I have two web servers at different locations (let's call them WEB1
and WEB2
) being monitored by the same Munin server. Today, I noticed the following error in the apache logs for WEB1
:
[error] [client <IP OF WEB2>] client denied by server configuration: /var/www/server-status
Naturally, I have server-status limited to localhost on both machines for security. It happens every 5 minutes at the exact same time my munin server gathers info, so I know it is the munin apache_activity plugin causing this to happen.
Why on earth is it trying to check the server-status of a different server, and how do I stop it?
apache_activity retrieves "http://127.0.0.1:%d/server-status?auto", so that rules out DNS or /etc/hosts issues (confirm this by looking at your copy of apache_activity.)
Is apache on WEB2 is configured to redirect or proxy some requests to WEB1, and you've inadvertently included /server-status?