Re: [squid-users] Inspite squid in front of apache : direct connection from foreign IP address ? how to deny this ?

On 3/28/08, Ric <lists@dvgroup.com> wrote:
>
> On Mar 27, 2008, at 11:37 PM, kk CHN wrote:
>
> > On 3/28/08, Ric <lists@dvgroup.com> wrote:
> >>
> >> On Mar 27, 2008, at 9:57 PM, kk CHN wrote:
> >>
> >>> People: in my server box , I am using squid as http accelerator
> >>> ;setup is as follows
> >>>
> >>> Flow of requests from users should be like this
> >>>
> >>> squid listens on public ip port:80 --->apache(127.0.0.1:80) ---
> >>> RewriteRule for apache to--->zope:8080/plonesite
> >>>
> >>>
> >>>
> >>> Important NOTE : for the last couple of days I am experiencing
> >>> that my plone site on zope :8080 is become not acceesible after 5/6
> >>> hours ,after the services I restarted :
> >>>
> >>> when I run the command # ` sockstat -4p 80 `
> >>> here I can see a specific IP address (164.115.5.2 ) connecting
> >>> directly ande using python2.4 as pasted below .
> >>
> >>
> >>
> >> Umm... Zope is a python process. Are you perchance connecting to the
> >> Zope server directly yourself?
> >
> > Yes I do from my lan machine , by ssh tunnel : but thsi IP address
> > "164.115.5.2 " noway related to ours :
> >
> > I know that a couple of members other than me has admin privileged
> > accounts in the Zopeserver; but last week I changed all their account
> > passwords to make sure only me as the admin to check how the site
> > going down after few hours a service restart.
> >
> > any more info ...?
>
>
>
>
> What then is on ports 65287 and 64313 on your server?

www python2.4 44496 20 tcp4 my_Serverbox_public_IPAddress
:65287 164.115.5.2:80

Here the pid 44496 I greped

$ ps -aux|grep 44496
www 44496 0.0 21.3 445368 442940 ?? S Thu11AM 203:49.39
/usr/local/bin/python2.4 /usr/local/www/Zope28/lib/python/Zope

its conecting to the zope process : So it means some thing going
wrong with my machine? that foreign ip has access through some holes
 of my plone/zope application right?
Received on Fri Mar 28 2008 - 01:35:02 MDT