Re: [users@httpd] Preventing an open proxy with both a single SSL virtual host and a non-SSL virtual host

Just commenting on you're logged request, not your config... What was it that made you think you had an open proxy? Was it only requests like the one below? Where they all answered with status 403? Richard Mixon wrote: > After that we started getting flooded with requests such as the followin

Re: [users@httpd] Multible SSL sites for a single httpd/IP

is is typically done by setting multiple SubjectAltNames in the certificate. The SNI enhancements are only needed if you want/need to use different certificates. Regards /Jonas -- Jonas Eckerman http://www.truls.org/ ---

Re: [users@httpd] apache as ssl-proxy - recommended way?

er than proxying. If you put the servers behind a proxy, the clients will not talk directly to the servers. Regards /Jonas -- Jonas Eckerman http://www.truls.org/ - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.or

Re: [users@httpd] Apache Reverse Proxy Configuration

d fix the ProxyPass/ProxyPassRevese mismatch. Regards /Jonas -- Jonas Eckerman http://www.truls.org/ - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [us...@httpd] MaxRequestsPerChild for worker mpm

he process. Any attempts to change this directive during a restart will be ignored, but MaxClients can be modified during a restart. ---8<--- More info at: <http://httpd.apache.org/docs/current/mod/mpm_common.html#serverlimit> Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbu

Re: [us...@httpd] Re: LimitRequestBody http return code

e "Client-Warning: Internal response" header indicates that the error is generated by the perl or XS HTTP code and not by the server. <http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS> Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet S

Re: [us...@httpd] Options for multiple SSL domains on 1 server

nking about. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Pr

Re: [us...@httpd] Re: recommended setup apache/php

.php4" is not the same URI as one ending in ".php5". Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The of

Re: [us...@httpd] what threads and processes apache needs to run

onsider porting a more lightweight and simple HTTP server instead. A really basic HTTP server is a pretty simple and straightforward piece of software, so if that's all you need it might actually be easier to write your own rather than port an advanced server (depending on the platform you

Re: [us...@httpd] Re: mod_webdav problem

in question. It'd probably be better if they reread the RFCs themselves, keeping an eye out for everything relevant to this problem. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http:

Re: [us...@httpd] Re: mod_webdav problem

ether the Date header in the answer is correct or not, but note how RFC2616 uses MAY and SHOULD with relation to the 204 answer. This means that the client can't really trust that the Date header in the answer contains the new time stamp of the uploaded file. Regards /Jonas -- Jonas Eckerman

Re: [us...@httpd] Re: mod_webdav problem

t is actually modified when the file is updated. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User sup

Re: [us...@httpd] beginner problem in setting up apache2

rvername or serveralias "localhost" at that address you will get a response from the default host at that address. /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ --

Re: [us...@httpd] beginner problem in setting up apache2

cs/2.2/> The Apache httpd home page is at: <http://httpd.apache.org/> /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The offici

Re: [us...@httpd] enabling directory indexing on apache2

2.2/configuring.html> Include Directive: <http://httpd.apache.org/docs/2.2/mod/core.html#include> Configuration Sections: <http://httpd.apache.org/docs/2.2/sections.html> Virtual Hosts: http://httpd.apache.org/docs/2.2/vhosts/ Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet

Re: [us...@httpd] enabling directory indexing on apache2

gt; What can be a solution in this case To define a default vhost with the document root you wish the default host to have. IFAICT you want a default virtual host with docuent root "/var/www". Regards /Jonas -- Jonas

Re: [us...@httpd] enabling directory indexing on apache2

config files in one include statement, they will be included in alphanumerical order wich can result in vhosts beeing define in that order if you put them in separate included files. Regards /Jonas -- Jonas Eckerman Fruktträdet

Re: [us...@httpd] httpd vhost centralized logging

error logs, one for each vhost, place ErrorLog directives in virtual host scope (inside VirtualHost containers). The same goes for RewriteLog, ScriptLog, TransferLog and CustomLog. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/

Re: [us...@httpd] httpd vhost centralized logging

stomLog "|/usr/bin/logger -h 10.0.7.12 -t httpd -p local4.notice" vhostcombinedsyslog CustomLog "|/usr/bin/logger -h 10.0.7.12 -t httpd -p local4.notice" vhostnumsyslognc Those two lines results in a total of two logger apps running. Regards /Jonas -- Jonas Eckerman Fruktträ

Re: [us...@httpd] Re: ProxyPreserveHost On

rresponding result would be when you do the request directly to the backend. What's the complete answer for <http://10.19.72.127:8080/arsys/> ? /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda h

Re: [us...@httpd] KeepAlive settings for reverse proxy

he backend allows persintent connections, the server tries to use them, but for some reason they are sometimes dropped. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/

[us...@httpd] KeepAlive settings for reverse proxy (was: Apache module that enables ActiveX)

ht help though. /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project

Re: [us...@httpd] Apache module that enables ActiveX

<http://httpd.apache.org/docs/2.2/mod/core.html#keepalive> Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User

Re: [us...@httpd] Apache module that enables ActiveX

arameter to the "ProxyPass" config verb. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User sup

Re: [us...@httpd] easier handling of https/ssl ?

On 2010-04-02 19:31, peter pilsl wrote: So actually I have to copy/paste each virtualhost-section [...] Isnt there an easier way to do this? You might like to use mod_macro. Especially if most of the hosts are very similar to each other. Regards /Jonas -- Jonas Eckerman Fruktträdet

Re: [us...@httpd] VirtualHost with different users?

using mpm-itk to do this on a couple of systems. It's a MPM based on prefork made for just this purpose. It works fine here. regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://what

Re: [us...@httpd] httpd.config "subroutine"

ole bunch of aliases at the end. And then there's a bunch of vhosts using other macros as well. This way made it a lot easier to maintain than using includes. Another option could be mod_perl, wich, IIRC, allows you to use perl in the config files. Regards /Jonas -- Jonas Eckerman Frukt

Re: [us...@httpd] Response time without client network delay

o work. Available at: <http://mod-log-firstbyte.googlecode.com/svn/trunk/> <http://code.google.com/p/mod-log-firstbyte/> Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fs

Re: [us...@httpd] SSL cert for alias too

cert.org if you want your browser to automagically trust the certs for the sites above.) If you examine the two cerificates for the sites above, you'll see that they are issued for more than 2 fqdns each (using the Subject Alternative Name extension of X509v3 IIUC). Regards /Jonas -

Re: [us...@httpd] SSL cert for alias too

SSL cert for each, as SSL wildcard doesn't work in this case. Use one cert issued for both hosts. /jonas - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html>

Re: [us...@httpd] Apache Conf for 2000 Users ??

sers can be way more than the amount of simultaneous connections, but in systems where most pages and even images are dynamically and slowly generated it may well be that the amount of simultaneous connections is sometimes way higher than the amount of simultaneous users. Regards /Jonas -- Jonas

Re: [us...@httpd] Apache Conf for 2000 Users ??

doing that). If the Moodle LMS thingy works in a threaded environment you should consider using the worker mpm. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://wha

Re: [us...@httpd] http/1.1 persistent connection issue.

. If you use keep-alive you need to handle the content-length header correctly. More info about HTTP is available in the HTTP 1.1 RFC (2616): http://www.ietf.org/rfc/rfc2616.txt Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt

Re: [us...@httpd] https works, http doesn't

John Oliver wrote: You don't have permission to access / on this server. [...] There is an index.html with 644, and it's in /var/www/html with 755, and that is set as the DocumentRoot. And DirectoryIndex is set to use it? Regards /Jonas -- Jonas Eckerman Fruktträdet & Förb

Re: [us...@httpd] Domain Masking (I think?)

can use for this. You should also check the UseCanonicalName directive. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ -

Re: [us...@httpd] How To Secure My Site?

. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [us...@httpd] Apache hangs when maximum connection beyond 2000

Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Pro

Re: [us...@httpd] Fwd: Home Web Server

, you could use a dynamic DNS service to get a fixed host name even though you have a dynamic IP. Please note that I don't know if the above scenario is applicable to your situation. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http:/

Re: [us...@httpd] Two virtual hosts with 2 different sets of SSL certificates

different certificates for different sites. If you only have one IP adress you can use the same cerificate-set for all your name based virtual hosts. Of course the certificate should be issued for all those hosts. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges

Re: [us...@httpd] Two virtual hosts with 2 different sets of SSL certificates

the reuest headers are parsed. Either use different IP+port for the two hosts, or have them share one set of SSL certificates. Regards /Jonas -- Jonas Eckerman Fruktträdet & Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://what

Re: [EMAIL PROTECTED] Hacked the website replace the index.hm page

n directory for any host (in case someone thought it was due to it's path beeing the same as in the default documentroot of many APache installs.)) Regards /Jonas -- Jonas Eckerman, FSDB & Fruktträdet http://whatever.frukt.org/ http://www.fsdb.org/ http://www.frukt.org/ --