nixCraft Linux Forum

nixCraft

Linux Tech Support Forum

Apache2 has a proxy emdeded !?!?

This is a discussion on Apache2 has a proxy emdeded !?!? within the Networking, Firewalls and Security forums, part of the Mastering Linux category; This is the problem: if i start apache2 (/etc/init.d/apache2 start ) my computer goes slower. I've checked ...


Go Back   nixCraft Linux Forum > Mastering Linux > Networking, Firewalls and Security

Register FAQ Members List Calendar Mark Forums Read
  #1 (permalink)  
Old 05-19-2008, 06:02 PM
Junior Member
User
 
Join Date: May 2008
My distro: fedora
Posts: 15
permalac is on a distinguished road
Default [solved]Apache2 has a proxy emdeded !?!? [Mod_proxy]

This is the problem:


if i start apache2 (/etc/init.d/apache2 start ) my computer goes slower.

I've checked all the logs, and ps and this stuff : conclusion :

somehow i have a proxy on the apache2 that each time I start an apache2 it starts a bunch of `httpd -k start`

Then on my /var/log/apache2/access.log apears like this :

Quote:
61.139.105.166 - - [19/May/2008:14:16:14 +0200] "GET http://ad.yieldmanager.com/iframe3?A...t%2findex.html HTTP/1.1" 302 - "http%3A%2F%2Fwww.btflash.net%2Findex.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.40"
61.139.105.166 - - [19/May/2008:14:16:14 +0200] "GET Vueling - Vuelos baratos, ofertas de hoteles, alquiler de coches HTTP/1.1" 20027062 "http%3A%2F%2Fwww.abcflashgames.com%2Findex.ht ml" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.43"
61.139.105.166 - - [19/May/2008:14:16:15 +0200] "GET clickair[[XXX]] HTTP/1.1" 302 - "http%3A%2F%2Fwww.btflash.net%2Findex.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.40"
61.139.105.166 - - [19/May/2008:14:16:16 +0200] "GET clickair HTTP/1.1" 200 833 "http%3A%2F%2Fwww.btflash.net%2Findex.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.40"
61.139.105.166 - - [19/May/2008:14:16:17 +0200] "GET http://ad.yieldmanager.com/iframe3?A...m%2findex.html HTTP/1.1" 302 - "http%3A%2F%2Fwww.qooxo.com%2Findex.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)"
61.139.105.166 - - [19/May/2008:14:16:18 +0200] "GET clickair[[XXX]] HTTP/1.1" 302 - "http%3A%2F%2Fwww.qooxo.com%2Findex.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)"
75.125.215.50 - - [19/May/2008:14:16:03 +0200] "POST Especial Elecciones Municipales 2007 HTTP/1.1" 200 20551 "http://www.elecciones.granadahoy.com/foros/posting.php?mode=newtopic&f=1&sid=8d9dad92115df71a c105a4bdf0037b7b" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
marcos@pcmdevera:~$ tail -f /var/log/apache2/access.log
75.125.215.50 - - [19/May/2008:14:16:03 +0200] "POST P-Winner HTTP/1.1" 200 58017 "http://p-win.jp/pc/bbs/apeboard_plus.cgi?adcode" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
61.139.105.166 - - [19/May/2008:14:16:13 +0200] "GET http://ad.yieldmanager.com/iframe3?A...m%2findex.html HTTP/1.1" 302 - "http%3A%2F%2Fwww.abcflashgames.com%2Findex.ht ml" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.43"
61.139.105.166 - - [19/May/2008:14:16:14 +0200] "GET Vueling - Vuelos baratos, ofertas de hoteles, alquiler de coches HTTP/1.1" 302 - "http%3A%2F%2Fwww.abcflashgames.com%2Findex.ht ml" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.43"
61.139.105.166 - - [19/May/2008:14:16:14 +0200] "GET http://ad.yieldmanager.com/iframe3?A...t%2findex.html HTTP/1.1" 302 - "http%3A%2F%2Fwww.btflash.net%2Findex.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.40"
61.139.105.166 - - [19/May/2008:14:16:14 +0200] "GET Vueling - Vuelos baratos, ofertas de hoteles, alquiler de coches HTTP/1.1" 20027062 "http%3A%2F%2Fwww.abcflashgames.com%2Findex.ht ml" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.43"
61.139.105.166 - - [19/May/2008:14:16:15 +0200] "GET clickair[[XXX]] HTTP/1.1" 302 - "http%3A%2F%2Fwww.btflash.net%2Findex.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.40"
61.139.105.166 - - [19/May/2008:14:16:16 +0200] "GET clickair HTTP/1.1" 200 833 "http%3A%2F%2Fwww.btflash.net%2Findex.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.40"
61.139.105.166 - - [19/May/2008:14:16:17 +0200] "GET http://ad.yieldmanager.com/iframe3?A...m%2findex.html HTTP/1.1" 302 - "http%3A%2F%2Fwww.qooxo.com%2Findex.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)"
61.139.105.166 - - [19/May/2008:14:16:18 +0200] "GET clickair[[XXX]] HTTP/1.1" 302 - "http%3A%2F%2Fwww.qooxo.com%2Findex.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)"
75.125.215.50 - - [19/May/2008:14:16:03 +0200] "POST Especial Elecciones Municipales 2007 HTTP/1.1" 200 20551 "http://www.elecciones.granadahoy.com/foros/posting.php?mode=newtopic&f=1&sid=8d9dad92115df71a c105a4bdf0037b7b" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"


and more , and more.
..........
i've installed, updated and ran rkhunter and i've got nothing. Any ideas?

thanks for reading.

Last edited by permalac; 05-21-2008 at 08:20 PM.
Reply With Quote
  #2 (permalink)  
Old 05-19-2008, 09:31 PM
Junior Member
User
 
Join Date: May 2008
My distro: fedora
Posts: 15
permalac is on a distinguished road
Default

Ok, my own answer

I have de mod_proxy and it needs some security configuration, nothing else. And all the incoming traffic was becouse my mod_proxy appeared on a "open proxy list" , 167 entrances on google.


mod_proxy - Apache HTTP Server


Cheers.
Reply With Quote
  #3 (permalink)  
Old 05-19-2008, 11:19 PM
nixcraft's Avatar
Never say die
User
 
Join Date: Jan 2005
Location: BIOS
My distro: Any distro with shell
Posts: 838
nixcraft is an unknown quantity at this point
Default

Good to know you sorted out. Do you really need mod_proxy? If so it is better allow only connections from localhost or proxy upstream server. I guess you have already configured it.
__________________
Vivek | My personal blog
Linux Evangelist
Play hard stay cool
Reply With Quote
  #4 (permalink)  
Old 05-20-2008, 01:08 PM
Junior Member
User
 
Join Date: May 2008
My distro: fedora
Posts: 15
permalac is on a distinguished road
Default

Quote:
Originally Posted by nixcraft View Post
Good to know you sorted out. Do you really need mod_proxy? If so it is better allow only connections from localhost or proxy upstream server. I guess you have already configured it.

I don't know If I need mod_proxy, on this server there is a plone farm installed by another person who leaved the company long ago.

Then now it's on my hands check this thing and I don't know where to start, any suggestions?

thanks
Reply With Quote
  #5 (permalink)  
Old 05-21-2008, 08:20 PM
Junior Member
User
 
Join Date: May 2008
My distro: fedora
Posts: 15
permalac is on a distinguished road
Default

Here is the link to the apache stuff:

mod_proxy - Apache HTTP Server


and this is my /etc/apache2/mods-enabled/proxy.conf

Quote:
<IfModule mod_proxy.c>
#turning ProxyRequests on and allowing proxying from all may allow
#spammers to use your proxy to send email.

ProxyRequests Off

<Proxy *>
AddDefaultCharset off
Order deny,allow
#Deny from all
#Allow from .example.com
Allow from all
</Proxy>

# Enable/disable the handling of HTTP/1.1 "Via:" headers.
# ("Full" adds the server version; "Block" removes all outgoing Via: header
# Set to one of: Off | On | Full | Block

# ProxyVia On
</IfModule>
(Bold is mine)
Reply With Quote
  #6 (permalink)  
Old 05-21-2008, 08:27 PM
nixcraft's Avatar
Never say die
User
 
Join Date: Jan 2005
Location: BIOS
My distro: Any distro with shell
Posts: 838
nixcraft is an unknown quantity at this point
Default

I don't think so you need proxy server. The simple way to disable it by typing following at a shell prompt:
Code:
a2dismod proxy
/etc/init.d/apache2 force-reload
Many modules are installed by default and not required at all. It appears that your server acting as open proxy. If there is any problem, you can simply turn it on again by typing following two command:
Code:
a2enmod proxy
/etc/init.d/apache2 force-reload
access.log and error.log are important files to find out all errors / warning.
__________________
Vivek | My personal blog
Linux Evangelist
Play hard stay cool
Reply With Quote
  #7 (permalink)  
Old 05-22-2008, 07:25 PM
Junior Member
User
 
Join Date: May 2008
My distro: fedora
Posts: 15
permalac is on a distinguished road
Default

Looks like I need the proxy module enabled .

Quote:
duff:/home/mriera# a2dismod
Which module would you like to disable?
Your choices are: alias auth_basic auth_mysql authn_file authz_default authz_groupfile authz_host authz_user autoindex cgi dav dav_svn dir env mime negotiation php5 proxy_http proxy setenvif ssl status
Module name? proxy
The following modules depend on the module you requested be uninstalled:
proxy_http
Please uninstall these first
duff:/home/mriera# a2dismod
Which module would you like to disable?
Your choices are: alias auth_basic auth_mysql authn_file authz_default authz_groupfile authz_host authz_user autoindex cgi dav dav_svn dir env mime negotiation php5 proxy_http proxy setenvif ssl status
Module name? proxy_http
Module proxy_http disabled; run /etc/init.d/apache2 force-reload to fully disable.
duff:/home/mriera# a2dismod
Which module would you like to disable?
Your choices are: alias auth_basic auth_mysql authn_file authz_default authz_groupfile authz_host authz_user autoindex cgi dav dav_svn dir env mime negotiation php5 proxy setenvif ssl status
Module name? proxy
Module proxy disabled; run /etc/init.d/apache2 force-reload to fully disable.
duff:/home/mriera# /etc/init.d/apache2 force-reload
Forcing reload of web server (apache2)... waiting Syntax error on line 19 of /etc/apache2/sites-enabled/001-isis.mydomain.org:
Invalid command 'ProxyPass', perhaps misspelled or defined by a module not included in the server configuration
failed!
Anyway, nice time I'll use those nice commands.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads

Thread Thread Starter Forum Replies Last Post
php apache2 mysql pansarevai Web servers 1 03-05-2008 12:06 AM
How to start Apache2 automatically at boot satimis Web servers 2 02-03-2008 06:03 PM
Restrict number of simultaneous proxy connections in SQUID proxy pkvmreddy Server configuration tutorials 1 06-15-2007 03:52 PM
VirtualHost Problems on Apache2 rcordeiro Linux software 3 11-08-2006 10:30 PM
debian apache2 cgi-bin location Linux software 1 01-24-2006 06:44 PM


All times are GMT +5.5. The time now is 12:44 AM.


Powered by vBulletin® Version 3.7.2 - Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30