RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
I was hoping there would be a way to let apache know the url being requested was "https://...";. Here is a log when I navigate to a https page: 75.83.2.48 - - [23/Nov/2007:21:47:51 --0800] [www.domain.com/sid#557f2f90][rid#55a1c188/initial] (2) explicitly forcing redirect with https://ww

[EMAIL PROTECTED] Win32 Apache 2.2.6 Allow from env= issue

2007-11-23 Thread Keith Sawmiller
I'm trying to restrict access to only instances where an environment variable is present (eventually to be set via PHP) This simple case (from httpd.conf) denies access: SetEnv TEST_VAR Options FollowSymLinks AllowOverride None Order allow,deny allow from env=TEST_VAR

RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Brian A. Seklecki
You could use a wildcard SSL cert and redirect to https://secure.*.tld:/patcha/patchb/file then make your determination based on the hostname. The extra $100 cert is a lot less expensive than Radware AppXcel for sure. On Fri, 23 Nov 2007, Matt Bullock wrote: Date: Fri, 23 Nov 2007 18:06:

RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
Eric, That definitely seems like the reason the redirect keeps looping. Every example I have seen has involved {SERVER_PORT} (is or isn't) 443 as a RewriteCond, but I haven't found a way to let apache know if the current session between the client and the load balancer is being encrypted or not.

Re: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Brian A. Seklecki
Radware has some nice header rewriting features in its SSL accelerator package. ~BAS On Fri, 23 Nov 2007, Eric Covener wrote: Date: Fri, 23 Nov 2007 20:25:30 -0500 From: Eric Covener <[EMAIL PROTECTED]> Reply-To: users@httpd.apache.org To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTE

Re: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Eric Covener
On Nov 23, 2007 7:59 PM, Matt Bullock <[EMAIL PROTECTED]> wrote: > Thanks for the reply. The redirect loops the requested page never comes > up. The log prints the same thing over and over. You said the LB does SSL offload. You haven't given apache any way to distinguish when someone hits the LB

RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
Thanks for the reply. The redirect loops the requested page never comes up. The log prints the same thing over and over. Matt -Original Message- From: Krist van Besien [mailto:[EMAIL PROTECTED] Sent: Friday, November 23, 2007 4:40 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTE

Re: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Krist van Besien
On Nov 24, 2007 1:17 AM, Matt Bullock <[EMAIL PROTECTED]> wrote: > Any help would be greatly appreciated. Could you tell us what your problem is? According to the rewritelog excerpt you gave us that server is doing exactly what you told it to do, redirecting clients requesting /dir1/dir2/file.php

[EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
I was hoping someone could help me with a redirect problem. We are using a load balancer in front of our apache22 servers that also provides SSL offloading. Apache only runs on port 80, and doesn't know anything about 443. When a client asks for a specific page, I want to redirect them to the se

Re: [EMAIL PROTECTED] mod_proxy problem

2007-11-23 Thread Vincent Bray
On 22 Nov 2007, at 15:19, Til Obes wrote: Hello, i have a problem with mod_proxy. I want to redirect all requests to another apache running on localhost:8080. So the url https://s1.example.com/ will be proxied to http://localhost:8080/. But i have a problem with phpmyadmin running inside this v

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Nick Kew
On Fri, 23 Nov 2007 21:51:50 +0100 Samuel Vogel <[EMAIL PROTECTED]> wrote: > > The bad news (speaking from memory) is, I don't think that's > > fully implemented as of now (did you try it?). I don't think > > I recollect seeing anyone ask for it before you did > This unfortunately does not work.

Re: [EMAIL PROTECTED] Serving a file while it is being created

2007-11-23 Thread Vincent Bray
On 23 Nov 2007, at 19:14, Nick Birren wrote: Hi I'm trying to serve a video file with Apache while it is still being created (I have a separate server-side application that generates videos, the process takes a few minutes per video and I would like my users to be able to start downloading

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Samuel Vogel
How it should work: FilterProvider foo LAYOUT resp=Content-Encoding !$gzip FilterProvider addcomment foo resp=Content-Type $text/html i.e. once you've declared foo, you can chain it by using it as a provider for your new filter. The bad news (speaking from memory) is, I don't think that's full

Re: [EMAIL PROTECTED] Need help with enabling index.cgi on CentOS

2007-11-23 Thread Vincent Bray
On 23 Nov 2007, at 17:57, Scott Ehrlich wrote: I have a new install of CentOS 5 32-bit, and installed bugzilla and phpmyadmin from their respective source web pages, performing a yum install for everything else. I am now unable to get bugzilla's index.cgi page to appear correctly. After fi

Re: [EMAIL PROTECTED] Redirecting to internal server

2007-11-23 Thread Davide Bianchi
Paul Cocker wrote: > Such a setup already exists (though it's Linux to Linux) so I thought > this would be relatively easy to do, just copy the existing setup. > People currently connect to http://www.domain.co.uk/folder/login.html > and all is well. Searching the httpd.conf file I can find only on

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Nick Kew
On Thu, 22 Nov 2007 22:30:25 +0100 Samuel Vogel <[EMAIL PROTECTED]> wrote: > Hey guys, > > I have a question about mod_filter. I would like to run an output > filter only if the content is not compressed and it's type is > text/html. I have tried the following: > > FilterDeclare addcomment > Fil

[EMAIL PROTECTED] Serving a file while it is being created

2007-11-23 Thread Nick Birren
Hi I'm trying to serve a video file with Apache while it is still being created (I have a separate server-side application that generates videos, the process takes a few minutes per video and I would like my users to be able to start downloading right away and not wait for the video to be gener

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Samuel Vogel
Is it really not possible to connect 2 mod_filter matches? Isn't there some kind of workarround? Regards, Samy Samuel Vogel schrieb: Hey guys, I have a question about mod_filter. I would like to run an output filter only if the content is not compressed and it's type is text/html. I have tr

Re: [EMAIL PROTECTED] Content-Encoding never matches ->bug in mod_filter?

2007-11-23 Thread Samuel Vogel
Ok, i found what was the cause of the issue. The documentation states that the "!" must be the first character of the match. But this is not true. My filter only works like this: FilterProvider addcomment LAYOUT resp=Content-Encoding $!gzip Specifically the documentations says (http://httpd.a

[EMAIL PROTECTED] Content-Encoding never matches ->bug in mod_filter?

2007-11-23 Thread Samuel Vogel
While playing around with mod_filter i tried to do the following to add a filter to every page that is not gzipped: FilterProvider addcomment LAYOUT resp=Content-Encoding !$gzip But that did never apply the filter. On the other hand, applying by Content-Type works perfectly well: FilterProvi

[EMAIL PROTECTED] Need help with enabling index.cgi on CentOS

2007-11-23 Thread Scott Ehrlich
I have a new install of CentOS 5 32-bit, and installed bugzilla and phpmyadmin from their respective source web pages, performing a yum install for everything else. I am now unable to get bugzilla's index.cgi page to appear correctly. After fighting to get the mysql database for bugzilla creat

[EMAIL PROTECTED] Redirecting to internal server

2007-11-23 Thread Paul Cocker
Hi all, first time on the apache list so have mercy ;) I have been tasked with setting up a system whereby a Linux server running apache 2.0.59 in the DMZ takes requests on port 80 and then passes them through to an internal Windows server running IIS which actually hosts the HTML. Such a setup a

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-23 Thread Joshua Slive
On Nov 23, 2007 4:48 AM, Sam Testuser <[EMAIL PROTECTED]> wrote: > This attack has many special traits. One of the more annoying ones is > sudden and total death. I'm not sure how that is a "special trait" of this attack. My point is quite simple: this particular attack (and most other similar on

[EMAIL PROTECTED] Re: mod_proxy problem with phpmyadmin

2007-11-23 Thread Til Obes
Krist van Besien schrieb: This looks like a problem with PHPMyAdmin, not with apache. When you log in to phpmyadmin it sends you a redirect. (Get the LiveHTTPHeaders plugin for Firefox, this is a great help to debug such issues). The redirect is what makes your browser's address bar change. This

Re: [EMAIL PROTECTED] Creating a DSO module using apxs

2007-11-23 Thread C.F-Win in China F
apxs -g -n test 2007/11/21, Jan van den Berg <[EMAIL PROTECTED]>: > > Really no one knows? > > No clues, directions, tips on where I should go from here? > This is really important to me. > > Cheers, > > Jan > > -Oorspronkelijk bericht- > Van: Jan van den Berg [mailto:[EMAIL PROTECTED] >

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-23 Thread Sam Testuser
> Joshua Slive <[EMAIL PROTECTED]> wrote: > Ok. I see the issue better now. > > But what really is the point in trying to eliminate the client who > dribbles out data in order to get around the TimeOut? If you are > performing a DDoS, you can easily behave just like an ordinary client > (requesti