HTTP proxy problem – Permission denied: proxy: HTTP: attempt to connect to 127.0.0.1:8080

Posted by
August 31, 2008
  

Problem: Few days back we were working with Apache web server and were using it for proxy. We want to use HTTPD for directing requests to 8080 port where Apache tomcat was running.

We configured the proxy settings successfully and it was working perfect. Following is the example of settings for proxy configuration:

proxy_* modules should be loaded for correct execution of this setting. Check /etc/httpd/conf/httpd.conf file to verify whether modules are loaded or not (proxy_* modules should not be commented in the file)

Add following lines in etc/httpd/conf/httpd.conf file :

ProxyRequests Off

ProxyPass /app1 http://127.0.0.1:8080/app1
ProxyPassReverse /app1 http://127.0.0.1:8080/app1

ProxyPass /app2 http://127.0.0.1:8080/app2
ProxyPassReverse /app2 http://127.0.0.1:8080/app2

one fine day we were unabe to access app1 and app2 using proxy, when we checked logs we found following error in error_log (/etc/httpd/logs/error_log)

[error] (13)Permission denied: proxy: HTTP: attempt to connect to 127.0.0.1:8080 (127.0.0.1) failed
[error] ap_proxy_connect_backend disabling worker for (127.0.0.1)

Solution: Run following command

# /usr/sbin/setsebool httpd_can_network_connect 1
OR
# /usr/sbin/setsebool httpd_can_network_connect true

Or you can also set the security settings, Go to Security Level configurations and Change Tab to SELinux. And modify SELinux policy Check “Allow HTTPD scripts and modules to connect to the network” under HTTPD service.

Most Commented Posts

linux, problem, web

If you enjoyed this post, please consider to leave a comment or subscribe to the feed and get future articles delivered to your feed reader.

Comments
Comment by suresh on October 23, 2008 @ 8:06 am

Useful post

Comment by Oded on November 10, 2008 @ 4:56 pm

Thanks – this is exactly what I needed. I’ve similar problems before and my usual response was to turn off selinux. this time I decided to tough it up and your tip was just the ticket.

Comment by Aditya on November 10, 2008 @ 5:30 pm

Thanks Oded for your comment. I feel happy when i find that my posts are useful for other people.

Thanks.

Comment by Dhanushka on November 14, 2008 @ 10:50 am

Thanks Aditya.

I have been strugling few hours with this. With your answer I got this working. Thanks…

Comment by Aditya on November 16, 2008 @ 6:27 pm

Thanks Dhanushka for your comments and your time.

Comment by en on July 24, 2009 @ 7:56 am

Thank you. Your post solved my problems.

Comment by RockDJ on September 10, 2009 @ 10:55 pm

You can add ‘-P’ if you want this change to persist over system restarts, eg:

/usr/sbin/setsebool -P httpd_can_network_connect 1

Thanks for the post, extremely helpful!

Comment by Piyush Panchal on December 2, 2009 @ 2:52 am

Thank you very much – It’s really a saviour for me.

Comment by Pete Humphrey on December 14, 2009 @ 6:01 am

I was having the same problem and your post was right on the money. Thanks!

Pingback by Apache ???????? | Mr.Lodar's Blog on July 1, 2010 @ 5:46 am

[...] ??????????????????????????????????????IE??????????????????????????????????????????????Apache???????????????????????????????????????????????HTTP????????????????????????????????????????????????????????????Apache?HTTP???????????????????????????? [...]

Comment by Anonymous on August 3, 2010 @ 1:44 pm

Thanks for the great tip!

Comment by Harisudan on March 8, 2011 @ 6:30 am

I faced this issue([error] (13)Permission denied: proxy:) today and the solution posted in this thread resolved this issue immediately. Thanks for your help.

Comment by Vikram on June 7, 2011 @ 7:54 am

I am having the same problem in a Windows7+xampp(apache) setup. How can I solve the problem over there? Any ideas??

Comment by Victor on July 15, 2011 @ 6:17 am

Thank you!

Comment by Shine on September 15, 2011 @ 7:37 pm

Thank you, it works for me

Comment by Henrik on October 17, 2011 @ 8:00 am

Thank you. Just what I needed.

Comment by Scott on October 20, 2011 @ 4:32 am

OMG THANK YOU SO MUCH!!! What a frustrating problem.

Comment by acecoder on November 9, 2011 @ 5:08 am

thank you so much…This is what I need..

Comment by Krish on March 2, 2012 @ 5:41 am

Thanks buddy.. it’s supported me to fix very critical issue which i had..

Comment by Eric on March 5, 2012 @ 4:09 pm

/usr/sbin/setsebool httpd_can_network_connect true

Great, it worked, Much appreciated :)

Comment by isaias on March 28, 2012 @ 6:42 pm

Yes.. he is work for me

# /usr/sbin/setsebool httpd_can_network_connect 1
OR
# /usr/sbin/setsebool httpd_can_network_connect true

very good.. tks my friends..

Comment by Aditya on March 29, 2012 @ 10:37 am

Thanks for your kind words. Glad to hear that it solved your problem.

Comment by Aditya on March 29, 2012 @ 10:38 am

Glad to hear that it solved your problem.

Comment by Aditya on March 29, 2012 @ 10:39 am

Thanks for your comment. Really glad seeing that people are saving their time using this post.

Comment by Ryan on March 30, 2012 @ 12:01 am

Thanks for this tip. +1!!!

Comment by Aditya on March 30, 2012 @ 4:51 am

Thanks for your comment Ryan.

Comment by rabi on April 16, 2012 @ 11:08 pm

I am facing the similar issue on windows 2008 R2.

Any tip, how to fix this??

[Mon Apr 16 15:50:09 2012] [error] (OS 10061)No connection could be made because the target machine actively refused it. : proxy: HTTP: attempt to connect to 10.20.12.30:9950 (uattibcapp01.repsrv.com) failed
[Mon Apr 16 15:50:09 2012] [error] ap_proxy_connect_backend disabling worker for (uattibcapp01.repsrv.com)

Comment by beeplogic on May 3, 2012 @ 10:17 pm

This worked great, thank you!

Leave a comment

(required)

(required)