Re: [EMAIL PROTECTED] log file upload

2007-12-12 Thread Ryan Barnett
Yep, modsecurity's audit_log can capture full request bodies if you desire and this would include the filename data from the multipart-form-data upload sections. You could also optionally intercept and make copies of uploaded files to store them locally. Thanks, Ryan C. Barnett - Origina

Re: [EMAIL PROTECTED] log file upload

2007-12-12 Thread Vincent Bray
On 13/12/2007, Jean-Christophe Roux <[EMAIL PROTECTED]> wrote: > The users of my site can upload images using regular html forms. I would > like to log the uploads so that I know such IP address at such time has > uploaded such file. This is the last part that I am unable to do. Going > through the

[EMAIL PROTECTED] log file upload

2007-12-12 Thread Jean-Christophe Roux
Hello, The users of my site can upload images using regular html forms. I would like to log the uploads so that I know such IP address at such time has uploaded such file. This is the last part that I am unable to do. Going through the docs on custom logs, I am not finding a solution. I could d

[EMAIL PROTECTED] error reading the headers, referer

2007-12-12 Thread Simon Taylor
Im posting this page 80.176.75.30 - - [12/Dec/2007:20:40:59 +] "POST /phpBB3/posting.php?mode=post&f=3&sid=a9c59ff6c88bb6d8893efd91edb67a18 HTTP/1.1" 400 0 "http://simontaylor.org.uk/phpBB3/posting.php?mode=post&f=3"; "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127

[EMAIL PROTECTED] SSI of php file inside JSP, almost there.....

2007-12-12 Thread WiltOnTilt
Hi all, As the title suggests I'm trying to do a server side include of a .php file in my jsp such that apache will run the php and of course tomcat handles the .jsp. Here's what I've got so far: - httpd.conf in the section for my virtual server: SetEnvIf Re

Re: [EMAIL PROTECTED] Why does a form POST generate a redirect (302) with GET?

2007-12-12 Thread Nick Kew
On Wed, 12 Dec 2007 21:32:17 +0300 "CS Imamu" <[EMAIL PROTECTED]> wrote: > The Web server appears to receive the POST request from the browser > and then sends a redirect (302) response to the browser. The server won't do that unprompted. Either your application or your configuration is sending

[EMAIL PROTECTED] Wrong HTTP Return Codes

2007-12-12 Thread B.Ramann
Hello togehter, when i send a page from my tomcat through the mod.jk (1.2.23) to the apache (2.2.3) with the return code 210, then the apache will send a returncode 500 (internal server error) to the client. but in the access.log a 210 logged. The apache will send other pages from tomcat with r

[EMAIL PROTECTED] Why does a form POST generate a redirect (302) with GET?

2007-12-12 Thread CS Imamu
Hello, I've developed a small Java web application that is running in an environment using Apache Web server sitting in front of IBM Websphere. We get the following behavior that we've traced to the Web server (so it never even gets to Websphere): The application allows the user to upload files t

RE: [EMAIL PROTECTED] Re: response time measurement at apache server

2007-12-12 Thread rahul gundecha
As I mentioned in earlier mail - "About apache benchmark, I want to simulate clients from different physical machines and want Response time MEASUREMENT AT SERVER." Hence I do not want to use ab. So that this can work in practical scenario as well. Axel-Stephane SMORGRAV <[EMAIL PROTECTED]> wro

Re: [EMAIL PROTECTED] 'domain.com/foo' = 404 but 'domain.com/foo/' works fine

2007-12-12 Thread Krist van Besien
On Dec 12, 2007 3:41 PM, thomas Armstrong <[EMAIL PROTECTED]> wrote: > Hi Eric. Thank you very much for you answer. > > I typed: > - > RewriteRule ^([^/]+)/*$ /page.php?id=$1 [L] > - > and got 500 error message on every page on my website. The same with: > > ---

RE: [EMAIL PROTECTED] Help with AB and authentication

2007-12-12 Thread Joel Carlos Martinho Alexandre (DSI)
The IIS is running on a Windows server (2003, i think) Rgds, Joel -Original Message- From: William A. Rowe, Jr. [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 12 de Dezembro de 2007 16:26 To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Help with AB and authentication Joel Carlo

Re: [EMAIL PROTECTED] Help with AB and authentication

2007-12-12 Thread William A. Rowe, Jr.
Joel Carlos Martinho Alexandre (DSI) wrote: Hi, I'm trying to use AB to benchmark a site within a IIS, but I'm having problems with authentication. I'm currently using ab2 -A domain\user:password url but I can't get through the 401 error page. I've tried some variations: ab2 -A "domain\us

[EMAIL PROTECTED] Apache 2.0.59 on non-standard port & interactions with mod_jk/Tomcat

2007-12-12 Thread Julian Dunn
Hello, I currently have a web farm behind a load balancer. The load balancer is configured to listen only on port 80 and to send requests to a particular URL, say "/foo", to TCP port 5001 on the web servers where I have an Apache 2.0.59 instance running. "/foo" is actually a JkMount to a Tomcat

Re: [EMAIL PROTECTED] security issue

2007-12-12 Thread Neil A. Hillard
Hi, Karel Kubat wrote: > Hi Hiep, > > On Dec 12, 2007, at 3:13 PM, Hiep Nguyen wrote: > >> i installed apache on centos 5 and i have some questions regarding >> security for apache. i read security tips on >> http://httpd.apache.org/docs/2.2/misc/security_tips.html and get the >> idea, but stil

Re: [EMAIL PROTECTED] security issue

2007-12-12 Thread Hiep Nguyen
On Wed, 12 Dec 2007, Karel Kubat wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Hiep, On Dec 12, 2007, at 3:13 PM, Hiep Nguyen wrote: i installed apache on centos 5 and i have some questions regarding security for apache. i read security tips on http://httpd.apache.org/docs/2.2/mi

Re: [EMAIL PROTECTED] 'domain.com/foo' = 404 but 'domain.com/foo/' works fine

2007-12-12 Thread Neil A. Hillard
Hi, thomas Armstrong wrote: > Hi Eric. Thank you very much for you answer. > > I typed: > - > RewriteRule ^([^/]+)/*$ /page.php?id=$1 [L] > - > and got 500 error message on every page on my website. The same with: > > --- > RewriteRule ^([^/]+)/?$ /page.php?id

RE: [EMAIL PROTECTED] Re: response time measurement at apache server

2007-12-12 Thread Axel-Stephane SMORGRAV
What about Apache Bench (ab)? It's part of the Apache distribution. -ascs De : rahul gundecha [mailto:[EMAIL PROTECTED] Envoyé : mercredi 12 décembre 2007 13:28 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] Re: response time measurement at apache ser

Re: [EMAIL PROTECTED] security issue

2007-12-12 Thread Karel Kubat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Hiep, On Dec 12, 2007, at 3:13 PM, Hiep Nguyen wrote: i installed apache on centos 5 and i have some questions regarding security for apache. i read security tips on http:// httpd.apache.org/docs/2.2/misc/security_tips.html and get the idea,

Re: [EMAIL PROTECTED] 'domain.com/foo' = 404 but 'domain.com/foo/' works fine

2007-12-12 Thread thomas Armstrong
Hi Eric. Thank you very much for you answer. I typed: - RewriteRule ^([^/]+)/*$ /page.php?id=$1 [L] - and got 500 error message on every page on my website. The same with: --- RewriteRule ^([^/]+)/?$ /page.php?id=$1 [L] Regards, --Thomas

RE: [EMAIL PROTECTED] Help with AB and authentication

2007-12-12 Thread Joel Carlos Martinho Alexandre (DSI)
That's right. Unfortunately i'm unable to change the virtual directory configuration. Cumprimentos, Joel Alexandre Direcção de Sistemas de Informação PORT - Sector de Portais R. Alexandre Herculano, nº53 - 2º andar 1269-152 Lisboa email: [EMAIL PROTECTED] -Original Message- From: Ne

Re: [EMAIL PROTECTED] Help with AB and authentication

2007-12-12 Thread Neil A. Hillard
Hi, Joel Carlos Martinho Alexandre (DSI) wrote: > I already tried that. > > Didn't work. > > Maybe it's another thing. > > With wget, i does 3 request just to get one page. The first two return > 401 and only the third is giving a 200. Maybe ab, for some reason, isn't > trying enough times to

RE: [EMAIL PROTECTED] Help with AB and authentication

2007-12-12 Thread Joel Carlos Martinho Alexandre (DSI)
I already tried that. Didn't work. Maybe it's another thing. With wget, i does 3 request just to get one page. The first two return 401 and only the third is giving a 200. Maybe ab, for some reason, isn't trying enough times to authenticate. In AB with verbose active, I can see it only tries o

[EMAIL PROTECTED] security issue

2007-12-12 Thread Hiep Nguyen
hi list, i installed apache on centos 5 and i have some questions regarding security for apache. i read security tips on http://httpd.apache.org/docs/2.2/misc/security_tips.html and get the idea, but still need some advices from guru here. /etc/httpd/conf/httpd.conf: ServerRoot "/etc/httpd

Re: [EMAIL PROTECTED] Help with AB and authentication

2007-12-12 Thread Graeme Fowler
On Wed, 2007-12-12 at 11:30 +, Joel Carlos Martinho Alexandre (DSI) wrote: > I'm trying to use AB to benchmark a site within a IIS, but I'm having > problems with authentication. > > I'm currently using > > ab2 -A domain\user:password url Try ab2 -A domain\\user:password url The command

Re: [EMAIL PROTECTED] 'domain.com/foo' = 404 but 'domain.com/foo/' works fine

2007-12-12 Thread Eric Covener
On Dec 12, 2007 7:18 AM, thomas Armstrong <[EMAIL PROTECTED]> wrote: > Hi. > > I created this .htaccess: > - > RewriteRule ^([^/]+)/$ /page.php?id=$1 [L] > --- > > And it works fine with: > http://domain.com/foo/ (it shows a webpage) > > But it shows a 404 error page with: > http://domain.c

[EMAIL PROTECTED] Re: response time measurement at apache server

2007-12-12 Thread rahul gundecha
thanks all for the reply. Does the time shown by %D/%T include Waiting Time as well? I have tried similar logging in Tomcat server, which actually shows Service Time & not the Response Time. As apache server itself does not have any request buffer, how the waiting time is accounted? Abou

Re: [EMAIL PROTECTED] access.log problem

2007-12-12 Thread Karel Kubat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steve, On Dec 12, 2007, at 1:10 PM, Steve Reilly wrote: I wish it was that easy lol, Ive been at this for days now. system restarts dont even cure the problem. All I did was remove all the log files (access.log through access.log.28) written by a

[EMAIL PROTECTED] 'domain.com/foo' = 404 but 'domain.com/foo/' works fine

2007-12-12 Thread thomas Armstrong
Hi. I created this .htaccess: - RewriteRule ^([^/]+)/$ /page.php?id=$1 [L] --- And it works fine with: http://domain.com/foo/ (it shows a webpage) But it shows a 404 error page with: http://domain.com/foo I tried adding this line to .htaccess: RewriteRule ^([^/]+)$ /page.php?id=$1

Re: [EMAIL PROTECTED] access.log problem

2007-12-12 Thread Steve Reilly
Staf Wagemakers wrote: > > > On Dec 10, 2007 12:04 AM, Steve Reilly <[EMAIL PROTECTED] > > wrote: > > > I admit through fault of my own, the apache2 access logs were deleted. > My question is this, are these logs automagically regenerated on > their > own

[EMAIL PROTECTED] Help with AB and authentication

2007-12-12 Thread Joel Carlos Martinho Alexandre (DSI)
Hi, I'm trying to use AB to benchmark a site within a IIS, but I'm having problems with authentication. I'm currently using ab2 -A domain\user:password url but I can't get through the 401 error page. I've tried some variations: ab2 -A "domain\user:password" url ab2 -A domain\user,password ur

Re: [EMAIL PROTECTED] response time measurement at apache server

2007-12-12 Thread Lahiru Gunathilake
On Wed, 2007-12-12 at 09:39 +, rahul gundecha wrote: > Hi all, > > How can I measure the response time at Apache server? you can use apache benchmark which will comes as an executable ab.send the request using ab and it shows all those performance realated informations. > thanks & regards, >

Re: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict?

2007-12-12 Thread pdt_p
Hi... Thank you for Axel and Neil for answering my question. I understand it won't be a good idea to pass the proxy server ip address/host name through parameter. Fortunately, this is only used for internal access only. My proxy server won't be connected to internet. The reason is I do have mor

Re: [EMAIL PROTECTED] response time measurement at apache server

2007-12-12 Thread Christian Folini
On Wed, Dec 12, 2007 at 11:27:19AM +0100, Axel-Stephane SMORGRAV wrote: > Have a look at mod_log_config, specifically the %D and %T format strings. ModSecurity has a few additional timers as well. They do not appear in the documentation, but are covered in Ivan Ristic's Apache Security Book, p.

RE: [EMAIL PROTECTED] response time measurement at apache server

2007-12-12 Thread Axel-Stephane SMORGRAV
Have a look at mod_log_config, specifically the %D and %T format strings. -ascs De : rahul gundecha [mailto:[EMAIL PROTECTED] Envoyé : mercredi 12 décembre 2007 10:40 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] response time measurement at apache s

[EMAIL PROTECTED] response time measurement at apache server

2007-12-12 Thread rahul gundecha
Hi all, How can I measure the response time at Apache server? thanks & regards, -Rahul Gundecha - Did you know? You can CHAT without downloading messenger. Click here

[EMAIL PROTECTED] Statically link libapr and libapr-util with httpd

2007-12-12 Thread Desai Sunil Kumar
Hi All, How can I use static libraries of libapr and libapr-util for building httpd? I want httpd to be statically linked to apr and apr-util. Please can somebody let me know how to do it? Reg Sunil Desai DISCLAIMER: This message (including attachment if any) is confidential and may

Re: [EMAIL PROTECTED] Apache mod_rewrite/mod_proxy conflict?

2007-12-12 Thread Neil A. Hillard
pdt_p wrote: > Hi... > > from this solution: > RewriteRule ^/testing/(.*)$ http://myserverB/$1 [P,L] > RewriteRule ^/(.*)$ http://myserverA/$1 [P] > ProxyPassReverse /testing http://myserverB/ > > the original server url is fixed. In this case http://myserverB and > http://myserverA. What if the

Re: [EMAIL PROTECTED] access.log problem

2007-12-12 Thread Sander Smeenk
Quoting Staf Wagemakers ([EMAIL PROTECTED]): > > own when apache2 is restarted?, and if they are, what can I do if they > > have not been regenerated by numerous apache2 restarts, and also > > complete system reboots. > The access-log file is created automatically at a httpd server start if it > d