OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [discuss] Apache2 proxy open relay

From: Matti Airas (mairasiki.fi)
Date: Wed Oct 22 2003 - 03:12:42 CDT


On Tue, 2003-10-21 at 21:05, Vincent Danen wrote:

> I can't duplicate this because apache chokes when I do the HELO part. But,
> can you do this for me and let me know if it corrects the problem?
>
> Edit /etc/httpd/conf.d/30_mod_proxy.conf and after ProxyRequests On put:
>
> <Proxy *>
> Order deny,allow
> Deny from all
> </Proxy>

(Doh. I didn't even notice the conf.d directory.) Anyway, that indeed
does the trick. Now I get a proper 403 Forbidden reply.

I suppose it might be a good idea to change Mandrake default
configuration accordingly as well... :-/

Below is the test message I used. I just telnetted to port 80 and pasted
the message there. First the mail got through just fine, but after
changing apache configuration I got the error.

-- cut --
POST http://130.233.32.17:25/ HTTP/1.1
Content-type: application/octet-stream
Content-length: 220
Host: 130.233.32.17

HELO stop.hut.fi
MAIL FROM: mairasacoustics.hut.fi
RCPT TO: mairasiki.fi
DATA
To: <mairasiki.fi>
From:mairasacoustics.hut.fi
Subject: spam test
Date: Mon, 20 Oct 2003 01:32:55 -0800

Hello, world.
.
QUIT
-- cut --

Cheers,

m.