Re: [us...@httpd] slowloris mitigation

2010-04-14 Thread Nerius Landys
> Posted to users@ (as well as dev@) in case anyone wants to > report experiences - good or bad - on using it. I have tried using various Apache modules to address possibilities of Slowloris attacks. Finally, after not being satisfied with what existing modules had to offer, I ended up using oper

Re: [us...@httpd] Domain cant find server

2010-04-14 Thread Frank Gingras
Alexander, You are facing a domain name resolution issue. Please look on wikipedia and the likes for more details, as apache httpd does not interact with DNS. Frank. On 14/04/2010 4:52 PM, Alexander Welz wrote: I have apache 2.2 installed on a computer. If I type the IP address for the serv

[us...@httpd] How to achieve mixed authentication/anonymous access

2010-04-14 Thread Dirk Thomas / 4wd media
Hi, i have a problem with Authentification. I currently doubt that it is possible at all. Perhaps someone can enlighten me how to achive the goal or confirm that it is not reachable. The scenario is to achieve a mixed authentication/anonymous access similar as described for Subversion (see ht

[us...@httpd] users@httpd.apache.org

2010-04-14 Thread Dirk Thomas / 4wd media
Hi, i have a problem with Authentification. I currently doubt that it is possible at all. Perhaps someone can enlighten me how to achive the goal or confirm that it is not reachable. The scenario is to achieve a mixed authentication/anonymous access similar as described for Subversion (see ht

[us...@httpd] Domain cant find server

2010-04-14 Thread Alexander Welz
I have apache 2.2 installed on a computer. If I type the IP address for the server in the browser window, the website displays I am using a domain from GoDaddy. I set up the Name server in Go daddy for the domain of the same name. I can ping the nameserver and the IP for the webserver displays. If

[us...@httpd] slowloris mitigation

2010-04-14 Thread Nick Kew
When slowloris first hit the headlines, it generated bad press for us: we offered no defence beyond raising your resource limits. I hacked up mod_noloris as a stopgap solution, but it's not really recommended for anything beyond ticking a box labelled "defence against slowloris-type attacks". Sinc

[us...@httpd] Apache auth_ntlm_winbind_module & basic authentication

2010-04-14 Thread Mike Diggins
I’m trying to get the auth_ntlm_winbind_module working with only basic authentication. I already have winbind running on the system, so this seemed like the quickest way to get my web server authenticating with my AD. I have it working to a point, but I'm stuck because it only authenticates if I en

Re: [us...@httpd] RewriteRule with [P] Flag

2010-04-14 Thread Eric Covener
On Wed, Apr 14, 2010 at 8:11 AM, Mark Watts wrote: > On Wed, 2010-04-14 at 08:03 -0400, Eric Covener wrote: >> On Wed, Apr 14, 2010 at 6:32 AM,   wrote: >> > On Wed, 14 Apr 2010 05:44:26 -0400, Eric Covener wrote: >> >>> RewriteRule ^(.*)$ http://localhost:9090/index.jsp [P] >> >> >> >>> The brow

Re: [us...@httpd] RewriteRule with [P] Flag

2010-04-14 Thread Mark Watts
On Wed, 2010-04-14 at 08:03 -0400, Eric Covener wrote: > On Wed, Apr 14, 2010 at 6:32 AM, wrote: > > On Wed, 14 Apr 2010 05:44:26 -0400, Eric Covener wrote: > >>> RewriteRule ^(.*)$ http://localhost:9090/index.jsp [P] > >> > >>> The browser ends up with a not working URL: > >>> http://localhost:

Re: [us...@httpd] RewriteRule with [P] Flag

2010-04-14 Thread Eric Covener
On Wed, Apr 14, 2010 at 6:32 AM, wrote: > On Wed, 14 Apr 2010 05:44:26 -0400, Eric Covener wrote: >>> RewriteRule ^(.*)$ http://localhost:9090/index.jsp [P] >> >>> The browser ends up with a not working URL: >>> http://localhost:9090/setup/login.jsp >> >> http://httpd.apache.org/docs/2.2/mod/mod

Re: [us...@httpd] RewriteRule with [P] Flag

2010-04-14 Thread achristiansen
On Wed, 14 Apr 2010 05:44:26 -0400, Eric Covener wrote: >> RewriteRule ^(.*)$ http://localhost:9090/index.jsp [P] > >> The browser ends up with a not working URL: >> http://localhost:9090/setup/login.jsp > > http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypassreverse I did not mention

Re: [us...@httpd] RewriteRule with [P] Flag

2010-04-14 Thread Eric Covener
> RewriteRule ^(.*)$ http://localhost:9090/index.jsp [P] > The browser ends up with a not working URL: > http://localhost:9090/setup/login.jsp http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypassreverse -- Eric Covener cove...@gmail.com

[us...@httpd] RewriteRule with [P] Flag

2010-04-14 Thread achristiansen
Dear all, since quite some time every now and then (can i say that ;) ) i get stuck with a rewriting issue. i would like to use the rewrite capabilities with the proxy flag. Example: RewriteEngine on RewriteRule ^(.*)$ http://localhost:9090/index.jsp [P] Assume the server configured with the