Bug#568409: apache2.2-common: HostnameLookup Off apparently doesn't work (allow from localhost?)

[Alessandro Vesely <vesely@tana.it>]

Package: apache2.2-common
Version: 2.2.9-10+lenny6
Severity: minor


Although HostnameLookup is set to "Off" (the default) host names
are sometimes logged instead of IP addresses. This can be solved
by using %a rather than %h in the LogFormat. However, why are IP
resolved? I suspect the directive found in

   /etc/apache2/mods-enabled/mod_info.c

which says

   <Location /server-info>
       SetHandler server-info
       Order deny,allow
       Deny from all
       Allow from localhost ip6-localhost
   #    Allow from .example.com
   </Location>

Does that require mod_authz_host to lookup names? If that's the
case, it should probably be commented out. It might also be a
good idea to replace the one already commented out with, say,

   #    Allow from 192.0.2.0/24

-- Package-specific info:
List of enabled modules from 'apache2 -M':
  actions alias asis auth_basic auth_digest authn_file authz_default
  authz_groupfile authz_host authz_svn authz_user autoindex cgi dav
  dav_svn dir env headers include info macro mime negotiation perl
  php5 proxy_http proxy python rewrite setenvif speling ssl status

-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (800, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26ale9 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages apache2.2-common depends on:
ii  apache2-utils       2.2.9-10+lenny6      utility programs for webservers
ii  libapr1             1.2.12-5+lenny1      The Apache Portable Runtime Librar
ii  libaprutil1         1.2.12+dfsg-8+lenny4 The Apache Portable Runtime Utilit
ii  libc6               2.7-18lenny2         GNU C Library: Shared libraries
ii  libmagic1           4.26-1               File type determination library us
ii  libssl0.9.8         0.9.8g-15+lenny6     SSL shared libraries
ii  lsb-base            3.2-20               Linux Standard Base 3.2 init scrip
ii  mime-support        3.44-1               MIME files 'mime.types' & 'mailcap
ii  net-tools           1.60-22              The NET-3 networking toolkit
ii  perl                5.10.0-19lenny2      Larry Wall's Practical Extraction 
ii  procps              1:3.2.7-11           /proc file system utilities
ii  zlib1g              1:1.2.3.3.dfsg-12    compression library - runtime

Versions of packages apache2.2-common recommends:
ii  ssl-cert                      1.0.23     simple debconf wrapper for OpenSSL

Versions of packages apache2.2-common suggests:
ii  apache2-doc              2.2.9-10+lenny6 Apache HTTP Server documentation
pn  apache2-suexec | apache2 <none>          (no description available)
ii  epiphany-gecko [www-brow 2.22.3-9        Intuitive GNOME web browser - Geck
ii  iceweasel [www-browser]  3.0.6-3         lightweight web browser based on M
ii  lynx-cur [www-browser]   2.8.7dev9-2.1   Text-mode WWW Browser with NLS sup
ii  w3m [www-browser]        0.5.2-2+b1      WWW browsable pager with excellent

Versions of packages apache2.2-common is related to:
pn  apache2-mpm-event        <none>          (no description available)
pn  apache2-mpm-itk          <none>          (no description available)
ii  apache2-mpm-prefork      2.2.9-10+lenny6 Apache HTTP Server - traditional n
pn  apache2-mpm-worker       <none>          (no description available)

-- no debconf information