#19113 [Opn]: HTTP status 200 returned on HTTP CONNECT when mod_proxy not in use

ID: 19113 User updated by: php@jdc.parodius.com Reported By: php@jdc.parodius.com Status: Open Bug Type: Apache related Operating System: FreeBSD 4.6.2 PHP Version: 4.2.2 New Comment: Yes; jon@steadyflow.net is correct. My previous comment ("bug possibly fixed") was in haste. The problem still exists in 4.3.0. Please, someone in the PHP crew investigate this fully, as it's becoming more and more of an issue and seems to be affecting essentially everyone who uses PHP and Apache. Previous Comments: ------------------------------------------------------------------------ [2003-01-03 23:39:16] jon@steadyflow.net Problem still exists in PHP 4.3.0, i'm running Apache 1.3.27 on FreeBSD. ------------------------------------------------------------------------ [2003-01-02 06:32:47] php@jdc.parodius.com I apologise for not being able to test 4.3.0 or any of the "snap" releases prior to now -- we use FreeBSD, and we rely on the FreeBSD port of mod_php4. The port author has not upgraded to 4.3.0 yet, and therefore we were stuck using 4.2.3 until earlier this evening when I removed the port and went with the old method of installing off source manually. It seems that this problem may in fact be fixed in 4.3.0. The problem documented no longer appears. ------------------------------------------------------------------------ [2002-12-28 01:00:02] php-bugs@lists.php.net No feedback was provided for this bug for over 2 weeks, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". ------------------------------------------------------------------------ [2002-12-18 07:09:42] uhlar@fantomas.sk Sorry, you don't understand the problem. The problem is that apache returns "HTTP 200 OK" on CONNECT request, but does NOT really connect to specified addrress. If it is possible to connect through your server to outside, then it's problem of your misconfigured proxy. ------------------------------------------------------------------------ [2002-12-16 13:54:03] pbwebguy@hotmail.com This bug is VERY serious. Our web servers have be attacked and used for relaying SPAM. Spammers are using the CONNECT command to proxy to open relay servers masking their IP addresses with ours. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/19113 -- Edit this bug report at http://bugs.php.net/?id=19113&edit=1