Mark Derricutt's Disturbing Thoughts

My Top Tags

                                       

My Jaiku

The BGGA myth - Functional Java | Google Groups

Wednesday, 20 August 2008 7:33 A GMT+12

Spock's Beard – On A Perfect Day (live)

Wednesday, 20 August 2008 5:57 A GMT+12

Ola Bini: JtestR 0.3.1 Released

Tuesday, 19 August 2008 10:00 P GMT+12

Enslaved – Violet Dawning

Tuesday, 19 August 2008 6:14 A GMT+12

Distributed Messaging with Jetlang and Terracotta

Monday, 18 August 2008 10:17 P GMT+12

The Music of 2008 - week 33

Monday, 18 August 2008 8:57 A GMT+12

There Can Be Only One

Monday, 18 August 2008 8:10 A GMT+12

Silent Force – Point Of No Return

Monday, 18 August 2008 6:30 A GMT+12

In Relation To...  Hibernate Core 3.3.0 goes GA

Saturday, 16 August 2008 7:03 P GMT+12

Search Box

 

mod_proxy considered harmfull

posted Tuesday, 12 July 2005
I got an email the other day from my mum saying "havn't had any email for awhile, any problems?" and my first thought was that she was just doing the concerned mom thing, so I replied saying I'd just been really busy with work. No response..... then today I got another email "we're still not getting ANY email" - mmm, that sounds more like a problem.

A quick look at my postfix logs showed that yes, mail to mums ISP wasn't being delivered, the ISP was just silently dropping connections from my IP. Other machines on the network were fine... mmmmm. A quick check online found that out of 120 blocklists, I appeared on 1.

Following up the Distributed sender black list I see I was submitted/entered last week for HTTP POST/GET relaying.

Awhile ago I'd been playing with mod_proxy on my webserver, and ended up removing the references to the proxy in the vhosts, but leaving mod_proxy enabled. Without any config, it seems ANYTHING is proxied.

The Apache security list has a post on working around this.

tags:            

links: digg this    del.icio.us    technorati    reddit