Re: [users@httpd] Re: Recent Apache DOS advisory - problem applying the SetEnvIf/ RequestHeader workaround.

2011-08-24 Thread William A. Rowe Jr.
On 8/24/2011 8:28 PM, James wrote: > You need to have the module mod_headers enabled. To check if you have the > module enabled run /path/to/httpd -t -D DUMP_MODULES, if you don't see > mod_headers, you don't have the module. You can search Google on how to > enable it. However, I've tested the

Re: [users@httpd] Recent Apache DOS advisory - problem applying the SetEnvIf/ RequestHeader workaround.

2011-08-24 Thread William A. Rowe Jr.
On 8/24/2011 8:28 PM, William A. Rowe Jr. wrote: > On 8/24/2011 8:02 PM, Tom Sztur wrote: >> >> I get this error when restarting Apache: > > "'RequestHeader', perhaps misspelled or _/defined by a module not included in > the server/_" > > Someone, please loan this poster a cluebat. Tom... one m

Re: [users@httpd] Recent Apache DOS advisory - problem applying the SetEnvIf/ RequestHeader workaround.

2011-08-24 Thread William A. Rowe Jr.
On 8/24/2011 8:02 PM, Tom Sztur wrote: > > I get this error when restarting Apache: "'RequestHeader', perhaps misspelled or _/defined by a module not included in the server/_" Someone, please loan this poster a cluebat. - The

Re: [users@httpd] Re: Recent Apache DOS advisory - problem applying the SetEnvIf/ RequestHeader workaround.

2011-08-24 Thread James
You need to have the module mod_headers enabled. To check if you have the module enabled run /path/to/httpd -t -D DUMP_MODULES, if you don't see mod_headers, you don't have the module. You can search Google on how to enable it. However, I've tested the rewrite rules on the 2.X series and this wo

[users@httpd] Re: Recent Apache DOS advisory - problem applying the SetEnvIf/ RequestHeader workaround.

2011-08-24 Thread Tom Sztur
Forgot to add version is Apache/2.2.14 . Link to the advisory is: http://mail-archives.apache.org/mod_mbox/httpd-announce/201108.mbox/browser t. On Wed, Aug 24, 2011 at 9:02 PM, Tom Sztur wrote: > so one of the mitigations for this advisory was: > > > 1) Use SetEnvIf or mod_rewrite to detect

[users@httpd] Recent Apache DOS advisory - problem applying the SetEnvIf/ RequestHeader workaround.

2011-08-24 Thread Tom Sztur
so one of the mitigations for this advisory was: 1) Use SetEnvIf or mod_rewrite to detect a large number of ranges and then either ignore the Range: header or reject the request. Option 1: (Apache 2.0 and 2.2) # Drop the Range header when more than 5 ranges. # CVE-2011

[users@httpd] AIX build problems

2011-08-24 Thread Robert Haig
build question on aix: I'm running the build/binbuild.sh script to build. I've modified the script to add some additional configure parameters (enable-deflate with-z enable-ssl with-ssl) but after the build is complete I get an error loading httpd (http://pastebin.com/FYxJ4nXg) == rbf-

[users@httpd] UserDir + Alias = suexec not being invoked

2011-08-24 Thread Zachary Palmer
All, I have an Apache HTTPD instance I am trying to configure for a fairly small group of users. We're using mod_userdir and mod_suphp to ensure that user scripts are run as the users themselves rather than as the www user. My objective is to configure the website in such a way that certain dis

[users@httpd] intermittent error with svn + basic auth + ldap

2011-08-24 Thread David Norris
Hi all, We use Apache as a front-end to a Subversion repository on Linux. We're using SSL, with basic authentication backed by LDAP against a Windows Server 2008 domain controller. Every so often, we get a 500 Internal Server Error when trying to write to the SVN repository. The following mess

Re: [users@httpd] Proxy´ing a remote site

2011-08-24 Thread Søren Schimkat
On 16-08-2011 13:21, Jeroen Geilman wrote: On 2011-08-16 09:23, Søren Schimkat wrote: Hi Guys I would like to make a remote website appear as existing on a local virtual host, but I'm having trouble with understandig how to do it. Virtual hosting i working just fine, but getting the remote

Re: [users@httpd] mod_proxy SSL forward proxy

2011-08-24 Thread Bill Moseley
On Wed, Aug 24, 2011 at 2:14 PM, Björn Zettergren < bjorn.zetterg...@basefarm.se> wrote: > Hi Bill, > > I tried your config and i can recreate your problem. But as Eric just said > in another mail, your browser is not using https to speak to https proxy. > And i verified that wget speaks http when

Re: [users@httpd] Encode problem

2011-08-24 Thread Yehuda Katz
On Wed, Aug 24, 2011 at 8:39 AM, Josu Lazkano < josu.lazk...@barcelonamedia.org> wrote: > [Wed Aug 24 14:32:45 2011] [error] [client 84.88.76.10] PHP Fatal error: > Allowed memory size of 20971520 bytes exhausted (tried to allocate 30720 > bytes) in /var/wikifarm/wiki/includes/Xml.php on line 593,

Re: [users@httpd] Encode problem

2011-08-24 Thread Josu Lazkano
On Wed, 2011-08-24 at 08:25 -0400, Yehuda Katz wrote: > On Wed, Aug 24, 2011 at 8:06 AM, Josu Lazkano > wrote: > I have this error: http://dl.dropbox.com/u/1541853/apache2.png > > It can handle the "Pàgina" word, it looks like a encoding > problem > Instead of spec

Re: [users@httpd] Encode problem

2011-08-24 Thread Yehuda Katz
On Wed, Aug 24, 2011 at 8:06 AM, Josu Lazkano < josu.lazk...@barcelonamedia.org> wrote: > I have this error: http://dl.dropbox.com/u/1541853/apache2.png > > It can handle the "Pàgina" word, it looks like a encoding problem Instead of speculating: Any time you get a 500 error (as shown in your scr

[users@httpd] Encode problem

2011-08-24 Thread Josu Lazkano
Hello list, I have a little problem with MediaWiki on Apache2. I just migrate the wiki from a old server to a new one. Both with Ubuntu server and Apache2/PHP5. I just move the PHP files and restore the DB. When I access to a page like this: http://mydomain/index.php?title=Especial:Registre_i_entr

Re: [users@httpd] mod_proxy SSL forward proxy

2011-08-24 Thread Björn Zettergren
On 08/24/2011 12:00 PM, Bill Moseley wrote: moseley@bair ~/Documents/apache $ wget https://mail.google.com/ --2011-08-24 12:48:42-- https://mail.google.com/ Resolving localhost... 127.0.0.1, ::1, fe80::1 Connecting to localhost|127.0.0.1|:8443... connected. Failed reading proxy response: Unknown

Re: [users@httpd] mod_proxy SSL forward proxy

2011-08-24 Thread Eric Covener
> And I get the same results with using wget instead of a browser (just to > isolate that part of the problem): > moseley@bair ~/Documents/apache $ cat ~/.wgetrc > https_proxy = https://localhost:8443 Generally browsers don't speak https to https proxies. They use HTTP. --

Re: [users@httpd] mod_proxy SSL forward proxy

2011-08-24 Thread Bill Moseley
On Wed, Aug 24, 2011 at 12:47 PM, J-H Johansen wrote: > > I've never used Apache like this before but I suspect that you may need the > SSLProxyEngine directive as well. > http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslproxyengine > Thanks. I was just about to update my message --- I hav

Re: [users@httpd] mod_proxy SSL forward proxy

2011-08-24 Thread J-H Johansen
On Wed, Aug 24, 2011 at 11:16 AM, Bill Moseley wrote: > Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8r > OS X 10.6.8 > > I need help with a forward proxy setup and SSL. > > I have created a simple httpd.conf file with two virtual hosts, listening > on 8080 and 8443 (accepting SSL connections)

[users@httpd] mod_proxy SSL forward proxy

2011-08-24 Thread Bill Moseley
Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8r OS X 10.6.8 I need help with a forward proxy setup and SSL. I have created a simple httpd.conf file with two virtual hosts, listening on 8080 and 8443 (accepting SSL connections). I'm using a self-signed certificate for testing. WIth this confi

Re: [users@httpd] printing/checking config values

2011-08-24 Thread Pete Houston
On Wed, Aug 24, 2011 at 10:35:18AM +0530, Amlan Mandal wrote: > Is there any way to check/print what is the value of ServerTokens on > runtime? Yes, you can use the facilities of mod_info to determine the values set by various directives at runtime. See http://httpd.apache.org/docs/2.2/mod/mod_inf