Apache being used as proxy ?

[gcypher]

Hi there, i could use some help or advise.
Lately i am experiencing weird apache processes in /tmp. this is the output of ls -la /tmp

[root@lws1 ~]# ls -la /tmp
total 988
drwxrwxrwx   4 root   root    10240 Jun 24 20:10 .
drwxr-xr-x  24 root   root     4096 Jun 15 20:28 ..
-rw-------   1 apache apache 216913 Jun 19 18:53 20060619-185323-80.59.67.202-request_body-WnvqVi
-rw-------   1 apache apache 137257 Jun 21 00:12 20060621-001157-88.2.190.17-request_body-hzx6Ye
-rw-------   1 apache apache 610015 Jun 22 12:57 20060622-125703-85.155.210.251-request_body-6tHXYh
-rw-r--r--   1 apache apache      6 Jun 23 22:47 dos-200.89.140.223
-rw-r--r--   1 apache apache      6 Jun 15 18:09 dos-82.192.81.36
-rw-r--r--   1 apache apache      6 Jun 17 19:12 dos-83.40.197.11
-rw-r--r--   1 apache apache      6 Jun 23 19:19 dos-83.61.75.215
-rw-r--r--   1 apache apache      6 Jun 16 01:49 dos-85.155.203.200
-rw-r--r--   1 apache apache      6 Jun 22 14:14 dos-88.9.204.21
drwx------   2 root   root    12288 Apr 21 13:15 lost+found
lrwxrwxrwx   1 root   root       25 Apr 21 13:16 mysql.sock -> /var/lib/mysql/mysql.sock
-rw-------   1 apache apache      0 Jun 24 19:35 sess_3275ab60aee8b31894a02253f957958f
-rw-------   1 apache apache    149 Jun 24 20:09 sess_ed78de8f1a32e27b5d50f7c77079063c
-rw-r--r--   1 root   root      108 Jun 19 03:00 up.tst11499
drwxrwxrwt   3 fastxs fastxs   1024 May 19 19:57 uscreens

Can someone shine some light on what these three processes could be ?

-rw------- 1 apache apache 216913 Jun 19 18:53 20060619-185323-80.59.67.202-request_body-WnvqVi
-rw------- 1 apache apache 137257 Jun 21 00:12 20060621-001157-88.2.190.17-request_body-hzx6Ye
-rw------- 1 apache apache 610015 Jun 22 12:57 20060622-125703-85.155.210.251-request_body-6tHXYh


thanks in advance

 

[Webcart]

Actually it's very easy to check whether your server is used as a proxy or not.
Just configure your browser to use your server as a proxy and see how it goes

What does your httpd.conf look like?

 

[chatwizrd]

Do you have mod_proxy enabled?

 

[gcypher]

[root@lws1 ~]# grep mod_proxy /etc/httpd/conf/httpd.conf
#AddModule mod_proxy.c
[root@lws1 ~]#

So it seems it not enabled.

I tried to confugre IE using my server as proxy.

On port 8080 (as expected) does not work at all.
Port 80 i can use as proxy to browse my local domains i host on the server, but when i try to visit any site outside the server (using proxy) i get internal server error so it should be ok i guess.

Thanks in advance

 

[gcypher]

Anyone else has some ideas , you're more then welcome =)

 

[gcypher]

It seems those processes also disappear after 2 or 3 weeks.
Is there any reason for those files to be there ??