Changeset 1796

Timestamp:

Mar 26, 2011, 9:53:53 AM (13 years ago)

Author:

mitchb

Message:

New mod_original_dst - makes Apache use original destination IP

In a setup where requests have passed through a transparent proxy,
or an iptables REDIRECT rule, the destination address of the traffic
changes.  The netfilter code provides an option (SO_ORIGINAL_DST)
to find out the original destination address.  In an Apache vhost
that is IP-based instead of name-based, you may need the original
address in order to match the vhost.  This module causes Apache
to always see the original, instead of the redirected, destination.

Apache module written by Anders Kaseorg
Method for obtaining the original address pointed out by Quentin Smith
Trivial packaging updates for Scripts by Mitch Berger

Location:

trunk/server

Files:

• common/oursrc/httpdmods/Makefile.in (modified) (1 diff)
• common/oursrc/httpdmods/mod_original_dst.c (added)
• fedora/specs/httpdmods.spec (modified) (3 diffs)

trunk/server/common/oursrc/httpdmods/Makefile.in

@@ -1 +1 @@
 APXS = apxs
 
-MODS = mod_auth_sslcert mod_authz_afsgroup mod_auth_optional mod_vhost_ldap
+MODS = mod_auth_sslcert mod_authz_afsgroup mod_auth_optional mod_vhost_ldap mod_original_dst
 
 all-local: $(patsubst %,.libs/%.so,$(MODS))

trunk/server/fedora/specs/httpdmods.spec

@@ -22 +22 @@
  - module to enable optional authentication <mod_auth_optional>
  - module to get vhosts from LDAP, taken from Debian <mod_vhost_ldap>
+ - module to use the original destination address of a request that
+     has gone through something like a transparent proxy <mod_original_dst>
 See http://scripts.mit.edu/wiki for more information.
 
@@ -37 +39 @@
 install -D .libs/mod_auth_optional.so $RPM_BUILD_ROOT/usr/lib64/httpd/modules/mod_auth_optional.so
 install -D .libs/mod_vhost_ldap.so $RPM_BUILD_ROOT/usr/lib64/httpd/modules/mod_vhost_ldap.so
+install -D .libs/mod_original_dst.so $RPM_BUILD_ROOT/usr/lib64/httpd/modules/mod_original_dst.so
 
 %clean
@@ -47 +50 @@
 /usr/lib64/httpd/modules/mod_auth_optional.so
 /usr/lib64/httpd/modules/mod_vhost_ldap.so
+/usr/lib64/httpd/modules/mod_original_dst.so
 
 %changelog