2

I would like to apply this answer to my own server.

However, it will not be an internal server, so I'm concerned about security. The linked question tells that the mod_proxy can be easily misconfigured. What is so dangerous ? And what's the 'good' way to configure it ?

Community
  • 1
Nison Maël
  • 119
  • 6

1 Answers1

3

I think you can find a pretty good explanation of the security problems in the official mod_proxy documentation. Generally speaking, you will definitely want to limit either the allowed clients (running a forward proxy) or the allowed target hosts (running a reverse proxy).

Otherwise, you would allow arbitrary clients to request arbitrary resources through your host.

Adrian Heine
  • 328
  • 4
  • 22