> > Furthermore you have to make sure that "ProxyRequests Off" is
> > set somewhere in the apache config else it is very likely to become an
> > open proxy relay.
>
> I am curious about that. It should have default value "Off" right? One of
> the VHs had ProxyPreserveHost On and... well, I am not sure but just for
> "good measure" I threw in a "ProxyRequests Off" in that site.

ProxyRequests should be always off.

ProxyPreserveHost is an entirely different thing. It helps Seaside and
other web frameworks to detect the original host name the request was
sent to, what is required to create full absolute paths.

Cheers,
Lukas

-- 
Lukas Renggli
http://www.lukas-renggli.ch