Received: (qmail 18682 invoked by uid 2012); 15 Dec 1998 20:39:19 -0000
Message-Id: <19981215203919.18681.qmail@hyperreal.org>
Date: 15 Dec 1998 20:39:19 -0000
From: Ikram Mohammed <infospec@tstt.net.tt>
Reply-To: infospec@tstt.net.tt
To: apbugs@hyperreal.org
Subject: controlling access to who can use the proxy via <Directory proxy:*> fails
X-Send-Pr-Version: 3.2

>Number:         3538
>Category:       mod_proxy
>Synopsis:       controlling access to who can use the proxy via <Directory proxy:*> fails
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    apache
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Dec 15 12:40:00 PST 1998
>Closed-Date:    Fri Sep 29 22:49:17 PDT 2000
>Last-Modified:  Fri Sep 29 22:49:17 PDT 2000
>Originator:     infospec@tstt.net.tt
>Release:        1.3.3 Win32
>Organization:
>Environment:
Windows NT Server 4.0 patched to Service Release 4
>Description:
The description given in mod_proxy to allow who has access to the proxy server
fails to work ... it is completely open and cannot deny access to any machines
using IP dotted notation
>How-To-Repeat:
the default setup as stated in the docs for mod_proxy can be tested and fails!
>Fix:
nope ... but I hope U can
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open-feedback
State-Changed-By: wrowe
State-Changed-When: Sun Jul 16 19:39:18 PDT 2000
State-Changed-Why:

Please try the proxy module in the forthcoming (soon to be
announced) release 1.3.13 of Apache, and see if you still
have the ip address restriction problem.

Release-Changed-From-To: Win32 1.3.3-1.3.3 Win32 
Release-Changed-By: wrowe
Release-Changed-When: Sun Jul 16 19:39:18 PDT 2000
State-Changed-From-To: feedback-closed
State-Changed-By: wrowe
State-Changed-When: Fri Sep 29 22:49:17 PDT 2000
State-Changed-Why:
[This is a standard response.]
No response from submitter, assuming issue has been resolved.
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <apbugs@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]