CGI-based proxy problem (nph-proxy.cgi), Apache?

xequtor · #1 29th May 2006, 01:26 PM

Hello,

I have a problem to run my CGI-proxy, nph-proxy.cgi (http://www.jmarshall.com/tools/cgiproxy)
I can start it and can see the page where I can type the URL but then I get
"CGIProxy Error
Couldn't find address for www.google.com:"
its not just google but any URL, I have the same problem on 2 servers with FC5, on my suse 10.1 works fine and is on the same machine that FC5. All network settings are fine, I can wget and Lynx works fine.
Is it some Apache mod?

I use FC5 and CGIProxy 2.1beta11 and 2.0.1

Does anyone have a idea?

P.S. Sorry for Crossposting

kanarip · #2 29th May 2006, 11:29 PM

I'm unable to locate a Fedora Core RPM package for CGIProxy, is this supported?

icydog · #3 29th May 2006, 11:32 PM

Run system-config-securitylevel, click the SELinux tab, HTTPD Service, and check these:

Allow HTTPD cgi support
Allow HTTPD scripts and modules to connect to the network

(maybe others? but those two for sure)

I hope that fixes it.

jakes01 · #4 14th June 2006, 12:16 AM

Hey,

i have the exact same problem if i use a full url when i tried using an ip address i got a cgi proxy socket permission error, so i tried disabling selinux and it worked, the cgi proxy is working normally now.

any ideas how i can make the selinux configuration modifications via the terminal? i dont have vnc on my server only ssh

thanks

jakes

coolbeansdude51 · #5 5th August 2006, 09:24 PM

Quote:

Originally Posted by icydog

Run system-config-securitylevel, click the SELinux tab, HTTPD Service, and check these:

Allow HTTPD cgi support
Allow HTTPD scripts and modules to connect to the network

(maybe others? but those two for sure)

I hope that fixes it.

That totally fixes the problem. I had the same problem and BLAM its fixed. Thought someone should tell you that it did work. ;-0

seans11 · #6 11th September 2007, 10:58 PM

If you're a command line monkey like me you can use the following commands to check the status and change the booleans if necessary.

Check httpd booleans:
getsebool -a | grep httpd

Look for the values of:
httpd_can_network_connect --> on
httpd_enable_cgi --> on

If either is off:
setsebool <attribute> <true|false>

No need to turn off a good protection mechanism like SELinux.