Re: How to scan hosts behind apache with ProxyPassReverse ?

I would say don't :)
This comes down to what you are trying to do with the scan... what questions
you are trying to answer. If you are trying to find vulnerabilities or
auditing, take away that layer of protection, since there are a very
specific set of vulnerabilities that will help with.

On Mon, Jun 9, 2008 at 3:04 AM, Alexander Grüner <[email protected]> wrote:

> Hello,
>
> I am using Nessus-3.2.1 and NessusClient-3.2.1.
>
> I want to scan computers behind an apache2 web server which redirects
> traffic to other computers.
>
> In my apache2 config it works like this
>
> ProxyPass        /abc http://internal-pc.domain.com/abc
> ProxyPassReverse /abc http://internal-pc.domain.com/abc
>
> so every request to http://www.domain.com/abc is redirected to
> http://internal-pc.domain.com/abc
>
> I have tried different ways to scan http://www.domain.com/abc but it
> never worked. Nessus always scanned http://www.domain.com.
>
> Is this possible and how ?
>
> I have not found any solution, while reading nessus documentation and
> posts on this list.
>
> Thanks in advance.
>
> Regards,
> Alexander
> _______________________________________________
> Nessus mailing list
> [email protected]
> http://mail.nessus.org/mailman/listinfo/nessus
>



-- 
Doug Nordwall
Unix, Network, and Security Administrator
You mean the vision is subject to low subscription rates?!!? - Scott Stone,
on MMORPGs

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus