[users@httpd] Re: SSL VHosts

On 31/8/21 6:10 am, apache-httpd-us...@thomas.freit.ag wrote: Hi Peter, On 30.08.21 04:24, Peter Horn wrote: I have been successfully running an Apache server for some years (currently 2.4.41 on Ubuntu 20.04LTS). I have three "real" http vhosts on port 80, findable through a d

[users@httpd] SSL VHosts

I have been successfully running an Apache server for some years (currently 2.4.41 on Ubuntu 20.04LTS). I have three "real" http vhosts on port 80, findable through a dynamic DNS service. I also have a (first in line) default vhost with an "unreachable" ServerName, which returns a 4xx status, an

Re: [users@httpd] What does Timeout in the httpd.conf file accomplish?

On 06:59, Eric Covener wrote: On Mon, Jun 20, 2011 at 9:26 AM, Zaccone, Warren wrote: yes. so I am I. The default setting is 30 seconds however pstack shows all 256 children running this script indefinitely - until I stop and restart httpd. This statement in the php doc is leading me to beli

[us...@httpd] Re: client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.test0:)

On 06:59, Norman Khine wrote: i get these in my # tail -f /var/log/apache2/error_log [Tue Aug 17 15:13:00 2010] [notice] Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.8o configured -- resuming normal operations [Tue Aug 17 15:14:56 2010] [error] [client 188.165.201.59] File does not exist: /

Re: [us...@httpd] Stealthing a vhost

Jorge wrote: >The sane sultion would be to setup a default host (first vhost == default) and just deny all access to it. >You'll still get hit but all requests without a hostname get denied. Jorge, You may have missed my original post a few days ago (95182). I know many ways to deny access; w

Re: [us...@httpd] Stealthing a vhost

J Greenlees wrote: >personally, I would consider a permanent redirect to 127.0.0.1 for all but your one excepted case on access of the default virtual host. >their bots will screw their own server that way. ;) Sorry to bring you the bad news, Jaqui, but bots don't respect redirection. I suspe

Re: [us...@httpd] Stealthing a vhost

On 06:59, Igor Cicimov wrote: > > Have you tried mod_security? It's very configurable so might suite your needs. > > Sent from my phone >> On May 20, 2010 3:52 PM, "Peter Horn" wrote: >> >> I have a home server running 4 name vhosts, using a dyna

[us...@httpd] Stealthing a vhost

I have a home server running 4 name vhosts, using a dynamic DNS. The second, third and fourth vhosts are "real" and known to the DNS. The default (first) vhost is only accessible by IP address (or an abstruse and unpublished servername). It gets quite a bit of traffic by IP address which is cle

Re: Re: [us...@httpd] DBDPersist Off in vhost causes startup error log entries

Peter Horn wrote: Hi All, I've been running Apache 2.2.9 / PHP 5.2.6 / Win XP SP3 with 3 named vhosts for about a year with no real problems. Recently I added a fourth vhost to run a Drupal site. This involved adding mySQL, and it all worked after the usual few setup iterations. Afte

[us...@httpd] DBDPersist Off in vhost causes startup error log entries

Hi All, I've been running Apache 2.2.9 / PHP 5.2.6 / Win XP SP3 with 3 named vhosts for about a year with no real problems. Recently I added a fourth vhost to run a Drupal site. This involved adding mySQL, and it all worked after the usual few setup iterations. After the site was running happi

Dummy vhost for intruders - comments please

I don't think this is quite off-topic, just a bit left of centre. :-\ I run a small site with two subdomains of no-ip.org (like dyndns) using NameVirtualHost. Looking at the access log, a few percent of my traffic was from bots like Morfeus F***ing Scanner [my censorship], intrusion attempts (e

Re: [EMAIL PROTECTED] Serving content for hand held devices and phones?

Hi, My first post here, so be gentle :) I'm doing exactly this - downloading java apps to mobile phones, which can then access content at the same URL using http. My technique is to pull apart the User-Agent header (see docs for BrowserMatch), then use some php to crunch the results. (The crunch