Re: [users@httpd] Block access to "OPTIONS *"

2016-02-11 Thread Spork Schivago
Thank you. I do see the 200 OK response. OPTIONS / HTTP/1.0 HTTP/1.1 200 OK Date: Fri, 12 Feb 2016 06:35:33 GMT Server: Apache Allow: GET,HEAD,POST,OPTIONS Cache-Control: max-age=0, no-cache, no-store, must-revalidate Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Content-Length: 0 Con

Re: [users@httpd] Block access to "OPTIONS *"

2016-02-11 Thread Toomas Aas
On 02/12/2016 03:38 AM, Spork Schivago wrote: Sorry to put in here, but is there away for me to test to see if my server is affected by this OPTIONS issue? Testing is easy. Just telnet to port 80 of your server, type "OPTIONS / HTTP/1.0" and press Enter twice. $ telnet www.yoursite.com 80

Re: [users@httpd] Block access to "OPTIONS *"

2016-02-11 Thread Spork Schivago
Sorry to put in here, but is there away for me to test to see if my server is affected by this OPTIONS issue? I have cPanel / WHM and ConfigServer Firewall installed and just about every day, I see CSF blocking users from trying to hack in using some known hacking kit. Something with the word w0

Re: [users@httpd] Block access to "OPTIONS *"

2016-02-11 Thread Yann Ylavic
Hello, On Thu, Feb 11, 2016 at 10:56 PM, Toomas Aas wrote: > > Approach 1: > - > RewriteCond %{REQUEST_METHOD} OPTIONS > RewriteRule .* - [R=405,L] > - You also need to set: RewriteOptions AllowAnyURI for this to work. Bu

[users@httpd] Block access to "OPTIONS *"

2016-02-11 Thread Toomas Aas
Hello! An external party performed "security scan" against our web server which is running version 2.2.29. One of the findings is that OPTIONS directive is not blocked and I am tasked with fixing this. Google turns out two popular approaches: Approach 1: -

Re: [users@httpd] ApacheCon NA 2016 - Important Dates!!!

2016-02-11 Thread J Lance Wilkinson
Melissa Warnkin wrote: Hello everyone! I hope this email finds you well. I hope everyone is as excited about ApacheCon as I am! I'd like to remind you all of a couple of important dates, as well as ask for your assistance in spreading the word! Please use your social media platform(s) to

[users@httpd] ApacheCon NA 2016 - Important Dates!!!

2016-02-11 Thread Melissa Warnkin
Hello everyone! I hope this email finds you well.  I hope everyone is as excited about ApacheCon as I am! I'd like to remind you all of a couple of important dates, as well as ask for your assistance in spreading the word! Please use your social media platform(s) to get the word out! The more v

Re: [users@httpd] Renaming localhost

2016-02-11 Thread Greg Rundlett (freephile)
On Wed, Feb 10, 2016 at 4:57 AM, Raja wrote: > Hello, > > I sometimes work in remote sites with no network. I have the same setup > on different machines and I need the server name to know dynamically > where to do changes, etc. > It's not clear to me the situation that you're describing above.

Re: [users@httpd] How to build Apache with FIPS mode capable?

2016-02-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yann, On 2/10/16 6:11 PM, Yann Ylavic wrote: > Hi, > > On Wed, Feb 10, 2016 at 11:14 PM, Christopher Schultz > wrote: >> >> To those down and dirty with httpd: is there a reason not to >> UNCONDITIONALLY build against OpenSSL's FIPS_mode_set? If

Re: [users@httpd] Query on number of child process created for worker MPM

2016-02-11 Thread Rajesh Tammineni
Thank you for reply. Please find below for further comments.. > On 11 Feb 2016, at 10:31 PM, Luca Toscano wrote: > > Hi Rajesh! > > My comments inline: > > 2016-02-11 13:21 GMT+01:00 Rajesh Tammineni : >> >> I am running apache 2.2 version on Linux OS and there is no configuration >> values

[users@httpd] Options for setting up Apache server cluster ...

2016-02-11 Thread Rose, John B
Looking for recommendations for a good guide for setting up an Apache web server cluster Thanks

Re: [users@httpd] Query on number of child process created for worker MPM

2016-02-11 Thread Eric Covener
On Thu, Feb 11, 2016 at 7:21 AM, Rajesh Tammineni wrote: > I was in an impression the child process can create only 16 as per above > default ServerLimit value. Could you please clarify on this? If some are exiting due to MaxSpareThreads or MaxRequestsPerChild, or graceful restart, they don't co

Re: [users@httpd] Query on number of child process created for worker MPM

2016-02-11 Thread Luca Toscano
Hi Rajesh! My comments inline: 2016-02-11 13:21 GMT+01:00 Rajesh Tammineni : > > I am running apache 2.2 version on Linux OS and there is no configuration > values defined in my apache configuration. > > I believe it takes all below default values. > Please set the values that you need in the con

[users@httpd] Query on number of child process created for worker MPM

2016-02-11 Thread Rajesh Tammineni
Hi, I am running apache 2.2 version on Linux OS and there is no configuration values defined in my apache configuration. I believe it takes all below default values. ServerLimit 16 StartServers 2 MaxClients 400 MinSpareThreads 75 MaxSpareThreads 250 ThreadsPerChild 25 ListenBacklog 511 I am ob

[users@httpd] unsubscribe

2016-02-11 Thread Mark Van Crombrugge
unsubscribe