Q. I’ve proxy (mod_proxy) enabled for Apache under Debian Linux 4.0 server. I’d like to use this to improve performance, but I don’t want an open proxy that can be used by anyone on the Internets? How do I secure my proxy as limiting access is essential as I’m using a forward proxy?
A. You can easily restrict proxy access to single domain, IP or subnet.
Forward proxy example
You can control who can access your proxy via the <Proxy> control block. Use configuration as follows to allow access from your-domain.com only:
<Proxy *> Order deny,allow Deny from all Allow from your-domain.com </Proxy>
OR allow access from 10.1.5 only
<Proxy *> Order deny,allow Deny from all Allow from 10.1.5 </Proxy>
- Apache Module mod_proxy documentation.