<span class="gmail_quote">On 1/2/06, <b class="gmail_sendername">Lee</b> <<a href="mailto:mythtv@varga.co.uk">mythtv@varga.co.uk</a>> wrote:</span><br><div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
What did you do in the external Apache config to get this to work?<br>I've been playing with reverse proxies but can't get it to work...<br></blockquote></div><br><br>I do a similiar thing. I have a hardened server that proxies mythweb connections with basic username/password authentication and it only allows connections from a few ip addresses. I also added output compression since my uplink speed is slow and this allows for a faster loading of mythweb from outside my network. I usually have port 80 closed and just use ssh forwarding to get in, but I sometimes open port 80 from my router and I feel safe this setup keeps people away.
<br><br>I created /etc/http/conf.d/mythweb.conf:<br><br><div style="margin-left: 40px;"><IfModule mod_proxy.c><br>ProxyRequests On<br><br>ProxyPass /mythweb <a href="http://mythtv.backend.server/mythweb">http://mythtv.backend.server/mythweb
</a><br>ProxyPassReverse /mythweb <a href="http://mythtv.backend.server/mythweb">http://mythtv.backend.server/mythweb</a><br><br><Proxy *><br> Order deny,allow<br> Deny from all<br> Allow from <a href="http://127.0.0.1">
127.0.0.1</a><br> Allow from <a href="http://192.168.1.201">192.168.1.201</a> <a href="http://192.168.1.202">192.168.1.202</a> <a href="http://192.168.1.203">192.168.1.203</a><br> Allow from <a href="http://192.168.1.2">
192.168.1.2</a> <a href="http://192.168.1.3">192.168.1.3</a><br></Proxy><br><br><Location /mythweb><br> AuthType Basic<br> AuthName "MythTV"<br> AuthUserFile "/etc/httpd/passwd"<br> Require user mythtv
<br> SetOutputFilter DEFLATE<br> AddOutputFilterByType DEFLATE text/html text/plain text/xml text/php<br> BrowserMatch \bMSI[E] !no-gzip !gzip-only-text/html<br> SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-gzip dont-vary
<br> Header append Vary User-Agent env=!dont-vary<br></Location><br><br></IfModule><br></div><br>Obviously change 'Allow from' to fit your needs and mythtv.backend.server to your MythTV ip or hostname. The Location section says to authenticate using the user 'mythtv' with the password stored in /etc/httpd/passwd. See 'man htpasswd' about creating a proper Apache password file. The rest of the Location section says to gzip all html, plaintext, xml, php pages sent out (but leave gifs, jpgs, pngs, alone) to any none IE browser. Firefox and Safari can deflate these files properly.
<br><br>After dropping this conf file in /etc/httpd/conf.d, restart Apache.<br clear="all"><br>-- <br>-J