHRwOi8vaHR0cGQuYXBhY2hlLm9yZy91c2Vyc2xpc3QuaHRtbD4g Zm9yIG1vcmUgaW5m
by4NCj4gVG8gdW5zdWJzY3JpYmUsIGUtbWFpbDogdXNlcnMtdW5zdWJzY3Jp YmVAaHR0cGQuYXBh
Y2hlLm9yZw0KPiAgICIgICBmcm9tIHRoZSBkaWdlc3Q6IHVzZXJzLWRpZ2Vz dC11bnN1YnNjcmli
ZUBodHRwZC5hcGFjaGUub3JnDQo+IEZvciBhZGRpdGlvbmFsIGNvbW1hbmRz LCBlLW1haWw6IHVz
ZXJzLWhlbHBAaHR0cGQuYXBhY2hlLm9yZw0KPg0KDQoNCi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KVGhlIG9mZmlj
aWFsIFVzZXItVG8tVXNlciBzdXBwb3J0IGZvcnVtIG9mIHRoZSBBcGFjaGUg SFRUUCBTZXJ2ZXIg
UHJvamVjdC4NClNlZSA8VVJMOmh0dHA6Ly9odHRwZC5hcGFjaGUub3JnL3Vz ZXJzbGlzdC5odG1s
PiBmb3IgbW9yZSBpbmZvLg0KVG8gdW5zdWJzY3JpYmUsIGUtbWFpbDogdXNl cnMtdW5zdWJzY3Jp
YmVAaHR0cGQuYXBhY2hlLm9yZw0KICAgIiAgIGZyb20gdGhlIGRpZ2VzdDog dXNlcnMtZGlnZXN0
LXVuc3Vic2NyaWJlQGh0dHBkLmFwYWNoZS5vcmcNCkZvciBhZGRpdGlvbmFs IGNvbW1hbmRzLCBl
LW1haWw6IHVzZXJzLWhlbHBAaHR0cGQuYXBhY2hlLm9yZw0KDQo=

Re: .htaccess files not working from internet? intranetaccessfine

matt farey wrote:
> Did you ever investigate the response headers or lookup basic auth in squid?
> Sent from my BlackBerry® wireless device
>
>
Thanks for the response Matt!!

I haven't checked the headers so will need to run Wireshark on it.

Checked out basic auth in Squid and posted a line of conf which I
thought was viable:

#auth_param basic realm Squid proxy-caching web server

after restarting however I got the same issue.

When I get back later I'll do more Google'ing on it as I have to run out
now as meeting for a job interview (currently transitioning between
ex-student and IT/networking proffessional (make that junior))!!

I think output from Wireshark will help you guys help me out more
provided I don't get the issue fixed before hand :-)

Thanks again for the response!!

Regards,

Kaya


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet?

What's in the error/access logs on apache, Kaya?

That should tell you whether it's apache blocking the request, or Squid.

On Tue, Oct 13, 2009 at 9:45 AM, Kaya Saman wrote:
> matt farey wrote:
>>
>> Did you ever investigate the response headers or lookup basic auth in
>> squid?
>> Sent from my BlackBerry=AE wireless device
>>
>
> Thanks for the response Matt!!
>
> I haven't checked the headers so will need to run Wireshark on it.
>
> Checked out basic auth in Squid and posted a line of conf which I thought
> was viable:
>
> #auth_param basic realm Squid proxy-caching web server
>
> after restarting however I got the same issue.
>
> When I get back later I'll do more Google'ing on it as I have to run out =
now
> as meeting for a job interview (currently transitioning between ex-studen=
t
> and IT/networking proffessional (make that junior))!!
>
> I think output from Wireshark will help you guys help me out more provide=
d I
> don't get the issue fixed before hand :-)
>
> Thanks again for the response!!
>
> Regards,
>
> Kaya
>
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project=
..
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> =A0" =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccessfine

WW91IGNhbiB1c2UgYSB0ZWxuZXQNCg0KDQpUZWxuZXQgaG9zdG5hbWUgODAN Cg0KDQpHRVQgdXJs
IEhUVFAvMS4xDQpIb3N0OiBob3N0bmFtZQ0KRW50ZXIgZW50ZXINCg0KDQpB bmQgc2VlIHdoYXQg
Y29tZXMgYmFjaw0KDQoNCkl0IHN0cmlrZSBtZSBzcXVpZCBpcyBub3QgcGFz c2luZyBiYWNrIHRo
ZSBoZWFkZXJzIG9yIHlvdSB3b3VsZCBzZWUgdGhlIGJyb3dzZXIgcG9wIHVw LCBidXQgc3F1aWQg
KmlzKiBzZWVpbmcgdGhlIGNoYWxsZW5nZSBzaW5jZSBpdCBmYWlscyB3aXRo IDQwMy4NCg0KTm93
IGRvIHNhbWUgdGVsbmV0IGRpcmVjdCB0byBwYWdlIGFuZCBzZWUgdGhlIGRp ZmZlcmVuY2UNCg0K
U2VudCBmcm9tIG15IEJsYWNrQmVycnmuIHdpcmVsZXNzIGRldmljZQ0KDQot LS0tLU9yaWdpbmFs
IE1lc3NhZ2UtLS0tLQ0KRnJvbTogS2F5YSBTYW1hbiA8U2FtYW5LYXlhQG5l dHNjYXBlLm5ldD4N
CkRhdGU6IFR1ZSwgMTMgT2N0IDIwMDkgMTE6NDU6MDEgDQpUbzogPHVzZXJz QGh0dHBkLmFwYWNo
ZS5vcmc+DQpTdWJqZWN0OiBSZTogW3VzZXJzQGh0dHBkXSAuaHRhY2Nlc3Mg ZmlsZXMgbm90IHdv
cmtpbmcgZnJvbSBpbnRlcm5ldD8gaW50cmFuZXRhY2Nlc3MNCiBmaW5lDQpt YXR0IGZhcmV5IHdy
b3RlOg0KPiBEaWQgeW91IGV2ZXIgaW52ZXN0aWdhdGUgdGhlIHJlc3BvbnNl IGhlYWRlcnMgb3Ig
bG9va3VwIGJhc2ljIGF1dGggaW4gc3F1aWQ/DQo+IFNlbnQgZnJvbSBteSBC bGFja0JlcnJ5riB3
aXJlbGVzcyBkZXZpY2UNCj4gICANCj4gICANClRoYW5rcyBmb3IgdGhlIHJl c3BvbnNlIE1hdHQh
IQ0KDQpJIGhhdmVuJ3QgY2hlY2tlZCB0aGUgaGVhZGVycyBzbyB3aWxsIG5l ZWQgdG8gcnVuIFdp
cmVzaGFyayBvbiBpdC4NCg0KQ2hlY2tlZCBvdXQgYmFzaWMgYXV0aCBpbiBT cXVpZCBhbmQgcG9z
dGVkIGEgbGluZSBvZiBjb25mIHdoaWNoIEkgDQp0aG91Z2h0IHdhcyB2aWFi bGU6DQoNCiNhdXRo
X3BhcmFtIGJhc2ljIHJlYWxtIFNxdWlkIHByb3h5LWNhY2hpbmcgd2ViIHNl cnZlcg0KDQphZnRl
ciByZXN0YXJ0aW5nIGhvd2V2ZXIgSSBnb3QgdGhlIHNhbWUgaXNzdWUuDQoN CldoZW4gSSBnZXQg
YmFjayBsYXRlciBJJ2xsIGRvIG1vcmUgR29vZ2xlJ2luZyBvbiBpdCBhcyBJ IGhhdmUgdG8gcnVu
IG91dCANCm5vdyBhcyBtZWV0aW5nIGZvciBhIGpvYiBpbnRlcnZpZXcgKGN1 cnJlbnRseSB0cmFu
c2l0aW9uaW5nIGJldHdlZW4gDQpleC1zdHVkZW50IGFuZCBJVC9uZXR3b3Jr aW5nIHByb2ZmZXNz
aW9uYWwgKG1ha2UgdGhhdCBqdW5pb3IpKSEhDQoNCkkgdGhpbmsgb3V0cHV0 IGZyb20gV2lyZXNo
YXJrIHdpbGwgaGVscCB5b3UgZ3V5cyBoZWxwIG1lIG91dCBtb3JlIA0KcHJv dmlkZWQgSSBkb24n
dCBnZXQgdGhlIGlzc3VlIGZpeGVkIGJlZm9yZSBoYW5kIDotKQ0KDQpUaGFu a3MgYWdhaW4gZm9y
IHRoZSByZXNwb25zZSEhDQoNClJlZ2FyZHMsDQoNCktheWENCg0KDQotLS0t LS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NClRo
ZSBvZmZpY2lhbCBVc2VyLVRvLVVzZXIgc3VwcG9ydCBmb3J1bSBvZiB0aGUg QXBhY2hlIEhUVFAg
U2VydmVyIFByb2plY3QuDQpTZWUgPFVSTDpodHRwOi8vaHR0cGQuYXBhY2hl Lm9yZy91c2Vyc2xp
c3QuaHRtbD4gZm9yIG1vcmUgaW5mby4NClRvIHVuc3Vic2NyaWJlLCBlLW1h aWw6IHVzZXJzLXVu
c3Vic2NyaWJlQGh0dHBkLmFwYWNoZS5vcmcNCiAgICIgICBmcm9tIHRoZSBk aWdlc3Q6IHVzZXJz
LWRpZ2VzdC11bnN1YnNjcmliZUBodHRwZC5hcGFjaGUub3JnDQpGb3IgYWRk aXRpb25hbCBjb21t
YW5kcywgZS1tYWlsOiB1c2Vycy1oZWxwQGh0dHBkLmFwYWNoZS5vcmcNCg0K

Re: .htaccess files not working from internet? intranetaccessfine

Many thanks for the responses :-)

I am back now with possible job placements which is a good sign!

Matt, I tried telnet but my telnet version doesn't give me as specific
detailed output as that....

I used: telnet {mydomain.com} 80 and it just gives me connected??? No
'get url' etc... - am on Ubuntu 9.04 currently but even within the
Solaris and Cent OS servers I don't get that kind of response.

Dick, I have nothing in access log apart from BitTorrent stuff, but in
error_log I get this:

[Tue Oct 13 14:30:16 2009] [error] [client 127.0.0.1] File does not
exist: /var/www/html/announce

I don't think it is relevant but however the issue looks to be squid by
my inexperienced knowledge...?? :-)

Time to fire up wireshark or tshark on this one I think....

Regards,

Kaya

matt farey wrote:
> You can use a telnet
>
>
> Telnet hostname 80
>
>
> GET url HTTP/1.1
> Host: hostname
> Enter enter
>
>
> And see what comes back
>
>
> It strike me squid is not passing back the headers or you would see the browser pop up, but squid *is* seeing the challenge since it fails with 403.
>
> Now do same telnet direct to page and see the difference
>
> Sent from my BlackBerry® wireless device
>
> -----Original Message-----
> From: Kaya Saman
> Date: Tue, 13 Oct 2009 11:45:01
> To:
> Subject: Re: [users@httpd] .htaccess files not working from internet? intranetaccess
> fine
> matt farey wrote:
>
>> Did you ever investigate the response headers or lookup basic auth in squid?
>> Sent from my BlackBerry® wireless device
>>
>>
>>
> Thanks for the response Matt!!
>
> I haven't checked the headers so will need to run Wireshark on it.
>
> Checked out basic auth in Squid and posted a line of conf which I
> thought was viable:
>
> #auth_param basic realm Squid proxy-caching web server
>
> after restarting however I got the same issue.
>
> When I get back later I'll do more Google'ing on it as I have to run out
> now as meeting for a job interview (currently transitioning between
> ex-student and IT/networking proffessional (make that junior))!!
>
> I think output from Wireshark will help you guys help me out more
> provided I don't get the issue fixed before hand :-)
>
> Thanks again for the response!!
>
> Regards,
>
> Kaya
>
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccessfine

Got a wireshark output on this and get:

X-cache=MISS

but nothing really distinguishable within the http headers..... :-(



------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet?

On Tue, Oct 13, 2009 at 12:33 PM, Kaya Saman wrote:

> I used: telnet {mydomain.com} 80 and it just gives me connected??? No 'get
> url' etc... - am on Ubuntu 9.04 currently but even within the Solaris and
> Cent OS servers I don't get that kind of response.

You have to type the GET bit yourself :)


> Dick, I have nothing in access log apart from BitTorrent stuff, but in
> error_log I get this:
>
> [Tue Oct 13 14:30:16 2009] [error] [client 127.0.0.1] File does not exist:
> /var/www/html/announce

If squid is running on the same box, you'd see an error like that if
squid was letting you
in and you requested /announce .

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccessfine

Dick Davies wrote:
> On Tue, Oct 13, 2009 at 12:33 PM, Kaya Saman wrote:
>
>
>
> You have to type the GET bit yourself :)
>

Oops... newbie mistake haha :-)

Output:

[code]
GET url HTTP/1.1

HTTP/1.0 400 Bad Request
Server: squid/2.6.STABLE15
Date: Tue, 13 Oct 2009 12:14:05 GMT
Content-Type: text/html
Content-Length: 1143
Expires: Tue, 13 Oct 2009 12:14:05 GMT
X-Squid-Error: ERR_INVALID_URL 0
X-Cache: MISS from NetraT1-Proxy
Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
Connection: close

"http://www.w3.org/TR/html4/loose.dtd">

ERROR

The requested URL could not be retrieved

While trying to retrieve the URL:

The following error was encountered:

• 
  
  Invalid URL
  
  

Some aspect of the requested URL is incorrect. Possible problems:

• Missing or incorrect access protocol (should be `http://'' or similar)
  
• Missing hostname
  
• Illegal double-escape in the URL-Path
  
• Illegal character in hostname; underscores are not allowed
  

Your cache administrator is .

Re: .htaccess files not working from internet? intranetaccessfine

Using host: hostname from telnet I get this:

[code]
HTTP/1.0 400 Bad Request
Server: squid/2.6.STABLE15
Date: Tue, 13 Oct 2009 12:17:34 GMT
Content-Type: text/html
Content-Length: 1186
Expires: Tue, 13 Oct 2009 12:17:34 GMT
X-Squid-Error: ERR_INVALID_REQ 0
X-Cache: MISS from NetraT1-Proxy
Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
Proxy-Connection: close

"http://www.w3.org/TR/html4/loose.dtd">

ERROR

The requested URL could not be retrieved

While trying to process the request:

host zeta-ray

The following error was encountered:

• 
  
  Invalid Request
  
  

Some aspect of the HTTP Request is invalid. Possible problems:

• Missing or unknown request method
  
• Missing URL
  
• Missing HTTP Identifier (HTTP/1.0)
  
• Request is too large
  
• Content-Length missing for POST or PUT requests
  
• Illegal character in hostname; underscores are not allowed
  

Your cache administrator is .

Re: .htaccess files not working from internet?

Do yourself a big favour and use something like curl.
Telnet is a crappy way to test http.

On Tue, Oct 13, 2009 at 1:19 PM, Kaya Saman wrote:
> Using host: hostname from telnet I get this:
>
> [code]
> HTTP/1.0 400 Bad Request
> Server: squid/2.6.STABLE15
> Date: Tue, 13 Oct 2009 12:17:34 GMT
> Content-Type: text/html
> Content-Length: 1186
> Expires: Tue, 13 Oct 2009 12:17:34 GMT
> X-Squid-Error: ERR_INVALID_REQ 0
> X-Cache: MISS from NetraT1-Proxy
> Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
> Proxy-Connection: close
>
> > "http://www.w3.org/TR/html4/loose.dtd">
> > charset=3Diso-8859-1">
>
> > type=3D"text/css">
>
>

ERROR

The requested URL could not be retrieved

> While trying to process the request:
>

> host zeta-ray

>

> 

> The following error was encountered:
>

>
• 
  >
  > Invalid Request
  >
  >

> Some aspect of the HTTP Request is invalid. =A0Possible problems:
>

>
• Missing or unknown request method
  >
• Missing URL
  >
• Missing HTTP Identifier (HTTP/1.0)
  >
• Request is too large
  >
• Content-Length missing for POST or PUT requests
  >
• Illegal character in hostname; underscores are not allowed
  >

Your cache administrator is =
..
>
>

>

Re: .htaccess files not working from internet?intranet access fine

On Mon, 2009-10-12 at 00:57 +0300, Kaya Saman wrote:
> Hi,
>
> this is my first post here :-)
>
> basically I have google'd this issue a bit and finally realized that
> there was no viable solution that I could deduce results from!
>
> I have a few servers running apache and some folders which have
> .htaccess files in them, I can access these from any network inside the
> NAT of my router however when it comes down to external access from
> outside the NAT I always get permission denied; authorized access only??
>
> My systems are behind a reverse proxy handled by Squid but also after
> Google'ing found that Squid doesn't care about .htaccess and doesn't
> even know what it is.
>
> Another page I read claimed that it could be an issue of IPS protection
> system in the firewall - however iptables doesn't contain any config
> only default and isn't even running I think only in conjunction with
> fail2ban to prevent DoS attacks. My router, a Cisco 857W, also doesn't
> have IPS at all and IDS isn't enabled.
>
> Can anyone help me find a solution to this situation?? I have checked
> the logs for httpd/access_log and error_log only to find nothing
> mentioned about denying anything.....
>
> Any recommendations are appreciated! Thanks
>
> An example of one config file which is the config from Munin is here:
>
> [code]
> ScriptAlias /munin/cgi/ /var/www/munin/cgi/
> #
> # Options ExecCGI
> # SSLRequireSSL
> # order deny,allow
> # deny from all
> # AuthType Basic
> # AuthUserFile /site/cfg/passwd
> # AuthGroupFile /site/cfg/group
> # AuthName "munin"
> # require group munin
> # Satisfy Any
> #
> #
> Alias /munin/ /var/www/munin/
>
> Options None
> # SSLRequireSSL
> order deny,allow
> deny from all
> AuthType Basic
> # AuthUserFile /site/cfg/passwd
> AuthUserFile /var/http-passwords
> # AuthGroupFile /site/cfg/group
> #AuthGroupFile /var/http-group
> # AuthName "munin"
> AuthName "Restricted Files"
> # require group munin
> Require user admin
> Satisfy Any
>
> [/code]
>
> I followed the .htaccess example from the apache.org website and have a
> single file where password/username is stored for multiple pages.....
>
> Kaya

What denies you access, squid or apache?

When you request a file that you get denied access to, what exactly gets
printed to the apache error log? If nothing is printed there, then your
problem is with squid (see you on squid-users@squid-cache.org :).
If you have something printed there, let us know and we can help.

Cheers

Tom



------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccess fine

>
> What denies you access, squid or apache?
>

Not sure about this one which is why initially I came here in the first
place but it looks like I have eliminated apache as the culprit since
internally I can gain access to .htaccess uname/passwd files no probs.

Issue is with WAN connection so it seems like Squid is denying me
access, however from what I read Squid has nothing to do with .htaccess
at all but since Squid analyzes http headers etc I think it seems a more
viable culprit to blame then Apache.

> When you request a file that you get denied access to, what exactly gets
> printed to the apache error log? If nothing is printed there, then your
> problem is with squid (see you on squid-users@squid-cache.org :).
> If you have something printed there, let us know and we can help.
>
>

Nothing gets printed meaning that issue is Squid as mentioned above :-)

Of course an expert opinion meaning second opinion is always a good idea
but I think that everyone here would concur that I should approach the
Squid mailing list.....

Thanks for everyone's help time to go to Squid :-)

> Cheers
>
> Tom
>
>
>

Kaya

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccessfine

Kaya Saman schrieb:
> Using host: hostname from telnet I get this:
You have to simulate what the browser would do.
So "URL" or "hostname" must be http://the.url.you.never/told/us.here, OK? :)

You could try Firefox and LiveHTTPHeaders add-on.
http://www.mozilla-europe.org/de/firefox/
https://addons.mozilla.org/de/firefox/addon/3829

Then you may see, what's going on.


Marc

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccessfine

> You have to simulate what the browser would do.
> So "URL" or "hostname" must be http://the.url.you.never/told/us.here,
> OK? :)

Whoops, sorry got so caught up in my own stuff major apologies!!

URL is http://zeta-ray.optiplex-networks.com/munin/

This is one of the systems I have .htaccess passwd files on.....

>
> You could try Firefox and LiveHTTPHeaders add-on.
> http://www.mozilla-europe.org/de/firefox/
> https://addons.mozilla.org/de/firefox/addon/3829

Thank you I will try these and curl as well, as suggested previously :-)

>
> Then you may see, what's going on.
>
>
> Marc
>

> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccessfine

Hi guys,

this is output from curl:

[code]
root@Hp-Compaq-2230s:~# curl http://zeta-ray.optiplex-networks.com/munin/

Authorization Required

This server could not verify that you
are authorized to access the document
requested. Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
the credentials required.

Re: .htaccess files not working from internet? intranetaccessfine

Q3VybCBpcyBub3Qgc2hvd2luZyB0aGUgcmVzcG9uc2UgaGVhZGVycywgSXMg aXQgLVggb3IgLUgg
KG9yIG5laXRoZXIgLSBJIGZvcmdldCEpDQoNCklmIHlvdSBoYXZlIGFjY2Vz cyB0byB3aW5kb3dz
LCB5b3UgY2FuIHVzZSBmaWRkbGVydG9vbCBwcm94eSwgZGFtbiBob3QgZGVi dWdnaW5nIHByb3h5
Lg0KDQpCdXQgYXQgbGVhc3QgeW91IGNhbiBzZWUgdGhhdCBzcXVpZCBkb2Vz IG5vdCB1bmRlcnN0
YW5kIGhvdyB0byBzdXBwbHkgdGhlIGNyZWRlbnRpYWxzIGZyb20gdGhlIGh0 bWwhDQoNCk1hdHQN
ClNlbnQgZnJvbSBteSBCbGFja0JlcnJ5riB3aXJlbGVzcyBkZXZpY2UNCg0K LS0tLS1PcmlnaW5h
bCBNZXNzYWdlLS0tLS0NCkZyb206IEtheWEgU2FtYW4gPFNhbWFuS2F5YUBu ZXRzY2FwZS5uZXQ+
DQpEYXRlOiBXZWQsIDE0IE9jdCAyMDA5IDEyOjQ4OjAzIA0KVG86IDx1c2Vy c0BodHRwZC5hcGFj
aGUub3JnPg0KU3ViamVjdDogUmU6IFt1c2Vyc0BodHRwZF0gLmh0YWNjZXNz IGZpbGVzIG5vdCB3
b3JraW5nIGZyb20gaW50ZXJuZXQ/IAlpbnRyYW5ldGFjY2Vzc2ZpbmUNCkhp IGd1eXMsDQoNCnRo
aXMgaXMgb3V0cHV0IGZyb20gY3VybDoNCg0KW2NvZGVdDQpyb290QEhwLUNv bXBhcS0yMjMwczp+
IyBjdXJsIGh0dHA6Ly96ZXRhLXJheS5vcHRpcGxleC1uZXR3b3Jrcy5jb20v bXVuaW4vDQo8IURP
Q1RZUEUgSFRNTCBQVUJMSUMgIi0vL0lFVEYvL0RURCBIVE1MIDIuMC8vRU4i Pg0KPGh0bWw+PGhl
YWQ+DQo8dGl0bGU+NDAxIEF1dGhvcml6YXRpb24gUmVxdWlyZWQ8L3RpdGxl Pg0KPC9oZWFkPjxi
b2R5Pg0KPGgxPkF1dGhvcml6YXRpb24gUmVxdWlyZWQ8L2gxPg0KPHA+VGhp cyBzZXJ2ZXIgY291
bGQgbm90IHZlcmlmeSB0aGF0IHlvdQ0KYXJlIGF1dGhvcml6ZWQgdG8gYWNj ZXNzIHRoZSBkb2N1
bWVudA0KcmVxdWVzdGVkLiAgRWl0aGVyIHlvdSBzdXBwbGllZCB0aGUgd3Jv bmcNCmNyZWRlbnRp
YWxzIChlLmcuLCBiYWQgcGFzc3dvcmQpLCBvciB5b3VyDQpicm93c2VyIGRv ZXNuJ3QgdW5kZXJz
dGFuZCBob3cgdG8gc3VwcGx5DQp0aGUgY3JlZGVudGlhbHMgcmVxdWlyZWQu PC9wPg0KPGhyPg0K
PGFkZHJlc3M+QXBhY2hlLzIuMi4zIChSZWQgSGF0KSBTZXJ2ZXIgYXQgemV0 YS1yYXkub3B0aXBs
ZXgtbmV0d29ya3MuY29tIA0KUG9ydCA4MDwvYWRkcmVzcz4NCjwvYm9keT48 L2h0bWw+DQpbL2Nv
ZGVdDQoNCkFtIGdvbmEgdHJ5IHRoZSBmaXJlZm94IGFkZG9ucyBub3chIQ0K DQotLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0t
LS0NClRoZSBvZmZpY2lhbCBVc2VyLVRvLVVzZXIgc3VwcG9ydCBmb3J1bSBv ZiB0aGUgQXBhY2hl
IEhUVFAgU2VydmVyIFByb2plY3QuDQpTZWUgPFVSTDpodHRwOi8vaHR0cGQu YXBhY2hlLm9yZy91
c2Vyc2xpc3QuaHRtbD4gZm9yIG1vcmUgaW5mby4NClRvIHVuc3Vic2NyaWJl LCBlLW1haWw6IHVz
ZXJzLXVuc3Vic2NyaWJlQGh0dHBkLmFwYWNoZS5vcmcNCiAgICIgICBmcm9t IHRoZSBkaWdlc3Q6
IHVzZXJzLWRpZ2VzdC11bnN1YnNjcmliZUBodHRwZC5hcGFjaGUub3JnDQpG b3IgYWRkaXRpb25h
bCBjb21tYW5kcywgZS1tYWlsOiB1c2Vycy1oZWxwQGh0dHBkLmFwYWNoZS5v cmcNCg0K

Re: .htaccess files not working from internet? intranetaccessfine

Firefox plugin is giving me quite an interesting readout and I think
I've located the issue which is what Matt Farey has been saying all
along about the Squid forwarding of HTTP Auth Basic Headers:

I get WWW-Authenticate: Basic realm="Restricted Files" message which I'm
pretty sure is this part of Squid:

#auth_param basic realm

of which after I get an X-cache: MISS message.

Time to go to Squid mailing list I think, would you guys agree???

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: .htaccess files not working from internet? intranetaccessfine

V2hhdCBzaG91bGQgaGFwcGVuLCBpcyB0aGF0IA0KRmlyZWZveCByZXF1ZXN0 cyBVUkwNCkdvZXMg
dmlhIHNxdWlkLA0KU3F1aWQgc2VuZHMgb24gZmlyZWZveGVzIHJlcXVlc3Qg aGVhZGVycw0KQXBh
Y2hlIGJhY2tlbmQgc2VuZHMgIm11c3QgYXV0aGVudGljYXRlIiBoZWFkZXJz DQpUaGVzZSBtdXN0
IGJlIHBpY2tlZCB1IGJ5IHNxdWlkIGFuZCByZXZlcnNlZCBvdXQgdG8gZmly ZWZveCwgaWYgdGhp
cyBpcyBoYXBwZW5pbmcsIHlvdSB3aWxsIHNlZSB0aGUgZmlyZWZveCBiYXNp YyBhdXRoZW50aWNh
dGlvbiBwb3AtdXAuDQoNCk9uY2UgZmlyZWZveCBzZWVzIHRob3NlIGF1dGhl bnRpY2F0aW9uIGhl
YWRlcnMgYW5kIHlvdSBmaWxsIGluIHRoZSBib3hlcyBpdCB3aWxsIHNlbmQg dGhlIGEgaGVhZGVy
IHdpdGggYSBwYXlsb2FkIG9mIGJhc2U2NCBlbmNvZGVkIHVzZXJuYW1lOnBh c3N3b3JkDQoNClRo
aXMgbXVzdCBiZSBwcm94aWVkIGJ5IHNxdWlkIHRvIGFwYWNoZSBmb3IgdGhl IHJlc291cmNlIHRv
IGJlIGFsbG93ZWQgYmFjay4NCg0KRmlyZWZveCBzaG91bGQgbm93IGNhY2hl IHRoZXNlIGNyZWRl
bnRpYWxzIGFuZCByZXNlbmQgdGhlbSBldmVyeSBzaW5nbGUgcmVxdWVzdCwg YW5kIHNvIG9uDQoN
Cg0KV2hlcmUgZG9lcyB0aGlzIGZhaWwsIGFyZSB5b3UgZ2V0dGluZyB0aGUg ZmlyZWZveCBwb3Ag
dXA/DQpTZW50IGZyb20gbXkgQmxhY2tCZXJyea4gd2lyZWxlc3MgZGV2aWNl DQoNCi0tLS0tT3Jp
Z2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBLYXlhIFNhbWFuIDxTYW1hbkth eWFAbmV0c2NhcGUu
bmV0Pg0KRGF0ZTogV2VkLCAxNCBPY3QgMjAwOSAxMzoxMDoxMSANClRvOiA8 dXNlcnNAaHR0cGQu
YXBhY2hlLm9yZz4NClN1YmplY3Q6IFJlOiBbdXNlcnNAaHR0cGRdIC5odGFj Y2VzcyBmaWxlcyBu
b3Qgd29ya2luZyBmcm9tIGludGVybmV0PyAJaW50cmFuZXRhY2Nlc3NmaW5l DQpGaXJlZm94IHBs
dWdpbiBpcyBnaXZpbmcgbWUgcXVpdGUgYW4gaW50ZXJlc3RpbmcgcmVhZG91 dCBhbmQgSSB0aGlu
ayANCkkndmUgbG9jYXRlZCB0aGUgaXNzdWUgd2hpY2ggaXMgd2hhdCBNYXR0 IEZhcmV5IGhhcyBi
ZWVuIHNheWluZyBhbGwgDQphbG9uZyBhYm91dCB0aGUgU3F1aWQgZm9yd2Fy ZGluZyBvZiBIVFRQ
IEF1dGggQmFzaWMgSGVhZGVyczoNCg0KSSBnZXQgV1dXLUF1dGhlbnRpY2F0 ZTogQmFzaWMgcmVh
bG09IlJlc3RyaWN0ZWQgRmlsZXMiIG1lc3NhZ2Ugd2hpY2ggSSdtIA0KcHJl dHR5IHN1cmUgaXMg
dGhpcyBwYXJ0IG9mIFNxdWlkOg0KDQojYXV0aF9wYXJhbSBiYXNpYyByZWFs bQ0KDQpvZiB3aGlj
aCBhZnRlciBJIGdldCBhbiBYLWNhY2hlOiBNSVNTIG1lc3NhZ2UuDQoNClRp bWUgdG8gZ28gdG8g
U3F1aWQgbWFpbGluZyBsaXN0IEkgdGhpbmssIHdvdWxkIHlvdSBndXlzIGFn cmVlPz8/DQoNCi0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0t
LS0tLS0tLS0tLQ0KVGhlIG9mZmljaWFsIFVzZXItVG8tVXNlciBzdXBwb3J0 IGZvcnVtIG9mIHRo
ZSBBcGFjaGUgSFRUUCBTZXJ2ZXIgUHJvamVjdC4NClNlZSA8VVJMOmh0dHA6 Ly9odHRwZC5hcGFj
aGUub3JnL3VzZXJzbGlzdC5odG1sPiBmb3IgbW9yZSBpbmZvLg0KVG8gdW5z dWJzY3JpYmUsIGUt
bWFpbDogdXNlcnMtdW5zdWJzY3JpYmVAaHR0cGQuYXBhY2hlLm9yZw0KICAg IiAgIGZyb20gdGhl
IGRpZ2VzdDogdXNlcnMtZGlnZXN0LXVuc3Vic2NyaWJlQGh0dHBkLmFwYWNo ZS5vcmcNCkZvciBh
ZGRpdGlvbmFsIGNvbW1hbmRzLCBlLW1haWw6IHVzZXJzLWhlbHBAaHR0cGQu YXBhY2hlLm9yZw0K
DQo=

Re: .htaccess files not working from internet? intranetaccessfine

U29ycnkgdGhpcyBibGFzdGVkIGJsYWNrYmVycnkgbWlzc2VzIGxldHRlcnMh IChBbmQgdG9wIHBv
c3RzISkNCg0KDQoNClNlbnQgZnJvbSBteSBCbGFja0JlcnJ5riB3aXJlbGVz cyBkZXZpY2UNCg0K
LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEtheWEgU2FtYW4g PFNhbWFuS2F5YUBu
ZXRzY2FwZS5uZXQ+DQpEYXRlOiBXZWQsIDE0IE9jdCAyMDA5IDEzOjEwOjEx IA0KVG86IDx1c2Vy
c0BodHRwZC5hcGFjaGUub3JnPg0KU3ViamVjdDogUmU6IFt1c2Vyc0BodHRw ZF0gLmh0YWNjZXNz
IGZpbGVzIG5vdCB3b3JraW5nIGZyb20gaW50ZXJuZXQ/IAlpbnRyYW5ldGFj Y2Vzc2ZpbmUNCkZp
cmVmb3ggcGx1Z2luIGlzIGdpdmluZyBtZSBxdWl0ZSBhbiBpbnRlcmVzdGlu ZyByZWFkb3V0IGFu
ZCBJIHRoaW5rIA0KSSd2ZSBsb2NhdGVkIHRoZSBpc3N1ZSB3aGljaCBpcyB3 aGF0IE1hdHQgRmFy
ZXkgaGFzIGJlZW4gc2F5aW5nIGFsbCANCmFsb25nIGFib3V0IHRoZSBTcXVp ZCBmb3J3YXJkaW5n
IG9mIEhUVFAgQXV0aCBCYXNpYyBIZWFkZXJzOg0KDQpJIGdldCBXV1ctQXV0 aGVudGljYXRlOiBC
YXNpYyByZWFsbT0iUmVzdHJpY3RlZCBGaWxlcyIgbWVzc2FnZSB3aGljaCBJ J20gDQpwcmV0dHkg
c3VyZSBpcyB0aGlzIHBhcnQgb2YgU3F1aWQ6DQoNCiNhdXRoX3BhcmFtIGJh c2ljIHJlYWxtDQoN
Cm9mIHdoaWNoIGFmdGVyIEkgZ2V0IGFuIFgtY2FjaGU6IE1JU1MgbWVzc2Fn ZS4NCg0KVGltZSB0
byBnbyB0byBTcXVpZCBtYWlsaW5nIGxpc3QgSSB0aGluaywgd291bGQgeW91 IGd1eXMgYWdyZWU/
Pz8NCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tDQpUaGUgb2ZmaWNpYWwgVXNlci1Uby1Vc2Vy IHN1cHBvcnQgZm9y
dW0gb2YgdGhlIEFwYWNoZSBIVFRQIFNlcnZlciBQcm9qZWN0Lg0KU2VlIDxV Ukw6aHR0cDovL2h0
dHBkLmFwYWNoZS5vcmcvdXNlcnNsaXN0Lmh0bWw+IGZvciBtb3JlIGluZm8u DQpUbyB1bnN1YnNj
cmliZSwgZS1tYWlsOiB1c2Vycy11bnN1YnNjcmliZUBodHRwZC5hcGFjaGUu b3JnDQogICAiICAg
ZnJvbSB0aGUgZGlnZXN0OiB1c2Vycy1kaWdlc3QtdW5zdWJzY3JpYmVAaHR0 cGQuYXBhY2hlLm9y
Zw0KRm9yIGFkZGl0aW9uYWwgY29tbWFuZHMsIGUtbWFpbDogdXNlcnMtaGVs cEBodHRwZC5hcGFj
aGUub3JnDQoNCg==

Re: .htaccess files not working from internet? intranetaccessfine

matt farey wrote:
> Sorry this blasted blackberry misses letters! (And top posts!)
>
>
>
> Sent from my BlackBerry® wireless device
>
>
That's cool :-) my next step is to learn how to synch Blackberry's with
colab systems such as Zimbra and Scalix..... it's nice being an
enthusiastic student! - although once I get that first job which is so
near now I doubt it'll last but then again I love what I do so... there
may be some chance to love my job after all;

That aside exact output I'm getting is this:

[code]
----------------------------------------------------------
http://zeta-ray.optiplex-networks.com/munin/

GET /munin/ HTTP/1.1
Host: zeta-ray.optiplex-networks.com
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.14)
Gecko/2009090217 Ubuntu/9.04 (jaunty) Firefox/3.0.14
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q= 0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Authorization: Basic YWRtaW46U2NscjExWFA5OQ==

HTTP/1.x 401 Unauthorized
Date: Wed, 14 Oct 2009 09:57:23 GMT
Server: Apache/2.2.3 (Red Hat)
WWW-Authenticate: Basic realm="Restricted Files"
Content-Length: 497
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from NetraT1-Proxy
Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
Connection: close
----------------------------------------------------------
[/code]


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org