<Directory proxy:*> order deny,allow deny from \[machines you'd like *not* to allow by IP address or name\] allow from \[machines you'd like to allow by IP address or name\] </Directory>
A <Files> block will also work, and is the only method known to work for all possible URLs in Apache versions earlier than 1.2b10.
application/octet-stream bin dms lha lzh exe class tgz taz
ProxyBlock
or NoCache
directives, hostnames' IP addresses are looked up and cached during
startup for later match test. This may take a few seconds (or more)
depending on the speed with which the hostname lookups occur.
SOCKS4=yes
in
your Configuration file, and follow the instructions
there. SOCKS5 capability can be added in a similar way (there's no
SOCKS5
rule yet), so use the
EXTRA_LDFLAGS
definition, or build Apache normally and run
it with the runsocks wrapper provided with SOCKS5, if your
OS supports dynamically linked libraries.
Some users have reported problems when using SOCKS version 4.2 on Solaris. The problem was solved by upgrading to SOCKS 4.3.
Remember that you'll also have to grant access to your Apache proxy machine by permitting connections on the appropriate ports in your SOCKS daemon's configuration.
An Apache proxy server situated in an intranet needs to forward external requests through the company's firewall. However, when it has to access resources within the intranet, it can bypass the firewall when accessing hosts. The NoProxy directive is useful for specifying which hosts belong to the intranet and should be accessed directly.
Users within an intranet tend to omit the local domain name from their WWW requests, thus requesting "http://somehost/" instead of "http://somehost.my.dom.ain/". Some commercial proxy servers let them get away with this and simply serve the request, implying a configured local domain. When the ProxyDomain directive is used and the server is configured for proxy service, Apache can return a redirect response and send the client to the correct, fully qualified, server address. This is the preferred method since the user's bookmark files will then contain fully qualified hosts.