Re: [users@httpd] Re: apache service interruption

2013-07-27 Thread Michael D. Wood
Was it just an IP exhausting the apache service with too many connections? What do you see in the access logs? I use OSSEC HIDS on my apache servers to mitigate this. -- Sent from my mobile device Michael D. Wood www.itsecuritypros.org Grant wrote: >> My server has 4GB RAM and uses nginx as

Re: [users@httpd] Logging Base64 decoded info in access_log

2013-07-27 Thread Igor Cicimov
On 28/07/2013 3:36 AM, "Rainer Jung" wrote: > > On 27.07.2013 10:29, Pete Houston wrote: > > On Fri, Jul 26, 2013 at 12:39:37PM -0700, Jignesh Badani wrote: > >> Thanks Pete, yes, post processing the log file nightly is the option I was > >> considering. I am doing it currently on a per request ba

Re: [users@httpd] Logging Base64 decoded info in access_log

2013-07-27 Thread Rainer Jung
On 27.07.2013 10:29, Pete Houston wrote: > On Fri, Jul 26, 2013 at 12:39:37PM -0700, Jignesh Badani wrote: >> Thanks Pete, yes, post processing the log file nightly is the option I was >> considering. I am doing it currently on a per request basis. But I was >> hoping to avoid it if I could do it i

Re: [users@httpd] Re: Mod_rewrite END flag does not work for directory index

2013-07-27 Thread Eric Covener
Just occurred to me that just NS flag may be enough too. On Sat, Jul 27, 2013 at 11:49 AM, Eric Covener wrote: > On Sat, Jul 27, 2013 at 8:20 AM, Joyce Babu wrote: >> When the rule is placed in the VirtualHost context, it works correctly. But >> when it is placed in the Directory context or in a

Re: [users@httpd] Re: Mod_rewrite END flag does not work for directory index

2013-07-27 Thread Eric Covener
On Sat, Jul 27, 2013 at 8:20 AM, Joyce Babu wrote: > When the rule is placed in the VirtualHost context, it works correctly. But > when it is placed in the Directory context or in an .htaccess file, the > request is mapped to the FallbackResource. > > http://apaste.info/12Cw My recollection is th

[users@httpd] Re: Mod_rewrite END flag does not work for directory index

2013-07-27 Thread Joyce Babu
When the rule is placed in the VirtualHost context, it works correctly. But when it is placed in the Directory context or in an .htaccess file, the request is mapped to the FallbackResource. http://apaste.info/12Cw

[users@httpd] Re: apache service interruption

2013-07-27 Thread Grant
> My server has 4GB RAM and uses nginx as a reverse proxy to apache. A > little while ago my website became inaccessible for about 30 minutes. > I checked my munin graphs and it looks like apache processes spiked to > about 29 during this time which is many times greater than usual. I > have MaxC

[users@httpd] Mod_rewrite END flag does not work for directory index

2013-07-27 Thread Joyce Babu
The END flag for mod_rewrite in Apache 2.4 does not appear to be working correctly. I have a directory named test with a file test.html. I have placed an .htaccess file in the directory with the following content RewriteEngine on RewriteRule ^test$ test.html [NC,QSA,END] RewriteRule ^$ test.html

[users@httpd] webdav trigger external script

2013-07-27 Thread Aristedes Maniatis
I have a requirement to fire a script whenever a file is uploaded via webdav. In my case, I'm using this to trigger CSS compression and combining scripts when a user uploads a file. And also to exclude rubbish files like DS_Store. Although I have a current implementation using ftp, I'm having t

[users@httpd] Mod_proxy FailOnStatus based on error count

2013-07-27 Thread Mandar Jog
Is there a way to mark a balancer worker in 'error state' based on count or percentage of certain http errors. If my cluster has 3 members, and one of them is resulting in a large number of 500s then I would like to either mark the worker as 'bad' and remove it from the cluster. The number of err

Re: [users@httpd] Logging Base64 decoded info in access_log

2013-07-27 Thread Pete Houston
On Fri, Jul 26, 2013 at 12:39:37PM -0700, Jignesh Badani wrote: > Thanks Pete, yes, post processing the log file nightly is the option I was > considering. I am doing it currently on a per request basis. But I was > hoping to avoid it if I could do it in real time by calling on B64 decode > on the