Re: [users@httpd] Security question

2015-07-02 Thread David Grant
Cgi module in php? Sent from my iPad > On Jul 2, 2015, at 5:00 AM, Victor Sterpu wrote: > > Hello > > A hacker attacked a apache2 web server by HTTP injection. > The log show what he has done: > 62.1.212.154 - - [01/Jul/2015:17:02:06 +0300] "GET /phppath/cgi_wrapper > HTTP/1.1" 404 280 "-" "(

Re: [users@httpd] Apache 2.4 Problems

2015-01-17 Thread David Grant
for me, it’s /etc/apache2 And that’s on several machines. On Jan 17, 2015, at 6:22 PM, Chris Arnold wrote: > >> On Jan 17, 2015, at 8:43 PM, David Grant wrote: >> >> Take a look at ports.conf. >> >> I think you’ll find what you’re looking for in that fi

Re: [users@httpd] Apache 2.4 Problems

2015-01-17 Thread David Grant
Take a look at ports.conf. I think you’ll find what you’re looking for in that file, and then amend https.conf accordingly. Hope that helps. On Jan 17, 2015, at 4:15 PM, Chris Arnold wrote: >> Apache 2.4 on sles 12. I understand this version is way >different from 2.2 >> but I can't get 2.

Re: [users@httpd] 2.4 Configuration Errors

2015-01-15 Thread David Grant
from 2.2 to 2.4 'deny' should be replaced with ‘denied’ On Jan 15, 2015, at 2:20 PM, Chris Arnold wrote: > > apache 2.4.10 on SLES 12. We are moving from apache 2.2.x on SLES 11 SP3 and > when i migrate our current http settings into 2.4.10 and rcapache2, i get > this error: > > > Jan 15 1

Re: AW: [users@httpd] rotatelogs.exe keeps one giant file [wd-vc]

2014-09-26 Thread Ethan Grant
Kurt, Why is there no gravity? Ethan Grant On Thursday, September 25, 2014 6:10 PM, Wei-min Lee wrote: What's the date/time stamp on the one error log? As Kurt said, and from what I read online, files are only generated when there's output for that log. I think 2.4.10 has a

Re: [users@httpd] Re: apache service interruption

2013-08-01 Thread Grant
;re connecting with a shared IP from a university campus (for example)? How is this accomplished with iptables? - Grant >>> Two different things come to mind. Kingcope found an Apache byterange >>> vulnerability and the PoC code he wrote for it exhausts the resources on &

Re: [users@httpd] Re: apache service interruption

2013-08-01 Thread Grant
does apache prevent that from happening? - Grant >>> You wouldn't keep a syn proxy rule enabled all the time; only under a DoS >>> attack. You could also implement ModSecurity. >> >> >> ModSecurity looks good and I think it works with nginx as well as >&

Re: [users@httpd] Re: apache service interruption

2013-08-01 Thread Grant
=500 body=20,MinRate=500 Will that do anything to prevent someone from opening too many connections and interrupting the apache service? - Grant - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: apache service interruption

2013-07-29 Thread Grant
lient requesting too many pages and interrupting the service? - Grant >>> Also, you should be able to limit simultaneous client connections with >>> your >>> firewall and pass the traffic in a syn proxy state. There are numerous >>> ways >>> to achieve

Re: [users@httpd] Re: apache service interruption

2013-07-29 Thread Grant
> Also, you should be able to limit simultaneous client connections with your > firewall and pass the traffic in a syn proxy state. There are numerous ways > to achieve this. Is that the best way to go besides OSSEC HIDS? I can imagine that sort of thing could cause problems. - Grant

Re: [users@httpd] Re: apache service interruption

2013-07-29 Thread Grant
> You can always compile from source ;) > What version of Apache are you running? I'm running 2.2.25. - Grant >>> Was it just an IP exhausting the apache service with too many >>> connections? What do you see in the access logs? I use OSSEC HIDS on my >&g

Re: [users@httpd] Re: apache service interruption

2013-07-29 Thread Grant
usted the apache service. It looks like there isn't a Gentoo ebuild for OSSEC HIDS. Is there another way to prevent this sort of thing? - Grant >>> My server has 4GB RAM and uses nginx as a reverse proxy to apache. A >>> little while ago my website became inaccessible for ab

[users@httpd] Re: apache service interruption

2013-07-27 Thread Grant
swap > usage don't show anything interesting at all. > > Does this make sense to anyone? Should I decrease MaxClients? > > - Grant I've looked over my access_log and I can see there is a particular IP which was making many requests during the interruption. Since munin does no

[users@httpd] apache service interruption

2013-07-26 Thread Grant
ng at all. Does this make sense to anyone? Should I decrease MaxClients? - Grant - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Deny access to all but 2 paths

2012-02-28 Thread Grant
deny > Allow from all > > > > SetHandler None > AuthType None > > > > SetHandler None > AuthType None > > > I'm hoping that / will be handled by perl-script with the exception of > everything in /folder, and that everything in /folder will requir

Re: [users@httpd] Deny access to all but 2 paths

2012-02-28 Thread Grant
do I need to use a separate VirtualHost for those >>>>> files? >> >> Does anyone know if this can be done? >> >> - Grant > > You can try to exclude exactly those two with a locationmatch, or just > use and then two for the separate URL's to > revert th

Re: [users@httpd] Deny access to all but 2 paths

2012-02-27 Thread Grant
>>> I have some settings inside a block that I need applied >>> to all but those same files: >>> >>> /folder/file.html >>> /folder/file.txt >>> >>> Can that be done or do I need to use a separate VirtualHost for t

Re: [users@httpd] Deny access to all but 2 paths

2012-02-26 Thread Grant
>> I have some settings inside a block that I need applied >> to all but those same files: >> >> /folder/file.html >> /folder/file.txt >> >> Can that be done or do I need to use a separate VirtualHost for those >> files? >> >> - Grant &g

Re: [users@httpd] Deny access to all but 2 paths

2012-02-26 Thread Grant
>> Can anyone tell me how to deny access to all paths/files/locations >> within a VirtualHost except for these: >> >> /folder/file.html >> /folder/file.txt >> >> - Grant > > Maybe something like this? > > >      Order deny,allo

[users@httpd] Deny access to all but 2 paths

2012-02-26 Thread Grant
Can anyone tell me how to deny access to all paths/files/locations within a VirtualHost except for these: /folder/file.html /folder/file.txt - Grant - The official User-To-User support forum of the Apache HTTP Server Project

[users@httpd] domain name Question

2011-10-16 Thread Stephen Grant Brown
Hi All, I have a domain name registered with a ISP. Do I need my own DNS server to be able to host my website usine Apache? Yours Sincerely Stephen Grant Brown

[users@httpd] win32 cgi (Apache) port to linux (Apache)

2011-09-25 Thread Al Grant
Hi All, I have a win32 executeable which contains a win32 Apache cgi. http://www.mobotix.com/other/Support/Software-Downloads/MxControlCent...

[users@httpd] Apache 2.2 + PHP5 + SuExec + (fast-cgi or mod_fcgid)

2011-06-28 Thread Grant Peel
Hello Everyone, I am researching how to run PHP as CGI with Apache's Suexec module. Up to this point we have been using PHP as an Apache mod, but are looking to move to the more secure solution. I am not sure this is exactly the right list top post to so if anyone knows a better one please l

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-08 Thread Grant
ut if Opera is directed to load an https page it displays the same error page it displays when the SSL cert is invalid. - Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/users

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-08 Thread Grant
d I have ServerName in the port 80 vhost blocks or is >>> it sufficient in the SSL blocks? >> >> without it, the site visitors will only get the ip address url. even on >> http sites. > > Not in 2.2.x by default they won't. See UseCanonicalNa

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-08 Thread Grant
to implement name based virtual hosts, and are available with the same clients. The CGI variables SERVER_NAME and SERVER_PORT will be constructed from the client supplied values as well. http://httpd.apache.org/docs/current/mod/core.html#usecanonicalname - Grant --

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-07 Thread Grant
verName entirely works >> for Firefox, but in that case SSL wouldn't work for either domain in >> Opera. >> >> I thought ServerName was just a label like ServerAdmin.  Should I be >> OK having it defined only in each of my SSL VirtualHost blocks? >> >> Tha

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-06 Thread Grant
moving ServerName entirely works for Firefox, but in that case SSL wouldn't work for either domain in Opera. I thought ServerName was just a label like ServerAdmin. Should I be OK having it defined only in each of my SSL VirtualHost blocks? Thanks a lot for everyone's help with this. - Gra

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-06 Thread Grant
ernet HWaddr [removed] inet addr:12.34.56.2 Bcast:[removed] Mask:255.255.255.248 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interrupt:40 - Grant - The official User-To-User support forum of t

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-05 Thread Grant
t to represent my separate IPs. ... SSLCertificateFile /etc/apache2/ssl/www.example1.com.crt SSLCertificateKeyFile /etc/apache2/ssl/www.example1.com.key ... ... SSLCertificateFile /etc/apache2/ssl/www.example2.com.crt SSLCertificateKey

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-05 Thread Grant
m.crt SSLCertificateKeyFile /etc/apache2/ssl/www.example1.com.key ... I can see that pings to www.example2.com are resolved as 12.34.56.2 and http://www.example2.com works fine, but https://www.example2.com still receives the www.example1.com SSL cert in firefox and opera. Can anyone tell me what el

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-04 Thread Grant
/etc/pki/ssl/$servername.pem >        ErrorLog /var/log/httpd/$servername/error_log >     > > > > , and then > > Use SSLVhost servername IP > > In some or the other file. That's one line you have to add -- and then you do > an > apachectl graceful. I see, t

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-04 Thread Grant
omething like this exist? I've read references to "pre-processing apache2 config files with perl". Is that the way to go here? - Grant >> Why would you use multiple IPs instead of X.509 v3 with >> subjectAltName?  Does subjectAltName have any drawbacks? > > Though m

Re: [us...@httpd] Options for multiple SSL domains on 1 server

2010-10-04 Thread Grant
o define different domain names on the fly within my perl scripts without changing apache2 config. Maybe we're just not there yet? Why would you use multiple IPs instead of X.509 v3 with subjectAltName? Does subjectAltName have any drawbacks? - Grant --

[us...@httpd] Options for multiple SSL domains on 1 server

2010-10-01 Thread Grant
o relying on X.509 v3 with subjectAltName, or is that the way to go? - Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubsc

[us...@httpd] Logging of rejected SSL ciphers?

2010-05-08 Thread Grant
Will a failed SSL handshake due to a rejected SSL cipher appear in the ssl_error_log? I haven't seen any such error and I've been testing different ciphers, some of which have been rejected. How can I be alerted (logging, etc.) when an SSL handshake fails due to a rejected cipher

Re: [us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Grant Peel
mod_rewrite or some other tool to parse the content (html cide), (and obliterate it possibly) before it is even sent to the client? And yes, we are working on the root issue, etc. Thanks, -Grant - Original Message - From: "Nicholas Sherlock" To: Sent: Sunday, May 24,

[us...@httpd] iFrame Injection Blocking

2009-05-24 Thread Grant Peel
cmpletely pulled by the client?). Also, any links or discussion that anyone has on the dereded 'Gumblar' exploit would be appreciated. -Grant

[us...@httpd] Security Consulting.

2009-03-30 Thread Grant Peel
s run time, and security related items. TIA, -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-

Re: [us...@httpd] Authentication IP restriction by user?

2009-01-19 Thread Grant
from IP address 1.2.3.4 ? > AND/OR Thanks for your response, the above is what I'm after. I don't want certain users to be able to log in with their password unless they are doing so from a certain IP. - Grant > - accesses from addresses other than 1.2.3.4 must always authentica

[us...@httpd] Authentication IP restriction by user?

2009-01-19 Thread Grant
I have 2 users who need to be able to access a website from anywhere and 2 users who only need to access it from a certain IP. Can authentication be restricted to a certain IP for certain users, and not restricted for others? - Grant

[us...@httpd] persistent Basic Auth?

2009-01-17 Thread Grant
login for one apply to both? - Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsub

[EMAIL PROTECTED] Apache 2.2 +Suexec + Mailman

2008-10-09 Thread Grant Peel
. Thansk all, -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest

Re: [EMAIL PROTECTED] Logs

2008-09-11 Thread Grant Peel
Justin, Kewl! There are a few users in the home directory as well, and those users do not have a logs directory. How will logrotate handle that? (I am hoping you will say it just ignores a non existent path/file). -Grant - Original Message - From: "Justin Pasher" <[EM

Re: [EMAIL PROTECTED] Logs

2008-09-11 Thread Grant Peel
it states to use wildcards with caution (as always). So I have one question: Can I use a wildcard as such, /home/*/logs/access_log /home/*/logs/error_log The '*' being the wildcard to denote the home dir for virt_domain1.com virt_domain2.ca virt_domain3.net ... -Grant - Origin

[EMAIL PROTECTED] Logs

2008-09-10 Thread Grant Peel
through the rotatelogs util slow down the server much? -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EM

Re: [EMAIL PROTECTED] Here's a new one (to me).

2008-07-30 Thread Grant Peel
try and track down an offending script? -Grant - Original Message - From: "Joshua Slive" <[EMAIL PROTECTED]> To: ; "Grant Peel" <[EMAIL PROTECTED]> Sent: Wednesday, July 30, 2008 5:40 PM Subject: Re: [EMAIL PROTECTED] Here's a new one (to me). O

Re: [EMAIL PROTECTED] Here's a new one (to me).

2008-07-30 Thread Grant Peel
//lti-mail01.ltinetworks.com:25/ HTTP/1.0" 200 1401 "-" "-" 66.139.69.201 - - [29/Jul/2008:04:02:00 -0400] "CONNECT http://lti-mail01.ltinetworks.com:25 HTTP/1. 0" 400 226 "-" "-" I am really in need of stopping this! mod_security didnt seem to h

Re: [EMAIL PROTECTED] Here's a new one (to me).

2008-07-29 Thread Grant Peel
index.html = 1401 bytes. ? -Grant - Original Message - From: "William A. Rowe, Jr." <[EMAIL PROTECTED]> To: Sent: Tuesday, July 29, 2008 7:46 PM Subject: Re: [EMAIL PROTECTED] Here's a new one (to me). Grant Peel wrote: On this past Saturday, my server st

[EMAIL PROTECTED] Here's a new one (to me).

2008-07-29 Thread Grant Peel
ndows NT 5.1; SV1; .NET CLR 1.1.4322)" 66.139.69.201 - - [29/Jul/2008:04:01:58 -0400] "POST http://lti-mail01.ltinetworks.com:25/ HTTP/1.0" 200 1401 "-" "-" 66.139.69.201 - - [29/Jul/2008

[EMAIL PROTECTED] Statistics

2008-06-06 Thread Grant Peel
files, -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest

[EMAIL PROTECTED] external access error

2008-05-13 Thread Grant Stephenson
I had originally installed Apache server version 2.2.8 along with PHP and MySQL, but could not configure PHP to read the database. I uninstalled the individual components and instead installed wampserver 2.0. Everything works fine when accessing the server as localhost, but I am unable to ac

Re: [EMAIL PROTECTED] OSX Apache2.2 stop launch at startup

2008-04-08 Thread Andy Grant
<http://www.duke.edu/%7Emadil001/>> *Andy Grant <[EMAIL PROTECTED]>* 04/08/08 14:47 Please respond to users@httpd.apache.org To users@httpd.apache.org cc Subject Re: [EMAIL PROTECTED] OSX Apache2.2 stop launch at startup I assume you a

Re: [EMAIL PROTECTED] OSX Apache2.2 stop launch at startup

2008-04-08 Thread Andy Grant
^o o^o^o` 'o^oo^o` -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- <_http://www.duke.edu/~madil001/_ <http://www.duke.edu/%7Emadil001/>> *Andy Grant <[EMAIL PROTECTED]>* 04/08/08 14:35 Please respond to users@httpd.apache.org

[EMAIL PROTECTED] OSX Apache2.2 stop launch at startup

2008-04-08 Thread Andy Grant
How can I stop apache2 from launching when I turn on my Mac running OSX 10.5? I have been searching for an answer to this question, but guess I can't find the right wording to enter into Google. Thanks - The official User-To-U

Re: [EMAIL PROTECTED] RSS Feeds

2008-04-04 Thread Grant Peel
need any special knobs turned to allow and support RSS feeds? -Grant - Original Message - From: "Scott Courtney" <[EMAIL PROTECTED]> To: Sent: Thursday, April 03, 2008 12:07 PM Subject: Re: [EMAIL PROTECTED] RSS Feeds On Thursday 03 April 2008 11:27:28 Dragon wrote: If s

[EMAIL PROTECTED] RSS Feeds

2008-04-02 Thread Grant Peel
His all, I am running apache 2.x.x on all my FreeBSD servers. Is there anything special that needs to be done to allow users to start using RSS feeds? (MIME Types XML etc). -Grant

Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-31 Thread Grant Peel
- Original Message - From: "Joshua Slive" <[EMAIL PROTECTED]> To: ; "Grant Peel" <[EMAIL PROTECTED]> Sent: Monday, March 31, 2008 7:47 AM Subject: Re: [EMAIL PROTECTED] Logging Denied Referrers On Sun, Mar 30, 2008 at 8:32 PM, Grant Peel <[EMA

Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Grant Peel
Joshua, So, cand these be combined into one container somehow? Order Allow,Deny Allow from all Deny from env=block_bad_bots Options Indexes Includes FollowSymLinks # FollowSymLinks MultiViews AllowOverride Options All Order allow,deny Allow from all -Grant

Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Grant Peel
/1.4.1_04" block_bad_bots Order Allow,Deny Allow from all Deny from env=block_bad_bots -Grant - Original Message - From: "Joshua Slive" <[EMAIL PROTECTED]> To: ; "Grant Peel" <[EMAIL PROTECTED]> Sent: Sunday, March 30, 2008 12:53 PM

Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Grant Peel
All, I misspoke below, I am talking about User Agents not referrers! - Original Message - From: Grant Peel To: users@httpd.apache.org Sent: Sunday, March 30, 2008 12:15 PM Subject: [EMAIL PROTECTED] Logging Denied Referrers Hi all, As mentioned in previous emails, I am

[EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Grant Peel
server config, will the block those referrers from the VirtualHosts as well? 2. How can I set logging to see if SetEnvIf statements are doing what I intended them to do? -Grant

Re: [EMAIL PROTECTED] Spambots

2008-03-29 Thread Grant Peel
I have visited a few lists that help make up my current spam bot deny list. Can anyone reccomend a list thats reliably well written and up -to-date/updated frequently? -Grant - Original Message - From: "Joshua Slive" <[EMAIL PROTECTED]> To: ; "Grant Peel"

Re: [EMAIL PROTECTED] Spambots

2008-03-29 Thread Grant Peel
Mark, I take it from your reply that the only reliable way right now is to keep using the referrers deny method then? -Grant - Original Message - From: "Mark Space" <[EMAIL PROTECTED]> To: Sent: Saturday, March 29, 2008 12:38 PM Subject: Re: [EMAIL PROTECTED] S

[EMAIL PROTECTED] Spambots

2008-03-29 Thread Grant Peel
Hi all, I am being hit with a number of spam bots (email address harvesters) and have implimeted some deny referrers ruls as a short term fix. Does anyone know of any permanent long term fixes? -Grant

[EMAIL PROTECTED] Firefox and html

2008-03-04 Thread Grant Peel
, the resulting page shows html code (Firefox does not render the page). Any ideas? -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more

Re: [EMAIL PROTECTED] Cannot restart httpd

2008-01-03 Thread Grant Peel
eggdropp is an irc bot. You need to kill this, unless you know it is something different. Also, check your system, you have been breached. -Grant - Original Message - From: Liz Kim To: users@httpd.apache.org Sent: Thursday, January 03, 2008 2:30 PM Subject: Re: [EMAIL

Re: [EMAIL PROTECTED] apache2.2

2007-11-26 Thread Grant Peel
cd /usr/ports/www/apache22 make install clean done -Grant - Original Message - From: Bhakta To: users@httpd.apache.org Sent: Monday, November 26, 2007 4:57 AM Subject: [EMAIL PROTECTED] apache2.2 Hi List How do I install apache2.2.6 in freeBSD through ports

[EMAIL PROTECTED] httpd.conf shared modules

2007-11-26 Thread Grant Peel
che22/mod_security2.so LoadModule php4_modulelibexec/apache22/libphp4.so TIA, -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more

[EMAIL PROTECTED] 301 Redirects

2007-11-26 Thread Grant Peel
Hi all, I have a client for whom I have added about 500 301 redirects in thier VirtualHost container. The server has about 200 VirtualHosts total. What kind of performance issues would one think all those redirects have on the whole (Apache) server? -Grant

Re: [EMAIL PROTECTED] .htaccess and Server Side Includes

2007-11-21 Thread Grant Peel
Perfect, that what I thought. So, the .htaccess in the root of the virtual host will affect all subdirs and files below it right? Thanks Boyle, -Grant - Original Message - From: Boyle Owen To: users@httpd.apache.org Sent: Wednesday, November 21, 2007 11:08 AM Subject: RE

[EMAIL PROTECTED] .htaccess and Server Side Includes

2007-11-21 Thread Grant Peel
a feat? TIA, -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from th

[EMAIL PROTECTED] Apache Memory Usage,

2007-11-20 Thread Grant Peel
Hi all, Does any one have any good tips on makeing apache lean and mean from a memory perspective? I am using apaceh 2.2 on FreeBSD 6.2. Each one of my deamons is using about 1.8 - 2.5 % of available memory. (1 GB). -Grant

[EMAIL PROTECTED] weirdness in /tmp

2007-11-14 Thread Grant Peel
Hi all, I have a 400 MB resuorce.pag file, and a resourse.dir directory in my /tmp folder. It appears something is accessing them as I can see the files timestamp updated. Are they truely Apache files? DO I need to keep them? Can I delete them? Any answers will be appreciated. -Grant

[EMAIL PROTECTED] Server Setup.

2007-11-12 Thread Grant Peel
:/var/tmp/SSLSessionCache KeepAlive Off # keKeepAliveTimeout 5 # MaxKeepAliveRequests 500 # TimeOut 30 ServerRoot "/usr/local" # Ports Listen *:80 Listen *:443 comments, please. -Grant - The official User-To-User sup

[EMAIL PROTECTED] HTDigest

2007-11-08 Thread Grant Peel
Hi all, I have a security company hounding me to turn of HTDigest. Any idea how? Words of wisdom ... please. -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org

Re: [EMAIL PROTECTED] php and suexec

2007-10-24 Thread Grant Peel
ter this directories contents. - Original Message - From: Joshua Slive To: users@httpd.apache.org ; Grant Peel Sent: Wednesday, October 24, 2007 9:45 AM Subject: Re: [EMAIL PROTECTED] php and suexec On 10/24/07, Grant Peel <[EMAIL PROTECTED]> wrote: > > >

Re: [EMAIL PROTECTED] php and suexec

2007-10-24 Thread Grant Peel
Understood, BUT suexec will not allow a script to be written to outside the users home directory ... right? -Grant - Original Message - From: Joshua Slive To: users@httpd.apache.org ; Grant Peel Sent: Monday, October 22, 2007 11:12 AM Subject: Re: [EMAIL PROTECTED] php and

Re: [EMAIL PROTECTED] php and suexec

2007-10-22 Thread Grant Peel
right, it does not do that. PLEASE correct me if I am wronge! -Grant - Original Message - From: Matthew A. Bockol To: users@httpd.apache.org ; Grant Peel Sent: Monday, October 22, 2007 10:29 AM Subject: Re: [EMAIL PROTECTED] php and suexec Hi Grant, You might also con

[EMAIL PROTECTED] php and suexec

2007-10-22 Thread Grant Peel
primer on how to set this all up. TIA, -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTEC

[EMAIL PROTECTED] Log FIles

2007-10-22 Thread Grant Peel
the logs are rotated? (I am rotating those log with newsyslog). Is there something else I am missing? -Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org

Re: [EMAIL PROTECTED] ssl_error_log: unusably short session_id provided

2007-10-19 Thread Grant
guess I'll downgrade to 0.9.8e-r3 for > > now. Does anyone have any suggestions? > > > > - Grant > > > No suggestion but I am seeing these errors too. Downgrading openssl did fix this. - Grant - The o

[EMAIL PROTECTED] mod_security

2007-10-19 Thread Grant Peel
second one breaks the ability to read an email in Openwebmail (v2.51). Any ideas on this? # 2. Prevent XSS atacks (HTML/Javascript injection) #SecFilter "<(.|n)+>" TIA, -Grant - The official User-To-User s

[EMAIL PROTECTED] ssl_error_log: unusably short session_id provided

2007-10-16 Thread Grant
anyone have any suggestions? - Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] "

Re: [EMAIL PROTECTED] 127.0.0.1 access_log errors

2007-09-29 Thread Grant
256 > > MaxRequestsPerChild 100 > > No, those log messages rarely indicate any problem at all. But your > MaxRequestsPerChild setting is pretty-low if you are interested in > performance. Ok, would you use 0? I

Re: [EMAIL PROTECTED] 127.0.0.1 access_log errors

2007-09-29 Thread Grant
I might need to make a change in my prefork settings? I'm currently using: StartServers10 MinSpareServers 10 MaxSpareServers 20 MaxClients 256 MaxRequestsPerChild 100 - Grant --

[EMAIL PROTECTED] 127.0.0.1 access_log errors

2007-09-29 Thread Grant
quot; "Apache (internal dummy connection)" I read here: http://www.linuxquestions.org/questions/showthread.php?t=506054 that the "internal dummy connection" is used by apache-2.2 to signal its children to die, but the 404 and 400 ar

Re: [EMAIL PROTECTED] Mod Deflate and PDF

2007-06-25 Thread Grant Peel
Hi Tony, Thanks for the response. I have confirmed with some clients that some pdfs that were not working are again working. Just fyi. the lines below can be rewritten as: SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png|pdf|PDF|zip|mp3)$ no-gzip dont-vary (not that it matters), -Grant

Re: [EMAIL PROTECTED] Mod Deflate and PDF

2007-06-24 Thread Grant Peel
flate_log deflate SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-gzip dont-vary SetEnvIfNoCase Request_URI \.(?:exe|t?gz|zip|gz2|sit|rar)$ no-gzip dont-vary Any ideas why the logs appear broken? -Grant - Original Message - From: Grant Peel To: users@httpd.apache.org S

[EMAIL PROTECTED] Mod Deflate and PDF

2007-06-24 Thread Grant Peel
Hi all, It seems mod deflate may be causing some older versions of windows (98, 2000) to cracsh when pdf's are accessed. Does any one know of this and any patches/workarounds that might help? I am running FreeBSD 6.2 and apache 2.2.3. Mime types pehaps? -Grant

Re: [EMAIL PROTECTED] SSL and virtual hosts

2007-06-16 Thread Grant Peel
part of what the point of certificates is (along with encypting data) is to ensure you are connecting to the domain for which the cert was issued. mydomain.com is NOT the same in ssl as www.mydomain.com. The data (assuming the users says 'yes, continue to the site' in thier browser (when they

[EMAIL PROTECTED] mod_deflate DeflateCompressionLevel

2007-06-05 Thread Grant
vel 9'? - Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EM

Re: [EMAIL PROTECTED] Leaner httpd

2007-05-15 Thread Grant Peel
pages, but, sigh, my partner insists we parseall files a shtml (Includes), OpenWebmail using the speedy cgi backend. a few Userdirs. SO here is the list of modules loaded. Which ones can be removed? Do you think it will help speed and memory usage? TIA - Grant # Dynamic Shared Object

Re: [EMAIL PROTECTED] Leaner httpd

2007-05-14 Thread Grant Peel
- Original Message - From: Joshua Slive To: users@httpd.apache.org ; Grant Peel Sent: Monday, May 14, 2007 10:04 AM Subject: Re: [EMAIL PROTECTED] Leaner httpd On 5/14/07, Grant Peel <[EMAIL PROTECTED]> wrote: > > > Hi all, > > my server has bee

[EMAIL PROTECTED] Leaner httpd

2007-05-14 Thread Grant Peel
will help speed and memory usage? TIA - Grant # Dynamic Shared Object (DSO) Support LoadModule authn_file_module libexec/apache22/mod_authn_file.so LoadModule authn_dbm_module libexec/apache22/mod_authn_dbm.so LoadModule authn_anon_module libexec/apache22/mod_authn_anon.so LoadModule

[EMAIL PROTECTED] Apache and X-Cart

2007-05-10 Thread Grant Peel
Hi, I was wondering if anyone else has seen CPU usage skyrocket after upgrading to X-Cart 4.x.x ? I have optimized my Apache conf file about as much as I can, but still the CPU usage trippled after upgrading. -Grant

Re: [EMAIL PROTECTED] mod_gzip

2007-05-01 Thread Grant Peel
Actually, I will be moving to Apache 2.2.3 (using deflate)soon, but want to cap the bandwidth on the server in question until then. -Grant - Original Message - From: Nick Kew To: users@httpd.apache.org Sent: Tuesday, May 01, 2007 3:07 PM Subject: Re: [EMAIL PROTECTED

[EMAIL PROTECTED] mod_gzip

2007-05-01 Thread Grant Peel
know of a fix for this? FreeBSD 4.7 Apache 1.3.26 TIA, -Grant

Re: [EMAIL PROTECTED] mod_deflate and diminishing returns

2007-03-14 Thread Grant
It was thus said that the Great Grant once stated: > Hello, at what page size does it no longer make sense to use > mod_deflate would you say? If mod_deflate uses the same compression as gzip, then the test I just did on some small files indicates maybe about 100-120 bytes is the brea

[EMAIL PROTECTED] mod_deflate and diminishing returns

2007-03-13 Thread Grant
Hello, at what page size does it no longer make sense to use mod_deflate would you say? - Grant - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for m

  1   2   >