Proxy + X-Forwarded-For

View: New views
3 Messages — Rating Filter:   Alert me  

Proxy + X-Forwarded-For

by Michael Carpenter-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

I'd like to configure gnump3d so that I can use apache to proxy my requests. Instead of opening an extra port on my firewall I would like to just do the following:

ProxyPass /music/ http://localhost:8888/
ProxyPassReverse /music/ http://localhost:8888/

The first problem I ran in to was the links... but it was easy enough to modify the templates to use the correct address.

The problem now is that since the proxy is sending 'Host' as 127.0.0.1, and then sending the original requestor as the X-Forwarded-For header. I don't want to add 127.0.0.1 to my allowed-users, since this would effectively let anyone access the site through the proxy.

Any suggestions?

Michael



_______________________________________________
Gnump3d-users mailing list
Gnump3d-users@...
http://lists.gnu.org/mailman/listinfo/gnump3d-users

Re: Proxy + X-Forwarded-For

by Michael Carpenter-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Not sure if this made it to the list since I sent it before I got the confirmation email...

On Wed, 17 Jun 2009 12:40:35 -0400, Michael Carpenter <mcarpent@...> wrote:

> Hi,
>
> I'd like to configure gnump3d so that I can use apache to proxy my
> requests. Instead of opening an extra port on my firewall I would like to
> just do the following:
>
> ProxyPass /music/ http://localhost:8888/
> ProxyPassReverse /music/ http://localhost:8888/
>
> The first problem I ran in to was the links... but it was easy enough to
> modify the templates to use the correct address.
>
> The problem now is that since the proxy is sending 'Host' as 127.0.0.1,
> and then sending the original requestor as the X-Forwarded-For header. I
> don't want to add 127.0.0.1 to my allowed-users, since this would
> effectively let anyone access the site through the proxy.
>
> Any suggestions?
>
> Michael



_______________________________________________
Gnump3d-users mailing list
Gnump3d-users@...
http://lists.gnu.org/mailman/listinfo/gnump3d-users

Re: Proxy + X-Forwarded-For

by Michael Carpenter-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Well, I managed to hack the gnump3d script and template of choice enough to get this to work.
It's ugly, but it will do. Sadly the script makes a lot of assumptions about serving out of
the root folder which made what I wanted to do more difficult that I really wanted.

On Thu, 18 Jun 2009 8:41:58 -0400, Michael Carpenter <mcarpent@...> wrote:

> Not sure if this made it to the list since I sent it before I got the
> confirmation email...
>
> On Wed, 17 Jun 2009 12:40:35 -0400, Michael Carpenter
> <mcarpent@...> wrote:
>> Hi,
>>
>> I'd like to configure gnump3d so that I can use apache to proxy my
>> requests. Instead of opening an extra port on my firewall I would like
> to
>> just do the following:
>>
>> ProxyPass /music/ http://localhost:8888/
>> ProxyPassReverse /music/ http://localhost:8888/
>>
>> The first problem I ran in to was the links... but it was easy enough to
>> modify the templates to use the correct address.
>>
>> The problem now is that since the proxy is sending 'Host' as 127.0.0.1,
>> and then sending the original requestor as the X-Forwarded-For header. I
>> don't want to add 127.0.0.1 to my allowed-users, since this would
>> effectively let anyone access the site through the proxy.
>>
>> Any suggestions?
>>
>> Michael



_______________________________________________
Gnump3d-users mailing list
Gnump3d-users@...
http://lists.gnu.org/mailman/listinfo/gnump3d-users