Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Igor Cicimov
On 14/03/2015 2:21 PM, "el kalin" wrote: > > i don't see it in package ports… > > On Fri, Mar 13, 2015 at 7:59 PM, Jim Albert wrote: >> >> On 3/13/2015 7:54 PM, el kalin wrote: >>> >>> >>> >>> On Fri, Mar 13, 2015 at 7:36 PM, Jim Albert >> > wrote: >>> >>> On 3/13/2

Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread el kalin
i don't see it in package ports… On Fri, Mar 13, 2015 at 7:59 PM, Jim Albert wrote: > On 3/13/2015 7:54 PM, el kalin wrote: > >> >> >> On Fri, Mar 13, 2015 at 7:36 PM, Jim Albert > > wrote: >> >> On 3/13/2015 7:17 PM, el kalin wrote: >> >> >> if i have this

Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Jim Albert
On 3/13/2015 7:54 PM, el kalin wrote: On Fri, Mar 13, 2015 at 7:36 PM, Jim Albert mailto:j...@netrition.com>> wrote: On 3/13/2015 7:17 PM, el kalin wrote: if i have this in the Order allow,deny Allow from all deny f

Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread el kalin
On Fri, Mar 13, 2015 at 7:36 PM, Jim Albert wrote: > On 3/13/2015 7:17 PM, el kalin wrote: > >> >> if i have this in the >> >> >> >> Order allow,deny >> Allow from all >> deny from 111.10.250.188 >> >> ESTABLISHED >> tcp0 0 ip-10-102-190-93.http 111.10.

RE: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Gary Smith
But isn't that what he's trying to do or did I misread it? He wants to deny everything on the block list (i.e. the one IP) and allow everything else. From: Eric Covener [cove...@gmail.com] Sent: Friday, March 13, 2015 4:44 PM To: users@httpd.apache.org Su

Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Eric Covener
On Fri, Mar 13, 2015 at 7:21 PM, Gary Smith wrote: > Order deny,allow > > Allow from all > deny from 111.10.250.188 "deny,allow" means deny directives are processed before allow directives. So this is clearly wrong. 95% of the time, if the order in the config differs fro

Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Jim Albert
On 3/13/2015 7:17 PM, el kalin wrote: if i have this in the Order allow,deny Allow from all deny from 111.10.250.188 how come this: tcp0 0 ip-10-102-190-93.http 111.10.250.188.21806 ESTABLISHED tcp0 0 ip-10-102-190-93.http 111.10.250

Re: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Mark Montague
On 2015-03-13 19:17, el kalin wrote: if i have this in the Order allow,deny Allow from all deny from 111.10.250.188 how come this: tcp0 0 ip-10-102-190-93.http 111.10.250.188.21806 ESTABLISHED Your configuration says "do not serve anything from the

RE: [users@httpd] ESTABLISHED connections

2015-03-13 Thread Gary Smith
Try flipping the order to deny first. This is a first match rule IIRC, and since the first rule is Allow from all, the deny isn't hit. Order deny,allow Allow from all deny from 111.10.250.188 Sorry for the top post... From: el

[users@httpd] ESTABLISHED connections

2015-03-13 Thread el kalin
if i have this in the Order allow,deny Allow from all deny from 111.10.250.188 how come this: tcp0 0 ip-10-102-190-93.http 111.10.250.188.21806 ESTABLISHED tcp0 0 ip-10-102-190-93.http 111.10.250.188.21805 ESTABLISHED tcp0 0

[users@httpd] Help on RewriteMap + RewriteCond - partial match

2015-03-13 Thread Isengard
Hi, please some help on RewriteMap + RewriteCond. I want RewriteCond to match only request's that start with a text from rewriteMap file. I did this but it only works as an exactly match. RewriteMap robots_page txt:/etc/robots_page.txt RewriteCond ${robots_page:%{REQUEST_URI}

[users@httpd] Acceptable client certificate CA names Limitations

2015-03-13 Thread daniel bryan
Hello, I have Apache 2.4 (win32) and have the following in my CA bundle. Root 1 Subordinate 1 Subordinate 2 My server was signed off Subordinate 1 When I do openssl s_client -connect server:443 it shows both Subordinate 1 and Subordinate 2 in the acceptable CA names. If I remove Subordinate 2

[users@httpd] centos 7: rewrite rule produces 503 Service Unavailable

2015-03-13 Thread robert rottermann
Hi there, I am in the process of moving a couple of sites from an elderly SuSe box to a virtual machine running centos. I have a (zope/plone based) server running on port 8080. The server can be reached accessing it directly trough port 8080, but when I want to access it trough apache using a