Re: [users@httpd] RewriteCond and negative matching

2025-04-14 Thread Dave Wreski
like /news/myarticle.html, correct? I tried just adding it in the VirtualHost, but would like it to work for specific paths, not for any link that doesn't exist on the entire site. Thanks, Dave If you need the complexity of mod_rewrite, I would start by using

Re: [users@httpd] RewriteCond and negative matching

2025-04-14 Thread Dave Wreski
k for specific paths, not for any link that doesn't exist on the entire site. Thanks, Dave

[users@httpd] RewriteCond and negative matching

2025-04-13 Thread Dave Wreski
curity.com/apps should be redirected to the homepage. I've also tried negative matches, like the following. RewriteCond %{REQUEST_URI} !^/(news|features|newsletters)(/.*)?$ [NC] RewriteRule    ^ https://linuxsecurity.com [L,R=301,QSD] Ideas greatly appreciated. Thanks, Dave

[users@httpd] Simplyfing rewrite rules

2025-02-12 Thread Dave Wreski
Hi, Can someone help me to consolidate these rules into something more efficient? RewriteCond %{REQUEST_URI} !^/images/gen RewriteRule ^images/(.*)-esm-w([0-1]{1}[0-9]{2}|200)\.webp$ /images/gen/$1-esm-w200.webp [R=301,L] RewriteCond %{REQUEST_URI} !^/images/gen RewriteRule ^images/(.*)-esm-

[users@httpd] Rewrite without redirect?

2025-02-07 Thread Dave Wreski
Is it possible to strip a query string from a URL without also redirecting it? I'm adding QSD to existing redirects where applicable, but this would just be for URLs that aren't currently being redirected. dave

Re: [users@httpd] Using THE_REQUEST with rewrites

2025-01-11 Thread Dave Wreski
e following to my vhost config: MergeSlashes off but it doesn't make a difference. What could I be doing wrong? This is apache-2.4.69 on fedora40. https://httpd.apache.org/docs/2.4/mod/core.html#mergeslashes This works: RewriteCond %{THE_REQUEST}   "GET /http:/(.*) HTTP/1.1" RewriteRule ^ https://%1 [L,R=301,NE] dave

[users@httpd] Using THE_REQUEST with rewrites

2025-01-11 Thread Dave Wreski
rstand. Tracing the above URL looks like the slash is being stripped well before any rewriterules are involved. dave

Re: [users@httpd] Header set Link?

2024-11-17 Thread Dave Wreski
On 11/16/24 1:52 PM, Dave Wreski wrote: Header add Link "<https://%{HTTP_HOST}e%{REDIRECT_PDF_CANONICAL_URL}e>; rel=\"canonical\"" env=REDIRECT_PDF_CANONICAL_URL However, the %{HTTP_HOST} variable doesn't seem to be set. I don't think you can expect tha

Re: [users@httpd] Header set Link?

2024-11-16 Thread Dave Wreski
Header add Link "; rel=\"canonical\"" env=REDIRECT_PDF_CANONICAL_URL However, the %{HTTP_HOST} variable doesn't seem to be set. I don't think you can expect that environment variable to be defined. Maybe you want to switch the value argument t

[users@httpd] Header set Link?

2024-11-15 Thread Dave Wreski
Hi, I'm using httpd-2.4.62 on fedora40 and I would like to dynamically add a Canonical Tag to the HTTP Header. I set this in my .htaccess in the document root. SetEnvIf Request_URI "(.+)\.pdf$" PDF_CANONICAL_URL=$1\.pdf Header add Link ";

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-28 Thread Dave Wreski
Hi, thanks for your help. Bug created here. https://bz.apache.org/bugzilla/show_bug.cgi?id=69350 I can also provide a coredump (33MB). dave On 9/27/24 8:33 PM, Eric Covener wrote: Send the backtrace of all threads as an attachment or open a bug report and attach it there. https

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-27 Thread Dave Wreski
e allocation problem, as there's plenty of free memory. What else can I do to troubleshoot this? dave

Re: [users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-27 Thread Dave Wreski
ght. I do see a handful of other similar reports over the years, but none recently. Is it possible a configuration change has caused this? The gdb trace of the coredump is entirely too involved for me to spend time tracing it. dave What mpm are you using on that server?  Can you

[users@httpd] AH00051: child pid 3886730 exit signal Segmentation fault (11), possible coredump in /etc/httpd

2024-09-26 Thread Dave Wreski
imilar reports over the years, but none recently. Is it possible a configuration change has caused this? The gdb trace of the coredump is entirely too involved for me to spend time tracing it. dave

Re: [users@httpd] Brotli compression

2024-09-05 Thread Dave Wreski
ge Cache-Control "no-transform" This header was preventing cloudflare from compressing content, by design. dave On 9/4/24 3:55 PM, Dave Wreski wrote: Hi, I'm having difficulty setting brotli compression for one of our sites. I'm using the same config for all sites, but it&#

[users@httpd] AH00656 can't open DBM RewriteMap

2024-08-15 Thread Dave Wreski
Hi, I've just upgraded fedora38 to fedora40 with apache-2.4.62 and now my my rewritemap doesn't work: [Thu Aug 15 21:31:49.488178 2024] [rewrite:error] [pid 518406:tid 518478] (13)Permission denied: [client 68.195.111.42:0] AH00656: mod_rewrite: can't open DBM RewriteMap /etc/httpd/conf.d/my

Re: [users@httpd] RewriteRule and redirect loop with htaccess

2024-08-04 Thread Dave Wreski
ng, I also *just* figured out there's a problem with joomla that's involved here as well. dave

Re: [users@httpd] RewriteRule and redirect loop with htaccess

2024-08-04 Thread Dave Wreski
manage bots, run our image resizer, and an explicit list of files that are accessible - it's a default deny policy, which is why it redirects to the index.php at the end. RewriteCond %{REQUEST_URI} !^/index\.php RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule .* index.php [L] Thanks, Dave

Re: [users@httpd] RewriteRule and redirect loop with htaccess

2024-08-02 Thread Dave Wreski
es/linux-malware-the-truth-about-this-growing-threat-updated] HTTP response 200  [https://linuxsecurity.com//features] Thanks, Dave If you don't depend on mod_rewrite for anything else, I would recommend using RedirectMatch instead. That rule on its own won't loop, unless y

[users@httpd] RewriteRule and redirect loop with htaccess

2024-08-02 Thread Dave Wreski
t-updated] HTTP response 200  [https://linuxsecurity.com//features] Thanks, Dave

Re: [users@httpd] Simulating rewrite rules?

2024-07-15 Thread Dave Wreski
Hi, On 7/11/24 9:46 AM, Frank Gingras wrote: On Thu, Jul 11, 2024 at 4:49 AM Marc wrote: > > RewriteCond %{HTTP_USER_AGENT} ^$ > [OR] > RewriteCond %{HTTP_USER_AGENT} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|%00).* > [NC,OR] > RewriteCond %{HTTP_USER_AGENT} > ^.*(HTTrack|cls

[users@httpd] RewriteMap and combining RewriteRules

2024-07-14 Thread Dave Wreski
ith perhaps a RewriteCond where I may be able to have it process another RewriteRule? Or perhaps there's another way to use RewriteMap with dbm that I'm currently using to do this? Thanks, Dave - To unsubscribe, e-mail:

Re: [users@httpd] Simulating rewrite rules?

2024-07-10 Thread Dave Wreski
Hi, Hi, I have the following rewrite rule in place on one of our staging sites to redirect bots and malicious scripts to our corporate page:   RewriteCond %{HTTP_USER_AGENT} ^$ [OR]   RewriteCond %{HTTP_USER_AGENT} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|%00).* [NC,OR]   Rewri

[users@httpd] Simulating rewrite rules?

2024-07-09 Thread Dave Wreski
1145/6615/343 H:HTTP/1.1 U:/robots.txt s:200 Instead of making changes to my rules then having to wait until the condition is met (Googlebot scans the site again), I'd like to simulate the above request against my ruleset to see if it matches. Is this possible? Thanks, Dave

Re: [users@httpd] Removing single question mark?

2024-06-20 Thread Dave Wreski
Hi, I should add that I wrote the following to remove an errant question mark from the end of another URL, but it doesn't appear to work for the homepage. RewriteCond %{THE_REQUEST} /features\? [NC] RewriteRule ^ %{REQUEST_URI} [L,R=302,NE,QSD] Thanks, Dave On 6/20/24 7:01 PM, Dave W

[users@httpd] Removing single question mark?

2024-06-20 Thread Dave Wreski
,R=301,QSD] But it seems to ignore all of them. Ideas greatly appreciated. Thanks, Dave

Re: [users@httpd] Stripping trailing slashes (again)

2024-06-13 Thread Dave Wreski
t has made any difference. RewriteRule ^(.*)/+$ https://linuxsecurity.com$1 [R=301,END] I've also set logging to trace5 (even though none of the entries were above trace4) - shouldn't it provide me with enough info to determine where/why it's looping? If I remove the one RewriteEngine statement in my vhost config, it's clear that it does not process any RewriteRules at all. dave

[users@httpd] Stripping trailing slashes (again)

2024-06-13 Thread Dave Wreski
Hi, Some time ago I requested help with a rewrite rule to strip trailing slash(es) from all URLs in our joomla website, but I'm still having problems. This is the rule I am currently working with: RewriteRule ^(.*)/+$ https://linuxsecurity.com$1 [R=301,L] It works fine for any URL other than

Re: [users@httpd] Redirecting based on IP

2024-06-06 Thread Dave Wreski
ars related to triggering googlebot to also scan as another user agent, such as its mobile bot? dave

Re: [users@httpd] Redirecting based on IP

2024-05-17 Thread Dave Wreski
Hi, The staging site is even protected with a RequireAll statement for the DocumentRoot based on the IP, which then results in a 404 and other errors in GSC. That sound wrong. If your RequireAll was working as advertised, should it not return a 403? Yes, it does - my mistake. The next ste

[users@httpd] Redirecting based on IP

2024-05-15 Thread Dave Wreski
the production site. Is this possible? Perhaps a RewriteCond that depends upon certain IPs, then otherwise redirects to the production site? Thanks, Dave

Re: [users@httpd] Stripping query string except from specific URL

2024-04-28 Thread Dave Wreski
RewriteCond %{REQUEST_URI} !/resources/blog RewriteCond %{QUERY_STRING} ^start=\d+$ RewriteRule (.*)   /$1?    [L,R=301,QSD] [Sun Apr 28 15:40:02.614893 2024] ... rewrite 'resources/blog' -> 'index.php' [Sun Apr 28 15:40:02.614921 2024] ... internal redirect with

Re: [users@httpd] Stripping query string except from specific URL

2024-04-28 Thread Dave Wreski
Hi, I'm really quite stuck and hoped you could help. My apologies - the output was from wget, as that's what I typically use. $ curl 'https://guardiandigital.com/resources/blog?start=48' 301 Moved Permanently Moved Permanently The document has moved https

Re: [users@httpd] Stripping query string except from specific URL

2024-04-24 Thread Dave Wreski
13 62.111.193.42 - - [24/Apr/2024:15:19:36 -0400] "GET /index.php HTTP/1.1" 200 33921 r:"-" "Wget/1.21.4" X:"SAMEORIGIN" 0/129431 573/35481/33921 H:HTTP/1.1 U:/index.php gd443 s:200 It did exactly what you asked, yes. Further, I asked you to use curl to see if you get redirected f

Re: [users@httpd] Stripping query string except from specific URL

2024-04-24 Thread Dave Wreski
query string from all URLs except those involving /resources/blog: RewriteCond %{REQUEST_URI} !/resources/blog RewriteCond %{QUERY_STRING} ^start= RewriteRule (.*) https://guardiandigital.com$1 [L,QSD] What am I missing? Thanks, Dave To r

Re: [users@httpd] Stripping query string except from specific URL

2024-04-24 Thread Dave Wreski
URLs except those involving /resources/blog: RewriteCond %{REQUEST_URI} !/resources/blog RewriteCond %{QUERY_STRING} ^start= RewriteRule (.*) https://guardiandigital.com$1 [L,QSD] What am I missing? Thanks, Dave To remove the query string, see the QSD flag, or append a

[users@httpd] Stripping query string except from specific URL

2024-04-19 Thread Dave Wreski
those involving /resources/blog: RewriteCond %{REQUEST_URI} !/resources/blog RewriteCond %{QUERY_STRING} ^start= RewriteRule (.*) https://guardiandigital.com$1    [L,QSD] What am I missing? Thanks, Dave

Re: [users@httpd] RewriteMap and patterns

2024-03-28 Thread Dave Wreski
of putting the top 5000 key/value in the map to be really quick, then let the redirection.php script process the remaining legacy 70,000 or so... -- Profile Photo Dave Wreski Chief Executive Officer Guardian Digital Logo <https://www.guardiandigital.co

Re: [users@httpd] RewriteMap and patterns

2024-03-28 Thread Dave Wreski
Hi, First make the proper redirections:   RewriteEngine on   RewriteMap lsv2ids "txt:/etc/httpd/conf.d/linuxsecurity-lsv2ids.map"   RewriteRule "/content/view/(.*)" "${lsv2ids:$1}" [R,L] Define the fallback for requests not ending in PHP but for which I hand the php handler to deal them.   F

Re: [users@httpd] RewriteMap and patterns

2024-03-23 Thread Dave Wreski
t;/content/view/([0-9]{6})/?" "https://linuxsecurity.com/redirection/index.php?type=view&ids=$1&uri=$1"; I don't see how this would work, since both rules contain the same pattern. Ideas on how to go about this would be appreciated. Perhaps a RewriteMap prg rule?   RewriteMap mapper "prg:/etc/httpd/conf.d/mapper.php"   RewriteRule "/content/view/([0-9]{6})/?" "${mapper:$1}" Thanks, Dave

Re: [users@httpd] RewriteMap and patterns

2024-03-12 Thread Dave Wreski
On 3/11/24 4:42 PM, apmail-dferra...@apache.org wrote: On 09/03/2024 22:59, Dave Wreski wrote: Hi Eric, Might have to prefix with %{DOCUMENT_ROOT} I've tried variations of that, including the following, but no luck. They all fail with 400 or "invalid request" RewriteRule

Re: [users@httpd] RewriteMap and patterns

2024-03-09 Thread Dave Wreski
.*)" "%{DOCUMENT_ROOT}${lsv2ids:$1}" [PT] RewriteRule "/content/view/(.*)" "https://linuxsecurity.com${lsv2ids:$1}"; [PT] RewriteRule "/content/view/(.*)" "%{DOCUMENT_ROOT}${lsv2ids:$1}" dave

Re: [users@httpd] RewriteMap and patterns

2024-03-09 Thread Dave Wreski
ure this instead? dave

Re: [users@httpd] RewriteMap and patterns

2024-03-08 Thread Dave Wreski
HTTP/1.1" 404 2983 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" X:"SAMEORIGIN" 0/932130 1690/11576/2983 H:HTTP/1.1 U:/news/hackscracks/historic-hacker-attack-on-ebay-happened-3-months-ago ls443 s:404 V:linuxsecurity.com v:linuxsecurity.com Thanks, Dave

[users@httpd] RewriteMap and patterns

2024-03-07 Thread Dave Wreski
Hi, I'm trying to use RewriteMap on a few thousand older articles to map them to their modern equivalent. The pattern matches, but then the redirect doesn't occur. The examples and apache docs say I should be using [PT] to pass-through, but it results in a 404: [Thu Mar 07 09:56:47.696040 20

Re: [users@httpd] Limiting redirects with rewriterule/rewritecond

2024-02-29 Thread Dave Wreski
rmed the RewriteConds without R=301 and just rewrote the URL itself? I'm not sure how that works. Any ideas greatly appreciated. Thanks, Dave Perhaps you can, but be careful about not creating loops, especially if using .htaccess files. Do you mean because of patterns matchin

[users@httpd] Limiting redirects with rewriterule/rewritecond

2024-02-25 Thread Dave Wreski
ow that works. Any ideas greatly appreciated. Thanks, Dave

[users@httpd] Reducing redirects

2024-01-25 Thread Dave Wreski
ormance of every request. dave

Re: [users@httpd] Removing trailing slashes with query strings

2024-01-18 Thread Dave Wreski
accommodate query strings, or this particular query string? Thanks, Dave If your rules are in .htaccess, the latter file will be parsed over and over until it stops matching, so use the appropriate RewriteCond to break that loop, or better yet, edit your vhost i

Re: [users@httpd] Removing trailing slashes with query strings

2024-01-17 Thread Dave Wreski
rectorySlash here. Notice the last line redirected to itself, causing an infinite loop of redirects. I also wanted to add that, given the RewriteCond rule may be working correctly, how can I change it to accommodate query strings, or this particular query string? Thanks,

Re: [users@httpd] Removing trailing slashes with query strings

2024-01-16 Thread Dave Wreski
Hi, On 1/16/24 3:03 PM, Dave Wreski wrote: [Tue Jan 16 08:55:13.289205 2024] [rewrite:trace1] [pid 904886:tid 904938] mod_rewrite.c(493): [client 68.111.193.42:0 <http://68.111.193.42:0>] 68.195.193.42 - - [webstage.example.com/sid#560ba7f01a68][rid#7f2b1c0bc210/i

Re: [users@httpd] Removing trailing slashes with query strings

2024-01-16 Thread Dave Wreski
cs/2.4/mod/directive-dict.html#Status> Base Module: <https://httpd.apache.org/docs/2.4/mod/directive-dict.html#Module> mod_dir Thanks, Dave

Re: [users@httpd] Removing trailing slashes with query strings

2024-01-16 Thread Dave Wreski
laced back into the URL and I don't know where it comes from. Adding index.php to the path works properly because it's then not a directory: https://example.com/administrator/path/index.php?cms_settings Any ideas greatly appreciated. Thanks, Dave What d

[users@httpd] Removing trailing slashes with query strings

2024-01-15 Thread Dave Wreski
now where it comes from. Adding index.php to the path works properly because it's then not a directory: https://example.com/administrator/path/index.php?cms_settings Any ideas greatly appreciated. Thanks, Dave

Re: [users@httpd] Rewrite query string?

2024-01-04 Thread Dave Wreski
re specifically identify the rule I'm testing? I'm using: LogLevel info rewrite:trace5 Thanks, Dave

[users@httpd] Rewrite query string?

2024-01-04 Thread Dave Wreski
RewriteCond %{QUERY_STRING} ^searchword=(.*) RewriteRule ^   q=$1 [NC,L] Ideas for what I'm doing wrong would be greatly appreciated. Thanks, Dave

Re: [users@httpd] Removing trailing slashes?

2023-12-14 Thread Dave Wreski
tely about trying to figure out how to trace rewrites using LogLevel and trace, but it is very difficult to follow. Thanks, Dave

Re: [users@httpd] Removing trailing slashes?

2023-12-14 Thread Dave Wreski
aps I should instead be using '/?' instead of just '/' at the end of URLs? Thanks, Dave If the following rules look for a trailing slash and you remove it prior, in theory it won't match.  However, remember that .htaccess files will be parsed over and over u

[users@httpd] Removing trailing slashes?

2023-12-13 Thread Dave Wreski
f just '/' at the end of URLs? Thanks, Dave

[users@httpd] Tracing redirects

2023-11-24 Thread Dave Wreski
log lines associated with this redirect being created that it's impossible to trace. Do you have any tips on how to go about figuring this out? Any ideas greatly appreciated. Thanks, Dave

[users@httpd] RewriteRule and priorities

2023-07-16 Thread Dave Wreski
processing doesn't seem to matter. Thanks, Dave -- DaveWreski President & CEO Guardian Digital, Inc. We Make Email Safe 640-800-9446 dwre...@guardiandigital.com <mailto:dwre...@guardiandigital.com>

Re: [users@httpd] SetEnvIf and exceptions

2023-04-12 Thread Dave Wreski
Hi, On 4/11/23 8:59 PM, Tatsuki Makino wrote: Dave Wreski wrote on 2023/04/12 01:39: In case I wasn't clear, simply removing the caret was not enough to make this work. The "Require env SOMENAME2" was enough to begin blocking every page on the site with a 403, not just the R

Re: [users@httpd] SetEnvIf and exceptions

2023-04-11 Thread Dave Wreski
on RequireAll, but isn't that essentially saying AND? Require all AND Require not env SOMENAME1 AND Require env SOMENAME2? How can that ever match? I suppose that also means it wouldn't be RequireAny because it would always match the Require all. dave

Re: [users@httpd] SetEnvIf and exceptions

2023-04-11 Thread Dave Wreski
03 every page on the site. It's like each Require above is being considered independently, or that it somehow supersedes the previous Require. With the last Require commented out, it works as expected (blocking all bots listed in the SetEnvIf), with the exception that it also restricts libwww access to the RSS feeds. dave

Re: [users@httpd] SetEnvIf and exceptions

2023-04-11 Thread Dave Wreski
Hi, On 4/10/23 11:48 PM, Tatsuki Makino wrote: Dave Wreski wrote on 2023/04/11 10:54: SetEnvIf user-agent "(?i:TurnitinBot)" stayout=1 SetEnvIf Request_URI "^linuxsecurity_features\.*$" !stayout I have done it in the past, too. It was like allowing another level of condi

Re: [users@httpd] SetEnvIf and exceptions

2023-04-10 Thread Dave Wreski
"AH01630: client denied by server configuration:" Here's again what I have that doesn't appear to work: SetEnvIf user-agent "(?i:TurnitinBot)" stayout=1 SetEnvIf Request_URI "^linuxsecurity_features\.*$" !stayout     Require env !stayout RewriteRule linuxsecurity_features\.*$ - [L] Ideas greatly appreciated. Thanks, Dave

Re: [users@httpd] SetEnvIf and exceptions

2023-04-10 Thread Dave Wreski
error for virtually all accesses. Other ideas welcome :-) dave

Re: [users@httpd] SetEnvIf and exceptions

2023-04-10 Thread Dave Wreski
l HTTP/1.1" 403 199 "-" "LWP::Simple/6.00 libwww-perl/6.05" X:"SAMEORIGIN" 0/9629 979/8868/199 H:HTTP/1.1 This is all designed to prevent bots from being able to easily mirror our website. Even though I understand individuals could just change their user agent, sites like yandex/Acunetix and other services won't. dave

[users@httpd] SetEnvIf and exceptions

2023-04-08 Thread Dave Wreski
taccess file and allow access? I've also tried adding these RewriteRule entries to the server config htaccess with an Include, but it appears the .htaccess in the document root is always processed afterwards, even after finding match in the server config htaccess. Thanks, Dave

[users@httpd] Cloudflare logging and remote IP

2023-01-27 Thread Dave Wreski
update the access log with this info. https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs#S7Z4EJQFN997YRY Thanks, Dave -- DaveWreski President & CEO Guardian Digital, Inc. We Make Email Safe

[users@httpd] cache_disk:error and AH00717 errors

2022-11-28 Thread Dave Wreski
00 seconds, why is apache still looking in a location that is 60 days old? Why wasn't the entire directory removed when the cache expired? I believe we used to have htcacheclean set up as a daemon, but it hasn't run in some time. Is this related? Thanks, Dave -- DaveWreski Pre

[users@httpd] CSP Violation: "blocked-uri": "inline" despite having 'unsafe-inline'

2022-09-21 Thread Dave Wreski
script-src-elem 'unsafe-inline' 'self' example.com *.googletagmanager.com; script-src-attr 'self' 'unsafe-inline'; report-uri /csp-hotline.php", "disposition": "enforce", "blocked-uri": "inline", "line-num

[users@httpd] AH00717: Premature end of cache header

2021-09-20 Thread Dave Wreski
eport created in 2016 and last updated in 2020? https://bz.apache.org/bugzilla/show_bug.cgi?id=59744 Any idea how to troubleshoot this? Thanks, Dave - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional comman

[users@httpd] Redirects and rewrites and performance

2021-09-20 Thread Dave Wreski
f data that makes it very difficult to focus on just the one I'm interested in. LogLevel warn ssl:error auth_digest:error socache_shmcb:warn mpm_worker:warn fcgid:info cache_disk:debug log_config:debug rewrite:trace3 Thanks, Dave --

Re: [users@httpd] X-Frame-Options and security

2021-09-10 Thread Dave Wreski
https://httpd.apache.org/docs/2.4/en/mod/mod_headers.html#header What headers are returned by error pages and by redirects (e.g. 302 redirect when requesting a directory without a trailing '/')? What headers are returned by dynamic responses (proxied or CGI), if you have any? It appears to mo

Re: [users@httpd] X-Frame-Options and security

2021-09-10 Thread Dave Wreski
php Notice I've added the X-Frame-Options header to the LogFormat. Maybe like this, adapting an example from the docs: Header onsuccess unset X-Frame-Options Header always set X-Frame-Options "SAMEORIGIN" That fixed it, thanks. I'm now curious how it's apparently being set by default to include GOFORIT? Thanks, Dave

Re: [users@httpd] X-Frame-Options and security

2021-09-09 Thread Dave Wreski
reported that we were using both GOFORIT and SAMEORIGIN values. I used lynx to dump the headers and it only displays SAMEORIGIN, as it should. Where else can I look to see where this option is being set? Thanks, Dave On 9/1/21 7:43 PM, Eric Covener wrote: On Wed, Sep 1, 2021 at 7:30 PM Da

Re: [users@httpd] mod_status over SSL?

2021-09-07 Thread Dave Wreski
howto/access.html Yes, thanks for this as well. I've converted them all to "Require ip" and removed the old stuff. Thanks, Dave Jim - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additio

[users@httpd] mod_status over SSL?

2021-09-07 Thread Dave Wreski
Hi, I have an apache-2.4.48 server on fedora34 and would like to enable mod_status to be able to obtain server status information. However, the docs appear to say the only way to access it is over port 80, not SSL. Is that correct? Chrome is also expecting the site to be over SSL, of course.

Re: [users@httpd] X-Frame-Options and security

2021-09-02 Thread Dave Wreski
lways set Strict-Transport-Security "max-age=63072000; includeSubDomains" Header set Feature-Policy "geolocation 'self'; vibrate 'none'" Header set Content-Security-Policy "frame-ancestors 'self'" Thanks, Dave On 9/1/21 7

[users@httpd] X-Frame-Options and security

2021-09-01 Thread Dave Wreski
;self'; vibrate 'none'"     Header set Content-Security-Policy "frame-ancestors 'self'" No where are we setting GOFORIT. Is it somehow the default and necessary to explicitly disable it? Other ideas greatly appreciated. Thanks, Dave

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Dave Wreski
towards PHP/Joomla and possibly cloudflare as a source? Thanks, Dave - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Dave Wreski
rhaps it's still being proxied, even though it's not being cached, and causing these errors? Would it explain why the same page doesn't always produce the error, or why not all pages produce a 500 error? Thanks, Dave El mar, 20 abr 2021 a las 14:49, Dave Wreski () escribió:

Re: [users@httpd] Random 500 errors

2021-04-20 Thread Dave Wreski
ity-update HTTP/1.1" 500 12704 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 2/2408334 915/21235/12704 Thanks, Dave El mar., 20 abr. 2021 4:03, Dave Wreski escribió: Hi, I have an apache-2.4.46 system on fedora33 and havin

[users@httpd] Random 500 errors

2021-04-19 Thread Dave Wreski
blic Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 What does this mean? Is this just reporting the error or something related to mod_sec causing the error? Thanks, Dave - To unsubscribe, e-mail

[users@httpd] apache error 500 weirdness

2021-04-11 Thread Dave Wreski
ntry above appears to be 121 megabytes. How is that possible? How can I debug this? I have display_errors = On in my PHP settings and have debugging enabled for php-fpm but no errors are being reported. Thanks, Dave

[users@httpd] AH00717: Premature end of cache headers

2021-03-26 Thread Dave Wreski
time these directories should remain in place? How do you determine what a reasonable cache size should be? Does anyone have any idea what causes this? Is it in fact a bug, even after first being reported more than five years ago? Thanks, Dave --

[users@httpd] cache_disk:error - AH00708: Cannot open data file

2020-01-17 Thread Dave Wreski
lume site that works for you that you could share? Thanks, Dave - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] css files not loading

2019-06-10 Thread Dave Hock
tch the trailing slashes when using the ProxyPass directive. > The ProxyPassReverse should match too. > > On 09/06/19 10:15 PM, Dave Hock wrote: > > Hello, > > I am hoping to get some help with an issue concerning a reverse > > proxy setup and static files. >

[users@httpd] css files not loading

2019-06-09 Thread Dave Hock
from watching youtube videos. Also, these servers are raspberry pi 3+ minicomputers. I have asked for help on the raspberry pi forums but they directed me to here. Is this something you can assist with? Thanks very much, Dave Hock

[users@httpd] mod_cache_disk: AH00708: Cannot open data file

2019-04-01 Thread Dave Wreski
Hi all, I have a apache-2.4.34 system on fedora28 and have set up disk caching using "CacheQuickHandler off" to go through apache before being fetched from the cache and having some problems. [Mon Apr 01 14:16:48.908257 2019] [cache_disk:error] [pid 5955:tid 140305609242368] (2)No such file

[users@httpd] AH00708: Cannot open data file

2019-02-10 Thread Dave Wreski
/cache/httpd" CacheEnable disk CacheHeader on CacheDefaultExpire 800 CacheMaxExpire 64000 CacheIgnoreNoLastMod On ExpiresActive on ExpiresDefault A300 Any ideas for how to debug this further would be greatly appreciated. Thanks, Dave

[users@httpd] Apache SuexecUserGroup and group permissions

2019-01-09 Thread Dave Wreski
access by apache to reduce the chances of some kind of privilege escalation attack should there be an apache vulnerability, yet provide regular ftp/sftp users with the ability to write changes as well as joomla itself have the ability to operate? Thanks, Dave -

[users@httpd] This is done by ensuring that the web server can write to these locations.

2018-11-29 Thread Dave Stevens
I want to set up a folder so that I can use a plugin in wordpress, the instructions work up to the point where I get this direction, but I don't know how to ensure that the apache instance has write access to the folder. I have admin rights. Suggestions? Reference? TIA Dave -- In m

[users@httpd] Apache disk cache or app-based?

2018-10-23 Thread Dave Wreski
munited.com/products/speed-cache I'd be happy to forward on any further config details that were necessary. Thanks, Dave - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] SSI question

2016-03-01 Thread Dave Shaw
rstand, or I'm overlooking something obvious... > On Mon, Feb 29, 2016 at 10:22 AM, Dave Shaw wrote: > >> On 2/28/16, Yehuda Katz wrote: >> >> > What did you do to require passwords? >> >> An "AuthUserFile" entry was made in .htaccess for the

Re: [users@httpd] SSI question

2016-02-29 Thread Dave Shaw
On 2/29/16, Yehuda Katz wrote: > Is this commercial service using cPanel by any chance? It is. I'll see what else I can dig out. Dave - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional com

Re: [users@httpd] SSI question

2016-02-29 Thread Dave Shaw
rd stored in the .htpasswds file (elsewhere). "AuthType" is listed as "Basic", and another line stating "require valid-user". > On Feb 28, 2016 12:35 PM, "Dave Shaw" wrote: > >> Greetings-- We're setting up a website on a commercially-hosted serv

[users@httpd] SSI question

2016-02-28 Thread Dave Shaw
irectories, but it's acting like password protection might be doing a "chroot" to that directory or something similar. Is this an option in the server configuration? If you can help explain this I'd be appreciative. Dave -

[users@httpd] one apache virtual domain won't start

2015-03-18 Thread Dave Stevens
I don't know where to look with this. Suggestions? No problems with the others. Dave "As long as politics is the shadow cast on society by big business, the attenuation of the shadow will not change the substance." -- John Dewey -

  1   2   3   >