Very simple apache question

Paul_Melson@keykertusa.com Paul_Melson@keykertusa.com
Wed, 17 Oct 2001 12:09:55 -0400


>...
>LoadModule proxy_module      modules/libproxy.so
>...
>AddModule mod_proxy.c
>...
><IfModule mod_proxy.c>
>  ProxyRequests on
>  <Directory proxy:*>
>    Order deny,allow
>    Deny from notkpm-net.com
>    Allow from kpm-net.com    (I've even tried all)
>  </Directory>
>  ProxyVia On
>  CacheRoot /var/httpd/cache
>  CacheSize 50000
>  CacheGcInterval 4
>  CacheMaxEmpire 24
>  CacheLastModifiedFactor 0.1
>  CacheDefaultExpire 1
><IfModule>

What about changing to 'Order deny,allow' ?  Beyond that, the only thing
that occurs to me is to make sure that the Apache host can resolve clients.
You may have to switch to IP address ranges for your allow/deny rules if it
can't properly perform reverse look-ups.

On a side note, I'd like to take this opportunity to insert a shameless
plug for the Squid proxy-cache.  If you're running Mandrake, you've got the
RPMs on CD at least, if it's not already installed.  Squid is faster and
more flexible than Apache w/ mod_proxy.  If you're dedicating a system to
managing web traffic, you may find that Squid offers you a lot of features
you'd like to have in a proxy system.  It scales well, too.  If you want a
simple pass-through cache with some basic ACLs to restrict use to your
company, you're pretty much set out-of-the-box.  But if you'd like to
integrate it into an existing LDAP tree or Windows domain, restrict URLs,
services, and bandwidth by group, source, destination, or time/date, then
you can do that too.

PaulM