更新：

Question 1

您返回了 404 和 403（均拒绝各种类型），所以我不担心。我猜您有一个过于乐观的虚拟主机，它捕获了所有流量并试图利用它做些什么。

如果你对其中任何一个返回 2xx 而无法解释它，那就开始担心吧:)

Answer

您返回了 404 和 403（均拒绝各种类型），所以我不担心。我猜您有一个过于乐观的虚拟主机，它捕获了所有流量并试图利用它做些什么。

如果你对其中任何一个返回 2xx 而无法解释它，那就开始担心吧:)

Question 2

您还可以阻止除内部子网之外的所有代理请求，这是由http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxy和http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#access。

You can control who can access your proxy via the <Proxy>  control block as in the following example:

<Proxy *>
Order Deny,Allow
Deny from all
Allow from 192.168.0
</Proxy>

For more information on access control directives, see mod_authz_host.

Strictly limiting access is essential if you are using a forward proxy (using the ProxyRequests directive). Otherwise, your server can be used by any client to access arbitrary hosts while hiding his or her true identity. This is dangerous both for your network and for the Internet at large. When using a reverse proxy (using the ProxyPass directive with ProxyRequests Off), access control is less critical because clients can only contact the hosts that you have specifically configured.

我相信这将导致客户端出现“403 Forbidden”响应，这比“404 Not Found”稍微不太安全，因为“403 Forbidden”暗示某些东西仍然存在，但是被禁止了。

Answer

您还可以阻止除内部子网之外的所有代理请求，这是由http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxy和http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#access。

You can control who can access your proxy via the <Proxy>  control block as in the following example:

<Proxy *>
Order Deny,Allow
Deny from all
Allow from 192.168.0
</Proxy>

For more information on access control directives, see mod_authz_host.

Strictly limiting access is essential if you are using a forward proxy (using the ProxyRequests directive). Otherwise, your server can be used by any client to access arbitrary hosts while hiding his or her true identity. This is dangerous both for your network and for the Internet at large. When using a reverse proxy (using the ProxyPass directive with ProxyRequests Off), access control is less critical because clients can only contact the hosts that you have specifically configured.

我相信这将导致客户端出现“403 Forbidden”响应，这比“404 Not Found”稍微不太安全，因为“403 Forbidden”暗示某些东西仍然存在，但是被禁止了。

Question 3

您应该只从少数 IP 地址收到代理请求。对这些地址设置防火墙。至少要阻止对 HTTP 的访问，但我会将它们全部设置防火墙。

如果代理是一个模块，则禁用该模块。在 Linux 上，您可以使用 a2dismod 禁用该模块。

Answer

您应该只从少数 IP 地址收到代理请求。对这些地址设置防火墙。至少要阻止对 HTTP 的访问，但我会将它们全部设置防火墙。

如果代理是一个模块，则禁用该模块。在 Linux 上，您可以使用 a2dismod 禁用该模块。

更新：

更新：

答案1

答案2

答案3

相关内容