How To Protect A Web Server Froma Reverse Proxy Server
Oct 10, 2010
I have a website [URL]. Recently I found out that somebody has set up a reverse proxy with an almost identical url "www.website1.com" in front of my website.
I'm concerned of those users who came to my website through that reverse proxy. Their username and passwords might be logged when they login.
Is there a way for me to have my web server refuse reverse proxy?
For example, I've set up a reverse proxy using squid with the url "www.fakestackoverflow.com" in front of "www.stackoverflow.com". So whenever I type "www.fakestackoverflow.com" in my web browser address bar, I'll be redirected to "www.stackoverflow.com" by the reverse proxy. Then I notice the url in my address bar changed to "www.stackoverflow.com" indicating that I'm no longer going through the reverse proxy.
"www.stackoverflow.com" must've detected that I came to the website from another url and then redirected me to the website through the actual url.
View 8 Replies
Similar Messages:
Feb 21, 2011
We have nearly completed an ASP.NET MVC web application running with SSL in IIS and now find that we must integrate with a third-party product that is supplied as a PHP web app running under lightppd on an alternate port, but still on the same server.
We want to make the integration appear as seamless as possible, so our initial strategy is to do all of the authentication through our application, implement a reverse proxy to expose selected features from the third-party product, and then set-up the third-party product to only be accessible from localhost and (if we can manage it) only from the user our app pool runs as. As a second layer on top of this, we plan on running the third party active content in an IFRAME, so we can surround it with our menus and headers. With the right fonts and colors, hopefully, it won't look grossly out of place.
First question: Is this strategy totally naive? Given the hand we've been dealt, is there a better one?
Second question: What is the best way to implement the reverse proxy? I was thinking of using a routing rule with an Http Handler that invokes our usual authorization just as a controller would and makes the requests to the other site, streaming out the results it receives. Is there something that already does this generically, that I can just hook up and invoke? Maybe some way to specify a controller to handle everything I need to proxy and then use a ViewResult that represents a call to an external URL I construct from the URL I received?
If I can get a few pointers on what to look for, I can trot off to the docs for the details.
View 6 Replies
Jul 19, 2010
We have an issue when our web application runs under reverse proxy.
The reverse proxy change the URL for the website from for example: "http://TestWebApp/" to: "http://ProxyDomain/Test/" when it runs under reverse proxy which is mapped to "http://TestWebApp/" and rout requests to it.
This raise an issue of root relative paths (paths that start with "/" to be relative to the root of the web application i.e. "/Folder1/Test.aspx"). Generally all paths that need to be rendered to client we use ResolveClientUrl method and all is good.
When using Ajax controls and ScriptManager WebResource.axd paths are rendered in script tags as a relative url paths ("/WebResource.axd?blablabla") because the root under reverse proxy is the proxy domain itself the path is useless - the web resouce is not downloaded and the application break.
To fix this we tried to set a Response.Filter in OnPreRender event handler of our base page. In our custom filter we use Regex to search and replace all "/WebResource.axd" occurences with the resolved to client root path using the ResolveClientUrl method of the page. This works great and the web resources are downloaded to client.
But this is not the end of our troubles.
In Ajax requests the response output is fixed as described but when recieved at the client end it is not valid and the partial update fails with Sys.WebForms.PageRequestManagerParserErrorException.
It fails to parse the response because the rendered response have numbers that states the actual count of bytes per rendered component (which includes the script tags referencing the WebResource.axd). The client reciever validates the recieved response according to the numbers, but, our filter altered the response so the numbers are not correct and the response validation fails.
We can try and code a smart filter that parse the response and recalculate the numbers according to the ammount of paths fixed, but I hope there is an elegant and better solution for this.
View 3 Replies
Feb 6, 2011
How to write a webservice to call the proxy server through IIS webserver?
View 2 Replies
Dec 6, 2010
I have this file saved in the server. I do not want anyone to download with out authentication. How do I do that?
View 3 Replies
Apr 21, 2010
I am currently using C# and the webClient class to downloading and uploading images, data, see code below
[code]....
This works fine for a direct internet connection, but fails through a proxy server.
And giving the error "The remote server returned an error: (407) Proxy Authentication Required."
I have tried using the default credentials in the credentials property
[code]....
View 2 Replies
Sep 8, 2010
I have started having problems with our asp.net webform applications running behind a proxy since the user base have upgraded to IE7. Some postbacks seem to drop out and at times it is difficult to make controls on a page raise an event. It appears to be intermittant and I have been told there are issues around using IE7 behind a proxy with post requests. Is this the case and what are the options? Rewite in MVC? Does the issue of post requests behind a proxy remain in IE8?
View 3 Replies
Feb 10, 2010
We are using 2 ISA proxy servers in front of our webserver and are getting intermittant Ajax errors in our application.
Our web logs indicate that there are 407 errors occurring during the requests.
When other users hit the webserver directly this issue does not occurr and this is also not an issue in IE8 but is in IE7.
The error dialog has Sys.WebForms.PageRequestManagerParserErrorException and the details say "error parsing near '<!DOCTYPE html P'
View 1 Replies
May 16, 2013
In an article I have read "A web browser can be named as proxy server. As safari, chrome, mozilla".But proxy server is like a an intermediatary btween the clent and server know?
What is actually the difference between the two?
View 1 Replies
Mar 14, 2014
In my application i uploaded PDF files and it is stored in particular path in application folder.
but the requirement is that files should not be delete or modify by any user like user privileges in windows.How to do this in asp.net ?
View 1 Replies
Jun 23, 2010
our web application should be hosted under proxy server, for that we had to change our URL to be relative.
we changed all the url's but then we saw that web resources that are embeded in the .net dll's are being written to the page with absolute path, start with "/" for example:
[Code]....
how can we change it? how can we set the web resource to be relative like this "../webresource.axd"
View 3 Replies
May 4, 2010
Well I would like to get understanding on sql server security. how to map windows user eg:'srm123' to sql server agent so that user when logins in sql server can also work with sql server agent.bydefault u can not see sql server aqent icon in ssms in userlogin.what is a role of a proxy and credentials how to map them with windows user to workwith jobs and alerts.
View 1 Replies
Aug 18, 2010
I am trying to deploy through webmatrix but my system Proxy server configuration is not being used. I assume that webmatrix would detect the proxy server settings and use that for the msdeploy calls under the hood. Can anyone confirm this is a know issue?
View 1 Replies
Dec 8, 2010
The remote server returned an error: (407) Proxy Authentication Required.I get it when I use the GetReponse() method in WebRequest Dim request As WebRequest = WebRequest.Create(getNextURL()) Dim httpResponse As HttpWebResponse = CType(request.GetResponse(), HttpWebResponse)
View 1 Replies
Jan 12, 2010
I am trying to make a web request programmatically. When i submit the request through the browser it seems to work fine but when i programmatically submit the request it comes back with this error message "Unable to connect to the remote server"
Below is the code i am using to executing the command,
[Code]....
[Code]....
I assume the reason why i am getting the error message is because the proxy server has not been set programmatically. Can somebody tell me how i can get the proxy server and set it programmatically?
View 5 Replies
Nov 17, 2010
I need to simulate a proxy server to test mobile device c# application.
Is there a way to do this? how should I do this.
View 2 Replies
Mar 11, 2011
the site normally works fine in all popular browsers including firefox, chrome, safari and ie.
but doesn't work in ie 8 when it's redirected via a proxy server and it gives an error saying
"Message: Sys.WebForms.PageRequestManagerParserErrorException: The message received from the server could not be parsed. Common causes for this error are when the response is modified by calls to Response.Write(), response filters, HttpModules, or server trace is enabled. Details: Error parsing near 'DOCTYPE html PUB'."
View 1 Replies
Feb 23, 2011
Some of my users are getting the following error
HTTP 502 Proxy Error - The size of the response header is too large. Contact your ISA server administrator. (12216) Internet Security and Acceleration Server
I am guessing it has to do with the size of hidden "__ViewState" tag in my ASP.NET pages.
I also realize that this is restriction imposed to by IT on the users end and I have no contol over it.
I disabled ViewState on all the controls in my ASP.NET pages. However, __ViewState is still generated very large (as always) to persist control-state (e.g. checkbox, radiobutton, etc.)
View 2 Replies
Apr 15, 2010
How to insert data from local SQL server to remote SQL server (without using linked server) like below?
insert * into [remote server].[northwind].orders
from [local server].[northwind].orders
View 4 Replies
Mar 7, 2011
I have a site that is running on a Windows Server 2008 machine with IIS 7.0, when I try to open it with Visual Web Developer 2010, it says the following:
error: unable to open site: ... The Web server does not appear to have FrontPage Server Extensions installed.
Looking on the server Frontpage Extensions 2002 are installed, so what could be wrong?
The thing is, I used to be able to open the project and work on it, etc...
Open Website -> Remote Site -> Enter remote site name -> tries to open & error above!
View 1 Replies
Feb 9, 2010
I have to programmatically import a table from a database "A" in Sql Server 2000 to a database "B" in another server 2005.
View 1 Replies
Aug 13, 2010
This issues has been driving me nuts. I am trying to follow the tutorial on [URL] I am trying to connect to a database in Microsoft SQL Server 2008. The way I do this is by right clicking on the "Data Connections" > Add Connection. Afterwards the Add Connection window comes up, I make sure my data source is "Microsoft SQL Server (SqlClient). And, I choose a server name; the only server I can choose is DomainSQLEXPRESS. The issue is when I go down to the "Select or enter a database name" drop down box, I do not see my database listed. I have also made sure in the SQL Server Management Studio that I have given my user all the privileges for the database. I know my explanation is kind of vague, but would anyone know the reason why I would not see my database?
View 3 Replies
Jan 20, 2011
I have SQL Server 2005 in my computer.I am using SQL Server 2005 for Development.
I can connect to my local & "COMPAQSQLEXPRESS" Server.
But while connecting to Remote Server i m getting the following error
TITLE: Connect to Server
------------------------------
Cannot connect to x.x.xxx.xx.
------------------------------
ADDITIONAL INFORMATION:
This version of Microsoft SQL Server Management Studio can only be used to connect to SQL Server 2000 and SQL Server 2005 servers. (ConnectionDlg)
------------------------------
BUTTONS:OK
-----------------------------
View 4 Replies
Nov 2, 2010
This is probably an easy one, but can I use SQL Server Management Studio Express to work on a regular SQL Server database?
View 2 Replies
Jan 14, 2011
I want to convert sql server 2000 database into sql server 2005 database. I am using sql server 2005 express.
I am trying by taking backup/Restore method, but it not work.
View 1 Replies
