BUG: Using SJSWPS as both forward & reverse proxy

Hello,

I think this is a bug but I will ask here too. It may be that a single instance of a proxy server cannot function as a forward & a reverse proxy simultaneously.

I've tried this on 4.04 and 4.05 releases many times and it's always the same. Note that my default ACL is set to Deny all but with Continue enabled. There are additional ACL entries for specific URLs. These are working when its set up as a forward proxy (i.e. IE/Firefox proxy refers to this host).

I now go an add a virtual multihost entry for a URL which is allowed via the forward functionality. I then try to access it via IE which is using the proxy host as a forward host. The following error occurs:

[23/May/2007:12:53:14] security (10594): for host 192.168.0.10 trying to GET http://directory.myhost.com/, acl-state reports: HTTP5191: access of http://directory.myhost.comhttp://directory.myhost.com/ denied by ACL default directive 1

I can understand why it's trying to use the default ACL. What I don't understand is why it believes it's trying to look up "http://directory.myhost.comhttp://directory.myhost.com/" verses just "http://directory.myhost.com/"

Any ideas?

[1198 byte] By [Kobara] at [2007-11-27 5:10:57]
# 1
I'm not sure what you meant by "I now go an add a virtual multihost entry for a URL which is allowed via the forward functionality. ". I suspect your configurationis invalid. Can you post your obj.conf?
motora at 2007-7-12 10:31:13 > top of Java-index,Web & Directory Servers,Web Servers...
# 2

Or maybe -

Assuming you have such a configuration in your obj.conf:

NameTrans fn="virt-map" host-regex="host1(|.domain1)(|:port)" to-prefix="http://host2.domain2"

You won't get the sort of error you mentioned unless you are sending

in a request that looks like, say:

GET http://host2.domain2 HTTP/1.1

Host: host1.domain1

where the value of the "host" header does not match the host/domain part

of the URL.

motora at 2007-7-12 10:31:13 > top of Java-index,Web & Directory Servers,Web Servers...
# 3

Hi,

What I mean is that the proxy is functioning as a forward and a reverse proxy using virtual multi hosting.

Under the ACLs I have set both default rules to Deny but have the Continue checkbox enabled. I then add a specific rule for internal.mydomain.com to allow. This works up until I start adding the reverse entries.

I then add a virtual multi-host entry for internal.mydomain.com and restart the proxy instance.

Now when I try to access internal.mydomain.com either via the forward or the reverse proxy method, I get that entry in the error log with URL listed twice.

Kobara at 2007-7-12 10:31:13 > top of Java-index,Web & Directory Servers,Web Servers...