[users@httpd] Re: ModSecurity and custom headers

2017-02-28 Thread Andrei
Is there a different list I should be asking this on? On Mon, Feb 27, 2017 at 8:49 AM, Andrei wrote: > Hi all, > > How can I add a custom header using the 'msg' value from a ModSecurity > rule, for all rules triggered? I'm basically trying to track the ModSec > block reason at an edge point (Var

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Marat Khalili
> I spent some time looking at the P option for mod_rewrite but I got the > impression that it would only work in the case of the reverse proxy > situation.  I was not able to get it to work but I wanted to make sure you > thought there was potential for that to help with my forward proxy issue

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Daniel Frank
Marat, Thank you again for your response. You are correct, I cannot enumerate all of the targets because we do not know about any of them and they could potentially be any IP or URI reachable by the system. I spent some time looking at the P option for mod_rewrite but I got the impression that i

[users@httpd] RE : [users@httpd] RE : [users@httpd] RE : [users@httpd]

2017-02-28 Thread Stéphane Laurencelle
Hello Eric, Inever had a startup problem before. At first i try with mod_jk just like it was install and configure on apache 2.2 + tomcat 7 environment and i got those type of error on the new environment so someone suggest me to try with proxy_mod_ajp. What i did but when i'm verifying the mo

Re: [users@httpd] RE : [users@httpd] RE : [users@httpd]

2017-02-28 Thread Eric Covener
On Tue, Feb 28, 2017 at 1:13 PM, Stéphane Laurencelle wrote: > after that in my httpd-vhosts.conf file that is use for my different vhost > define on this server i add those line for testing ajp call : So you no longer have a startup error about loaded modules. How do you know you're hitting th

[users@httpd] RE : [users@httpd] RE : [users@httpd]

2017-02-28 Thread Stéphane Laurencelle
Hello Éric here is what i see when i use mod_jk module instead of the proxy_mod_ajp module [Tue Feb 28 13:34:09.137 2017] [23245:140478953539328] [debug] ajp_process_callback::jk_ajp_common.c (2135): (ajp13instance9) AJP13 protocol: Reuse is OK [Tue Feb 28 13:34:09.137 2017] [23245:14047895353

[users@httpd] RE : [users@httpd] RE : [users@httpd]

2017-02-28 Thread Stéphane Laurencelle
What i have done is in the http.conf file uncomment both lines LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_ajp_module modules/mod_proxy_ajp.so after that in my httpd-vhosts.conf file that is use for my different vhost define on this server i add those line for testing ajp cal

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Marat Khalili
Solution using reverse proxy does not require any control over proxied services, but you'll need to enumerate them all in your proxy configuration. Proxy will discriminate requests by hostname and port and forward them to specified services. This will give you additional control and security at

Re: [users@httpd] RE : [users@httpd]

2017-02-28 Thread Eric Covener
On Tue, Feb 28, 2017 at 11:23 AM, Stéphane Laurencelle wrote: > when i look at apachectl -M, i don't see the ajp module load but i see the > proxy_mod module > and when i try i get an error 404 in the apache log. > > i don't know where to look to debug the module not loading in apache. If you u

[users@httpd] RE : [users@httpd]

2017-02-28 Thread Stéphane Laurencelle
Hello Eric, when i look at apachectl -M, i don't see the ajp module load but i see the proxy_mod module and when i try i get an error 404 in the apache log. i don't know where to look to debug the module not loading in apache. Stephane De : Eric Cove

Re: [users@httpd]

2017-02-28 Thread Eric Covener
On Tue, Feb 28, 2017 at 10:45 AM, Stéphane Laurencelle wrote: > even if i uncomment the line in httpd.conf file for enabling the module it > don't seem to load What do you observe exactly? -- Eric Covener cove...@gmail.com - T

[users@httpd]

2017-02-28 Thread Stéphane Laurencelle
Hi' i'm trying to use mod_proxy_ajp module with apache 2.4.25 and tomcat 8.5.11 on oel 6.8 even if i uncomment the line in httpd.conf file for enabling the module it don't seem to load, i read that i need to also activate mod_proxy module and that is done. do you know if a bug exist that would

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Daniel Frank
I see how my original question made it sound like a single service. I was trying to keep the scenario as simple as possible and probably over simplified it. The reality is that the endpoint we will be connecting to will be many appliances at many different IPs. Regarding using a reverse proxy, e

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Daniel Frank
I see how my original question made it sound like a single service. I was trying to keep the scenario as simple as possible and probably over simplified it. The reality is that the endpoint we will be connecting to will be many appliances at many different IPs. Regarding using a reverse proxy, e

Re: [users@httpd] download stops at 1kB

2017-02-28 Thread Erich Eckner
Hi Luca, I'm somewhat unsure which configuration is used by apache, because it's all configured via plesk-parallels panel (ugh). So I put my configuration files and access/error_log online under eckner.net/apache2.conf (/etc/apache2/apache2.conf) eckner.net/httpd.conf (/var/www/vhosts/system/eckn

Re: [users@httpd] mod_lua and subprocess_env

2017-02-28 Thread Andrei Ivanov
On Tue, Feb 28, 2017 at 2:02 PM, Eric Covener wrote: > On Mon, Feb 27, 2017 at 4:58 AM, Andrei Ivanov > wrote: > > But I think mod_headers has some different way of interpreting > expressions, > > because this doesn't work: > > The grammar has different starting points for expressions that resol

Re: [users@httpd] mod_lua and subprocess_env

2017-02-28 Thread Eric Covener
On Mon, Feb 27, 2017 at 4:58 AM, Andrei Ivanov wrote: > But I think mod_headers has some different way of interpreting expressions, > because this doesn't work: The grammar has different starting points for expressions that resolve to boolean values vs. strings. I think that's what's biting some

Re: [users@httpd] mod_lua and subprocess_env

2017-02-28 Thread Andrei Ivanov
On Mon, Feb 27, 2017 at 11:58 AM, Andrei Ivanov wrote: > On Fri, Feb 24, 2017 at 10:58 PM, Andrei Ivanov > wrote: > >> On Feb 24, 2017 22:54, "Yann Ylavic" wrote: >> >> On Fri, Feb 24, 2017 at 6:50 PM, Andrei Ivanov >> wrote: >> > >> > I've managed to apply your patch and rebuild Apache and no

Re: [users@httpd] download stops at 1kB

2017-02-28 Thread Luca Toscano
Hi Eric, 2017-02-27 20:21 GMT+01:00 Erich Eckner : > Hi, > > I have a strange problem: > I'm running an apache server (Apache/2.2.22 under Debian) with several > vhosts, one of which is hosted at crux.eckner.net, on a vps. > The index document "http://crux.eckner.net/index.html"; stops > transfer

[users@httpd] Re: Apache 2.4 Mod Speling

2017-02-28 Thread Sweeny, Theo (Chief Customer Office)
Hi - I did some further digging around on Mod Speling and came across this forum - https://www.drupal.org/node/268561 It suggests that if Mod Rewrite is enabled alongside Mod Speling that there will be a conflict, resulting in Mod Speling not working. Can anyone confirm if this is the case? Th