[Zope-dev] Virtual Host Monster Paranoia

[Toby Dickenson]

On Tue, 13 Feb 2001 10:30:26 +0000 (GMT), Matt Hamilton
<matth@netsight.co.uk> wrote:

>I use them in conjunction with Apache's mod_proxy to rewrite
>http://www.simpledomain.com to the long
>http://zopehost.foo.com/blah/blah/VirtualHostMonstser/blah/blah.  The =
Zope
>host is behind a firewall, so anonymouse users cannot get to it =
directly.

No, but they can get to:

http://www.simpledomain.com/blah/VirtualHost/bad.stuff/blah

which gets rewritten to:

http://zopehost.foo.com/VirtualHost/http/www.simpledomain/blah/VirtualHos=
t/bad.stuff/blah

Understanding its behaviour behaviour might be beyond the complexity
threshold for a paranoid admin to be comfortable.

Toby Dickenson
tdickenson@geminidataloggers.com