Apache being used as proxy ?

[gcypher]

Hi there, i could use some help or advise.
Lately i am experiencing weird apache processes in /tmp. this is the output of ls -la /tmp

[root@lws1 ~]# ls -la /tmp
total 988
drwxrwxrwx 4 root root 10240 Jun 24 20:10 .
drwxr-xr-x 24 root root 4096 Jun 15 20:28 ..
-rw------- 1 apache apache 216913 Jun 19 18:53 20060619-185323-80.59.67.202-request_body-WnvqVi
-rw------- 1 apache apache 137257 Jun 21 00:12 20060621-001157-88.2.190.17-request_body-hzx6Ye
-rw------- 1 apache apache 610015 Jun 22 12:57 20060622-125703-85.155.210.251-request_body-6tHXYh
-rw-r--r-- 1 apache apache 6 Jun 23 22:47 dos-200.89.140.223
-rw-r--r-- 1 apache apache 6 Jun 15 18:09 dos-82.192.81.36
-rw-r--r-- 1 apache apache 6 Jun 17 19:12 dos-83.40.197.11
-rw-r--r-- 1 apache apache 6 Jun 23 19:19 dos-83.61.75.215
-rw-r--r-- 1 apache apache 6 Jun 16 01:49 dos-85.155.203.200
-rw-r--r-- 1 apache apache 6 Jun 22 14:14 dos-88.9.204.21
drwx------ 2 root root 12288 Apr 21 13:15 lost+found
lrwxrwxrwx 1 root root 25 Apr 21 13:16 mysql.sock -> /var/lib/mysql/mysql.sock
-rw------- 1 apache apache 0 Jun 24 19:35 sess_3275ab60aee8b31894a02253f957958f
-rw------- 1 apache apache 149 Jun 24 20:09 sess_ed78de8f1a32e27b5d50f7c77079063c
-rw-r--r-- 1 root root 108 Jun 19 03:00 up.tst11499
drwxrwxrwt 3 fastxs fastxs 1024 May 19 19:57 uscreens



Can someone shine some light on what these three processes could be ?

-rw------- 1 apache apache 216913 Jun 19 18:53 20060619-185323-80.59.67.202-request_body-WnvqVi
-rw------- 1 apache apache 137257 Jun 21 00:12 20060621-001157-88.2.190.17-request_body-hzx6Ye
-rw------- 1 apache apache 610015 Jun 22 12:57 20060622-125703-85.155.210.251-request_body-6tHXYh


thanks in advance

[Webcart]

Actually it's very easy to check whether your server is used as a proxy or not.
Just configure your browser to use your server as a proxy and see how it goes :)

What does your httpd.conf look like?

[chatwizrd]

Do you have mod_proxy enabled?

[gcypher]

[root@lws1 ~]# grep mod_proxy /etc/httpd/conf/httpd.conf
#AddModule mod_proxy.c
[root@lws1 ~]#

So it seems it not enabled.

I tried to confugre IE using my server as proxy.

On port 8080 (as expected) does not work at all.
Port 80 i can use as proxy to browse my local domains i host on the server, but when i try to visit any site outside the server (using proxy) i get internal server error so it should be ok i guess.

Thanks in advance

[gcypher]

Anyone else has some ideas , you're more then welcome =)

[gcypher]

It seems those processes also disappear after 2 or 3 weeks.
Is there any reason for those files to be there ??