Topic: Apache 2.2.4 w/ SSL and proxy to IIS6

[chad]

We use Apache as our main web server, however we still have some legacy ASP apps running under IIS6. We are looking to upgrade the apache instance to version 2.2.4. In our test area, we noticed the proxy URL acts in a strange manner. Here is our scenario:

http://www.mysite.com/folder/ - Works as expected (shows the page)
http://www.mysite.com/folder - Works as expected (shows the page)

http://www.mysite.com/folder./ - Shows the list of files!
http://www.mysite.com/folder. - Shows the list of files

The folder should be proxied back to IIS and IIS should take over. Will someone post how my proxy should be set up in the 2.2.4 httpf.conf file?

Thanks for your help!

[chad]

Will someone post on how to stop a directory traversal on any folder that does not have a DirectoryIndex specified?

We are using Apache 2.2.4 and PHP 4.4.4, but will upgrade soon.

Thanks!

[tdonovan]

re: "Will someone post how my proxy should be set up"

It would be more helpful if you post your current proxy directives which aren't working.

Are they like the example in the docs for mod_proxy

ProxyPass /foo http://foo.example.com/bar
ProxyPassReverse /foo http://foo.example.com/bar

without trailing slashes?

The Options Indexes directive controls whether files are listed for a directory if mod_autoindex is loaded.

-tom-

[chad]

Thanks for the reply Tom. I followed this thread: http://www.apachelounge.com/viewtopic.php?t=160&sid=05916f5f8b8eaeaa4cf90c26fddbc683

With the information there and the information on the Apache bug lists
http://issues.apache.org/bugzilla/show_bug.cgi?id=37770

and finally the inability for us to solve the problem, we are going to revert to an older version of Apache.

Is there a compiled version of 2.0.59 or the latest in the 2.0 series on ApacheLounge.com?

Thanks for the help!

Chad