The contract type is `' with a response time of 3 business hours.
        A first analysis should be sent before: Fri Apr 18 11:00:01 PDT 1997


>Number:         414
>Category:       mod_access
>Synopsis:       Proxy access protection does not work fully
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    apache (Apache HTTP Project)
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Fri Apr 18 02:40:01 1997
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.2b8
>Environment:
SunOS egypt 5.5.1 Generic_103640-06 sun4u sparc SUNW,Ultra-1
Compiled with gcc version 2.7.0
>Description:
Proxy access protection only works if the requested URL ends with a "/".

i.e. A request for http://www.somewhere.com/index.html will succeed.
>How-To-Repeat:
Configure proxy protection as follows:

<Limit GET>
order deny,allow
deny from all
allow from machine-a machine-b
</Limit>
</Directory>

Use machine-c and access http://www.somewhere.com/index.html via the proxy.
>Fix:
Not yet, sorry
>Audit-Trail:
>Unformatted:


Reply via email to