How To Protect A Web Server Froma Reverse Proxy Server

Oct 10, 2010

I have a website [URL]. Recently I found out that somebody has set up a reverse proxy with an almost identical url "www.website1.com" in front of my website.

I'm concerned of those users who came to my website through that reverse proxy. Their username and passwords might be logged when they login.

Is there a way for me to have my web server refuse reverse proxy?

For example, I've set up a reverse proxy using squid with the url "www.fakestackoverflow.com" in front of "www.stackoverflow.com". So whenever I type "www.fakestackoverflow.com" in my web browser address bar, I'll be redirected to "www.stackoverflow.com" by the reverse proxy. Then I notice the url in my address bar changed to "www.stackoverflow.com" indicating that I'm no longer going through the reverse proxy.

"www.stackoverflow.com" must've detected that I came to the website from another url and then redirected me to the website through the actual url.

View 8 Replies


Similar Messages:

MVC :: Reverse Proxy And Authentication?

Feb 21, 2011

We have nearly completed an ASP.NET MVC web application running with SSL in IIS and now find that we must integrate with a third-party product that is supplied as a PHP web app running under lightppd on an alternate port, but still on the same server.

We want to make the integration appear as seamless as possible, so our initial strategy is to do all of the authentication through our application, implement a reverse proxy to expose selected features from the third-party product, and then set-up the third-party product to only be accessible from localhost and (if we can manage it) only from the user our app pool runs as. As a second layer on top of this, we plan on running the third party active content in an IFRAME, so we can surround it with our menus and headers. With the right fonts and colors, hopefully, it won't look grossly out of place.

First question: Is this strategy totally naive? Given the hand we've been dealt, is there a better one?

Second question: What is the best way to implement the reverse proxy? I was thinking of using a routing rule with an Http Handler that invokes our usual authorization just as a controller would and makes the requests to the other site, streaming out the results it receives. Is there something that already does this generically, that I can just hook up and invoke? Maybe some way to specify a controller to handle everything I need to proxy and then use a ViewResult that represents a call to an external URL I construct from the URL I received?

If I can get a few pointers on what to look for, I can trot off to the docs for the details.

View 6 Replies

AJAX :: WebResource Fail To Work Under Reverse Proxy?

Jul 19, 2010

We have an issue when our web application runs under reverse proxy.

The reverse proxy change the URL for the website from for example: "http://TestWebApp/" to: "http://ProxyDomain/Test/" when it runs under reverse proxy which is mapped to "http://TestWebApp/" and rout requests to it.

This raise an issue of root relative paths (paths that start with "/" to be relative to the root of the web application i.e. "/Folder1/Test.aspx"). Generally all paths that need to be rendered to client we use ResolveClientUrl method and all is good.

When using Ajax controls and ScriptManager WebResource.axd paths are rendered in script tags as a relative url paths ("/WebResource.axd?blablabla") because the root under reverse proxy is the proxy domain itself the path is useless - the web resouce is not downloaded and the application break.

To fix this we tried to set a Response.Filter in OnPreRender event handler of our base page. In our custom filter we use Regex to search and replace all "/WebResource.axd" occurences with the resolved to client root path using the ResolveClientUrl method of the page. This works great and the web resources are downloaded to client.

But this is not the end of our troubles.

In Ajax requests the response output is fixed as described but when recieved at the client end it is not valid and the partial update fails with Sys.WebForms.PageRequestManagerParserErrorException.

It fails to parse the response because the rendered response have numbers that states the actual count of bytes per rendered component (which includes the script tags referencing the WebResource.axd). The client reciever validates the recieved response according to the numbers, but, our filter altered the response so the numbers are not correct and the response validation fails.

We can try and code a smart filter that parse the response and recalculate the numbers according to the ammount of paths fixed, but I hope there is an elegant and better solution for this.

View 3 Replies

WCF / ASMX :: Writing A Web Service To Call The Proxy Server From The IIS Web Server In Vb.net?

Feb 6, 2011

How to write a webservice to call the proxy server through IIS webserver?

View 2 Replies

Security :: Protect A File From Getting Downloaded From Server?

Dec 6, 2010

I have this file saved in the server. I do not want anyone to download with out authentication. How do I do that?

View 3 Replies

C# Webclient - Accessing Web Through Proxy Server?

Apr 21, 2010

I am currently using C# and the webClient class to downloading and uploading images, data, see code below

[code]....

This works fine for a direct internet connection, but fails through a proxy server.

And giving the error "The remote server returned an error: (407) Proxy Authentication Required."

I have tried using the default credentials in the credentials property

[code]....

View 2 Replies

Web Forms :: IE 7 With Webforms And Proxy Server?

Sep 8, 2010

I have started having problems with our asp.net webform applications running behind a proxy since the user base have upgraded to IE7. Some postbacks seem to drop out and at times it is difficult to make controls on a page raise an event. It appears to be intermittant and I have been told there are issues around using IE7 behind a proxy with post requests. Is this the case and what are the options? Rewite in MVC? Does the issue of post requests behind a proxy remain in IE8?

View 3 Replies

AJAX :: ISA Proxy Server Returning 407 For Request?

Feb 10, 2010

We are using 2 ISA proxy servers in front of our webserver and are getting intermittant Ajax errors in our application.

Our web logs indicate that there are 407 errors occurring during the requests.

When other users hit the webserver directly this issue does not occurr and this is also not an issue in IE8 but is in IE7.

The error dialog has Sys.WebForms.PageRequestManagerParserErrorException and the details say "error parsing near '<!DOCTYPE html P'

View 1 Replies

IIS Configuration :: Web Browser Can Be Named As Proxy Server

May 16, 2013

In an article I have read "A web browser can be named as proxy server. As safari, chrome, mozilla".But proxy server is like a an intermediatary btween the clent and server know?

What is actually the difference between the two?

View 1 Replies

IIS Configuration :: How To Protect Files And Folders On Server So That No One Can Access Directly

Mar 14, 2014

In my application i uploaded PDF files and it is stored in particular path in application folder.

but the requirement is that files should not be delete or modify by any user like user privileges in windows.How to do this in asp.net ?

View 1 Replies

Configuration :: Web Application Under Proxy Server - Relative URLs?

Jun 23, 2010

our web application should be hosted under proxy server, for that we had to change our URL to be relative.

we changed all the url's but then we saw that web resources that are embeded in the .net dll's are being written to the page with absolute path, start with "/" for example:

[Code]....

how can we change it? how can we set the web resource to be relative like this "../webresource.axd"

View 3 Replies

DataSource Controls :: Sql Server Agent Proxy Account?

May 4, 2010

Well I would like to get understanding on sql server security. how to map windows user eg:'srm123' to sql server agent so that user when logins in sql server can also work with sql server agent.bydefault u can not see sql server aqent icon in ssms in userlogin.what is a role of a proxy and credentials how to map them with windows user to workwith jobs and alerts.

View 1 Replies

WebMatrix :: Deploying To Msdeploy Does Not Support A Proxy Server?

Aug 18, 2010

I am trying to deploy through webmatrix but my system Proxy server configuration is not being used. I assume that webmatrix would detect the proxy server settings and use that for the msdeploy calls under the hood. Can anyone confirm this is a know issue?

View 1 Replies

Remote Server Returned An Error, Proxy Authentication Required?

Dec 8, 2010

The remote server returned an error: (407) Proxy Authentication Required.I get it when I use the GetReponse() method in WebRequest Dim request As WebRequest = WebRequest.Create(getNextURL()) Dim httpResponse As HttpWebResponse = CType(request.GetResponse(), HttpWebResponse)

View 1 Replies

Web Forms :: How To Programmatically Retrieve The Proxy Server To Submit A Web Request

Jan 12, 2010

I am trying to make a web request programmatically. When i submit the request through the browser it seems to work fine but when i programmatically submit the request it comes back with this error message "Unable to connect to the remote server"

Below is the code i am using to executing the command,

[Code]....

[Code]....

I assume the reason why i am getting the error message is because the proxy server has not been set programmatically. Can somebody tell me how i can get the proxy server and set it programmatically?

View 5 Replies

Mobiles :: Simulate A Proxy Server To Test Mobile Device C# Application

Nov 17, 2010

I need to simulate a proxy server to test mobile device c# application.

Is there a way to do this? how should I do this.

View 2 Replies

C# - Update Panel Stops Working In IE 8 When Site Is Redirected Via A Proxy Server?

Mar 11, 2011

the site normally works fine in all popular browsers including firefox, chrome, safari and ie.

but doesn't work in ie 8 when it's redirected via a proxy server and it gives an error saying

"Message: Sys.WebForms.PageRequestManagerParserErrorException: The message received from the server could not be parsed. Common causes for this error are when the response is modified by calls to Response.Write(), response filters, HttpModules, or server trace is enabled. Details: Error parsing near 'DOCTYPE html PUB'."

View 1 Replies

C# - HTTP 502 Proxy Error - The Size Of The Response Header Is Too Large. Contact Your ISA Server Administrator. (12216)

Feb 23, 2011

Some of my users are getting the following error

HTTP 502 Proxy Error - The size of the response header is too large. Contact your ISA server administrator. (12216) Internet Security and Acceleration Server

I am guessing it has to do with the size of hidden "__ViewState" tag in my ASP.NET pages.

I also realize that this is restriction imposed to by IT on the users end and I have no contol over it.

I disabled ViewState on all the controls in my ASP.NET pages. However, __ViewState is still generated very large (as always) to persist control-state (e.g. checkbox, radiobutton, etc.)

View 2 Replies

DataSource Controls :: How To Insert Data From Local SQL Server To Remote SQL Server (without Using Linked Server)

Apr 15, 2010

How to insert data from local SQL server to remote SQL server (without using linked server) like below?

insert * into [remote server].[northwind].orders
from [local server].[northwind].orders

View 4 Replies

Website Opening From Server Produces Error/The Web Server Does Not Appear To Have FrontPage Server Extensions Installed

Mar 7, 2011

I have a site that is running on a Windows Server 2008 machine with IIS 7.0, when I try to open it with Visual Web Developer 2010, it says the following:

error: unable to open site: ... The Web server does not appear to have FrontPage Server Extensions installed.

Looking on the server Frontpage Extensions 2002 are installed, so what could be wrong?

The thing is, I used to be able to open the project and work on it, etc...

Open Website -> Remote Site -> Enter remote site name -> tries to open & error above!

View 1 Replies

DataSource Controls :: Import A Table From Sql Server 2000 To Another Server Qsl Server 2005?

Feb 9, 2010

I have to programmatically import a table from a database "A" in Sql Server 2000 to a database "B" in another server 2005.

View 1 Replies

SQL Server :: Unable To Add A Connection To Database (SQL Server 2008) Using The Server Explorer

Aug 13, 2010

This issues has been driving me nuts. I am trying to follow the tutorial on [URL] I am trying to connect to a database in Microsoft SQL Server 2008. The way I do this is by right clicking on the "Data Connections" > Add Connection. Afterwards the Add Connection window comes up, I make sure my data source is "Microsoft SQL Server (SqlClient). And, I choose a server name; the only server I can choose is DomainSQLEXPRESS. The issue is when I go down to the "Select or enter a database name" drop down box, I do not see my database listed. I have also made sure in the SQL Server Management Studio that I have given my user all the privileges for the database. I know my explanation is kind of vague, but would anyone know the reason why I would not see my database?

View 3 Replies

SQL Server :: This Version Of Microsoft SQL Server Management Studio Can Only Be Used To Connect To SQL Server?

Jan 20, 2011

I have SQL Server 2005 in my computer.I am using SQL Server 2005 for Development.

I can connect to my local & "COMPAQSQLEXPRESS" Server.

But while connecting to Remote Server i m getting the following error

TITLE: Connect to Server
------------------------------

Cannot connect to x.x.xxx.xx.

------------------------------
ADDITIONAL INFORMATION:

This version of Microsoft SQL Server Management Studio can only be used to connect to SQL Server 2000 and SQL Server 2005 servers. (ConnectionDlg)

------------------------------
BUTTONS:OK

-----------------------------

View 4 Replies

SQL Server :: Using SQL Server Management Studio Express To Manage Regular SQL Server DB

Nov 2, 2010

This is probably an easy one, but can I use SQL Server Management Studio Express to work on a regular SQL Server database?

View 2 Replies

SQL Server :: Database Conversion From Sql Server 2000 To Sql Server 2005?

Jan 14, 2011

I want to convert sql server 2000 database into sql server 2005 database. I am using sql server 2005 express.

I am trying by taking backup/Restore method, but it not work.

View 1 Replies







Copyrights 2005-15 www.BigResource.com, All rights reserved