Re: How to list Apache (httpd) virtual servers

2024-05-12 Thread Mike Wright
On 5/12/24 14:56, Ian Pilcher wrote: I am trying to list the virtual servers in my Apache httpd configuration on Fedora 38.  My internet searches keep turning up references to using either apachectl or apache2ctl with the -S option, but neither one seems to work on Fedora. # apachectl -S

How to list Apache (httpd) virtual servers

2024-05-12 Thread Ian Pilcher
I am trying to list the virtual servers in my Apache httpd configuration on Fedora 38. My internet searches keep turning up references to using either apachectl or apache2ctl with the -S option, but neither one seems to work on Fedora. # apachectl -S apachectl: The "-S" option is not

Re: Help with perl in httpd

2023-07-14 Thread Francis . Montagnac
n: > 12 require "artikel_ini.pl“; > But the file artikel_ini.pl is in the same subdir: > [root@forum-gp httpd]# ls -al /var/www/html/artikel/ > total 128 > drwxr-xr-x. 3 apache apache 116 Apr 6 2014 . > drwxr-xr--. 15 apache apache 4096 Aug 23 2012 .. > drwx--x---

Re: Help with perl in httpd

2023-07-14 Thread Peter Boy
ile 10 @templ @zuordnungen 11 %unterrubriken %oberrubriken %verfasser); 12 require "artikel_ini.pl“; But the file artikel_ini.pl is in the same subdir: [root@forum-gp httpd]# ls -al /var/www/html/artikel/ total 128 drwxr-xr-x. 3 apache apache 116 Apr 6 2014 . drwxr-xr--. 15 apache

Re: Help with perl in httpd

2023-07-14 Thread Francis . Montagnac
On Fri, 14 Jul 2023 20:56:21 +0200 Peter Boy wrote: > But linie 3 of the script produced the next error message: > Can't locate CGI/Carp.pm in @INC > (you may need to install the CGI::Carp module) > (@INC contains: /usr/local/lib64/perl5/5.36 /usr/local/share/perl5/5.36 > /usr/lib64/perl5/vendo

Re: Help with perl in httpd

2023-07-14 Thread Peter Boy
> I have also not used perl on a web server for around 20 years, but I think > you need to map the file extension in a way to trigger mod_perl to handle it. > For example, if you look in the php config, you'll see this: > >SetHandler application/x-httpd-php >

Re: Help with perl in httpd

2023-07-14 Thread Samuel Sieb
this: SetHandler application/x-httpd-php You need to find the corresponding handler for mod_perl. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct:

Help with perl in httpd

2023-07-14 Thread Peter Boy
I have the thankless task of getting an application written with perl to run on one of our F38 servers. The application was developed around 2005 or so, last changes around 2012, the developer is long gone from the university and the colleagues whose (long term) project use the application kn

Re: fedora 34/httpd/letsencrypt dont play nice??

2022-04-13 Thread Doug Herr
e and the >> *entire path* to the file is readable by the user that runs the apache httpd >> (apache). >> >> Your first place to look should be the /var/log/httpd/ directory. I’m sure >> that if there is a problem with the cert or it’s location / permiss

Re: fedora 34/httpd/letsencrypt dont play nice??

2022-04-13 Thread Jack Craig
al problem is. What does “dont play nice” mean? > > Make sure the selinux attributes are “system_u:object_r:cert_t:s0” (which > is what the selinux policy should give it by default) and that the file and > the *entire path* to the file is readable by the user that runs the apache > httpd

Re: fedora 34/httpd/letsencrypt dont play nice??

2022-04-13 Thread Jonathan Billings
es are “system_u:object_r:cert_t:s0” (which is what the selinux policy should give it by default) and that the file and the *entire path* to the file is readable by the user that runs the apache httpd (apache). Your first place to look should be the /var/log/httpd/ directory. I’m sure that if ther

Re: fedora 34/httpd/letsencrypt dont play nice??

2022-04-13 Thread Samuel Sieb
On 4/13/22 15:11, Jack Craig wrote: trying to secure a new web server , my httpd.conf has,... #   Point SSLCertificateFile at a PEM encoded certificate.  If #   the certificate is encrypted, then you will be prompted for a #   pass phrase.  Note that restarting httpd will prompt again.  Keep

fedora 34/httpd/letsencrypt dont play nice??

2022-04-13 Thread Jack Craig
trying to secure a new web server , my httpd.conf has,... # Point SSLCertificateFile at a PEM encoded certificate. If # the certificate is encrypted, then you will be prompted for a # pass phrase. Note that restarting httpd will prompt again. Keep # in mind that if you have both an RSA

Re: New bugzilla install - httpd error - Possibly OT

2020-04-17 Thread Samuel Sieb
My /etc/httpd/conf/httpd.conf file contains this: I assume your top-level is serving from /var/www/html? # ./testserver.pl http://10.16.0.109/bugzilla TEST-OK Webserver is running under group id in $webservergroup. TEST-FAILED Fetch of images/padlock.png failed Your web server could not f

New bugzilla install - httpd error - Possibly OT

2020-04-17 Thread S.Bob
#x27;Parameters' page (linked in the footer of the Administrator account) to ensure it is set up as you wish - this includes setting the 'urlbase' option to the correct URL. checksetup.pl complete My /etc/httpd/conf/httpd.conf file contains this:     Options Indexes FollowSymLinks

Re: selinux issues -- for test system/httpd user access

2020-04-15 Thread Tim via users
s supplied. So go with the defaults, and do some fault-finding when something breaks. The fault-finding may find it's a problem with SELinux, and it may point out that what you were doing was wrong (or whoever wrote the program you used). > Here's my use case:: > > Test V

Re: selinux issues -- for test system/httpd user access

2020-04-15 Thread bruce
7;s my use case:: Test VM/web server runs httpd/apache web process runs php/py apps as webapps, under the /var/www/html/cat dir/tree structure -has multiple test users -treat the test users as "dev" users dev users are able to ssh/scp files into their home dir dev users able to

Re: selinux issues -- for test system/httpd user access

2020-04-15 Thread Tim via users
On Tue, 2020-04-14 at 14:01 -0400, bruce wrote: > I've already got the VM, test users, httpd, etc.. And things run with > selinux disabled. > > Now it's time to take the jump, and engage selinux! Actually, that's going to be your biggest problem. If you've s

Re: selinux issues -- for test system/httpd user access

2020-04-15 Thread Samuel Sieb
On 4/14/20 5:26 PM, bruce wrote: All I can say at this time.. Thanks... I guess... ps. If/When I figure this all out, I'll post the cmds/order of running the selinux cmds to accomplish my goal of being able to ensure the httpd process can manage the files, as well as having users being

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread Tim via users
On Tue, 2020-04-14 at 14:01 -0400, bruce wrote: > My use case: > To create a test local VM > To fire up httpd/mysql on the VM > To create a couple of test users on the VM > Create a test static website under /var/www/html/cat >using index.html > aa.php Unless

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread bruce
All I can say at this time.. Thanks... I guess... ps. If/When I figure this all out, I'll post the cmds/order of running the selinux cmds to accomplish my goal of being able to ensure the httpd process can manage the files, as well as having users being able to read/write/delete the

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread Samuel Sieb
On 4/14/20 3:08 PM, bruce wrote: I don't know what the cmds are as well as the sequence I need to run them in the correct order. This is what I'm looking to get me hands around You already posted links to useful pages for that. https://www.digitalocean.com/community/tutorials/an-introduction-t

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread bruce
Again... I don't know what the cmds are as well as the sequence I need to run them in the correct order. This is what I'm looking to get me hands around On Tue, Apr 14, 2020 at 5:47 PM Samuel Sieb wrote: > On 4/14/20 2:39 PM, bruce wrote: > > Bu tI still would like to have the cmds to learn

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread Samuel Sieb
On 4/14/20 2:39 PM, bruce wrote: Bu tI still would like to have the cmds to learn from, as opposed to just "depending" on the OS, and not really knowing how this stuff kind of works. So, any pointers/help would be cool! I don't know what you're asking for. You don't need to install any pac

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread bruce
Ok. thanks. Bu tI still would like to have the cmds to learn from, as opposed to just "depending" on the OS, and not really knowing how this stuff kind of works. So, any pointers/help would be cool! thanks On Tue, Apr 14, 2020 at 5:35 PM Samuel Sieb wrote: > On 4/14/20 2:01 PM, bruce wrote:

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread Samuel Sieb
On 4/14/20 2:01 PM, bruce wrote: Hi Samuel, Thanks for the reply. What you provided doesn't seem to mesh  with other sites I've seen. Take a look at these sites and if you feel up to it, get back to me with comments!!! https://www.digitalocean.com/community/tutorials/an-introduction-to-selin

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread bruce
c-concepts https://www.lisenet.com/2016/advanced-apache-configuration-with-selinux-on-rhel-7/ thanks On Tue, Apr 14, 2020 at 2:45 PM Samuel Sieb wrote: > On 4/14/20 11:01 AM, bruce wrote: > > My use case: > > To create a test local VM > > To fire up httpd/mysql on the

Re: selinux issues -- for test system/httpd user access

2020-04-14 Thread Samuel Sieb
On 4/14/20 11:01 AM, bruce wrote: My use case:  To create a test local VM  To fire up httpd/mysql on the VM  To create a couple of test users on the VM  Create a test static website under /var/www/html/cat    using index.html          aa.php I've already got the VM, test users, httpd

selinux issues -- for test system/httpd user access

2020-04-14 Thread bruce
Hey list! 1st, thanks to all the help I've gotten over time from the list. Stay safe everyone!! I'm finally jumping into deploying selinux on a test system. My use case: To create a test local VM To fire up httpd/mysql on the VM To create a couple of test users on the VM Cre

Re: what means httpd dependency of "config(httpd) = 2.4.38-4.fc30"?

2019-03-30 Thread Todd Zullinger
Hi, Robert P. J. Day wrote: > undoubtedly a simple question, but a friend asked me about this > yesterday, and threw a wrinkle into it. (i'm running on fedora 30 > branched but that should make no difference.) > > if i ask for the package dependencies of, say, httpd, amo

what means httpd dependency of "config(httpd) = 2.4.38-4.fc30"?

2019-03-30 Thread Robert P. J. Day
undoubtedly a simple question, but a friend asked me about this yesterday, and threw a wrinkle into it. (i'm running on fedora 30 branched but that should make no difference.) if i ask for the package dependencies of, say, httpd, among everything else, i get the line: config(

Re: HTTPD shutting down every night

2018-11-15 Thread Berend De Schouwer
On Thu, 2018-11-15 at 06:12 +0100, Scott van Looy via users wrote: > So httpd survived Tuesday without crashing but crashed again > yesterday and today. > > In /var/log/messages I can see: > > Nov 14 03:26:57 novak systemd[1]: Reloading The Apache HTTP Server. > Nov 14 0

Re: HTTPD shutting down every night

2018-11-14 Thread Scott van Looy via users
So httpd survived Tuesday without crashing but crashed again yesterday and today. In /var/log/messages I can see: Nov 14 03:26:57 novak systemd[1]: Reloading The Apache HTTP Server. Nov 14 03:26:57 novak systemd[739346]: httpd.service: Failed to set up mount namespacing: No such file or

Re: HTTPD shutting down every night

2018-11-12 Thread Scott van Looy via users
However, it also tracks when it > was last run and won't cycle a logfile and HUP a daemon if it doesn't > need to - since it's already cycled the logs at 03:54, it won't do so > again when you're trying to run it manually unless you tweak the file > "/var/lib/

Re: HTTPD shutting down every night

2018-11-12 Thread Andy Blanchard
lready cycled the logs at 03:54, it won't do so again when you're trying to run it manually unless you tweak the file "/var/lib/logrotate.status" first. Note also that httpd exited within the window for logrotate, which also seems to point the finger at logrotate, so I'd

Re: HTTPD shutting down every night

2018-11-12 Thread Scott van Looy via users
novak run-parts[81241]: (/etc/cron.daily) starting logrotate Nov 12 03:54:58 novak run-parts[81241]: (/etc/cron.daily) finished logrotate Nov 12 03:54:58 novak run-parts[81241]: (/etc/cron.daily) starting rkhunter Tried running them individually, nothing seems to stop httpd. I’ve disabled a few

Re: HTTPD shutting down every night

2018-11-11 Thread Scott van Looy via users
! Scott > On 11. Nov 2018, at 11:27, Andy Blanchard wrote: > > Just upgraded a box to 29, and I've spotted the following in the httpd > section of my Logwatch email: > > Unescaped left brace in regex is deprecated here (and will be fatal > in Perl 5.32), passed through in

Re: HTTPD shutting down every night

2018-11-11 Thread Andy Blanchard
Just upgraded a box to 29, and I've spotted the following in the httpd section of my Logwatch email: Unescaped left brace in regex is deprecated here (and will be fatal in Perl 5.32), passed through in regex; marked by <-- HERE in m/\G%({ <-- HERE .*?})?./ at /usr/share/logwatch/scrip

Re: HTTPD shutting down every night

2018-11-07 Thread Scott van Looy via users
OK thanks for this. It’s not normal though, it doesn’t actually restart - it just crashes. /bin/systemctl reload httpd seems to work OK when I run it as root, the server restarts. So I’m still a little confused. Does anyone have any suggestions? > On 7. Nov 2018, at 15:52, Roger Heflin wr

Re: HTTPD shutting down every night

2018-11-07 Thread Roger Heflin
this is the daily logrotate process. it rotates the log files and reloads httpd. It is normal. A number of other process will also restart at the same time. See: cat /etc/logrotate.d/httpd /var/log/httpd/*log { missingok notifempty sharedscripts delaycompress postrotate

Re: HTTPD shutting down every night

2018-11-07 Thread Andy Blanchard
On Wed, 7 Nov 2018 at 10:40, Scott van Looy via users wrote: > Since the upgrade to F29 my HTTPD has been shutting down around 3am every > night. I’d like to try and investigate why, but the only thing in the log is: > [mpm_event:notice] [pid 1096508:tid 140027704744192] AH0049

HTTPD shutting down every night

2018-11-07 Thread Scott van Looy via users
Hi, Since the upgrade to F29 my HTTPD has been shutting down around 3am every night. I’d like to try and investigate why, but the only thing in the log is: [mpm_event:notice] [pid 1096508:tid 140027704744192] AH00492: caught SIGWINCH, shutting down gracefully These all happen at roughly the

Re: httpd 2.4.35 update

2018-11-06 Thread YOUNG, MICHAEL A.
On Tue, 6 Nov 2018, Chris Kottaridis wrote: > Is httpd in Fedora 28 going to be upgraded to 2.4.35 any time soon? > > Have the in-house security compliance team pushing for it. The only security issue fixed in 2.4.35 seems to be CVE-2018-11763 in HTTP/2 which Fedora provides in the

Re: httpd 2.4.35 update

2018-11-06 Thread Terry Polzin
Fedora 29 was GOLD last week. On Tue, Nov 6, 2018 at 3:52 PM Chris Kottaridis wrote: > Is httpd in Fedora 28 going to be upgraded to 2.4.35 any time soon? > > Have the in-house security compliance team pushing for it. > > T

httpd 2.4.35 update

2018-11-06 Thread Chris Kottaridis
Is httpd in Fedora 28 going to be upgraded to 2.4.35 any time soon? Have the in-house security compliance team pushing for it. Thanks Chris K ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le

Re: Any changes to php / httpd that need changes in configurationfiles?

2017-10-30 Thread Bill Shirley
About a month ago when I ran 'dnf update', it updated apache and I ran into problems with PHP. httpd-2.4.27-3.fc25.x86_64 php-7.0.23-1.fc25.x86_64 I had to switch from mpm_prefork_module to mpm_event_module in 00-mpm.conf for PHP to work correctly. Then with that change, I found

Re: Any changes to php / httpd that need changes in configurationfiles?

2017-10-30 Thread Patrick O'Callaghan
On Mon, 2017-10-30 at 09:45 +, Teaterljud se wrote: > We have problems since an update with php pages (PHP 7.1.10, Apache/2.4.28 > (Fedora 27)) Fedora 27 is still in development and has not been released. You should ask about it on the Test list, not here. poc __

Any changes to php / httpd that need changes in configurationfiles?

2017-10-30 Thread Teaterljud se
We have problems since an update with php pages (PHP 7.1.10, Apache/2.4.28 (Fedora 27)) I just noticed that changes was made to mariadb-configuration in some way, we had /var/run/mariadb/ as pid dir and this dir was automatic removed so mysql couldnt start.. Have it been made any changes that

Re: waaaaaaay off topic!! (httpd infinite redirects)

2017-07-18 Thread Tim
Allegedly, on or about 16 July 2017, bruce sent: > I've got a site (drupal+mod) that's throwing an infinite redirect. > I've been searching high/low, as well as modifying/testing the > httpd.conf, .htaccess, and the setting file for the app. URL re-writing? e.g The main HTTP server config is set

waaaaaaay off topic!! (httpd infinite redirects)

2017-07-16 Thread bruce
Hey guys... thanks for all the help, and eyeballs i get from you all. much appreciation!! I've got an issue, that really has nothing to do with Fed/Centos, etc.. But I figured I'd toss it out here, maybe someone can have an offline conversation to figure it out. I'll even toss some $$ if it's req

httpd illegal instruction by rebuild with rpmrc file

2017-04-10 Thread Dominik Kucher
when i rebuild the src.rpm with my .rpmrc file i became the error "illegal instruction", when i create the rpm without the .rpmrc file it works perfectly! other builds (pure-ftpd, mpd, mpdscribble, samba, openssl) works with my rpmrc file, but why it breaks httpd-* and mod_* files?

Re: dnf fails to properly install httpd and progresql

2016-12-05 Thread Emmett Culley
On 12/05/2016 10:46 AM, Emmett Culley wrote: > I just did a fresh install of fedora 25 via the KDE live image. After > booting I installed apache (httpd) and postgreSQL via yumex-dnf. Neither > will start. Apache because no apache user or group were created, and for > po

dnf fails to properly install httpd and progresql

2016-12-05 Thread Emmett Culley
I just did a fresh install of fedora 25 via the KDE live image. After booting I installed apache (httpd) and postgreSQL via yumex-dnf. Neither will start. Apache because no apache user or group were created, and for postgreSQL not postgresql.service file was created. No porgres user or

Re: httpd fails to start

2016-07-03 Thread José María Terry Jiménez
er=network.target remote-fs.target nss-lookup.target With BOTH fixes, httpd now starts correctly. You're welcome Best, -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproj

Re: httpd fails to start

2016-07-01 Thread Tom Horsley
On Fri, 1 Jul 2016 15:45:24 -0700 Rick Stevens wrote: > A lot of the issues you're hitting is > NM trying to make up its mind. Actually, I still have the network service startup problems with NM disabled and network turned back on, so I still need to restart things in rc.local to make them be rel

Re: httpd fails to start

2016-07-01 Thread Rick Stevens
On 07/01/2016 03:14 PM, Tom Horsley wrote: > On Fri, 1 Jul 2016 17:36:35 -0400 > David A. De Graaf wrote: > >> With BOTH fixes, httpd now starts correctly. > > I have so many network things fail to start correctly > that I just started putting stuff like this in rc.

Re: httpd fails to start

2016-07-01 Thread Tom Horsley
On Fri, 1 Jul 2016 17:36:35 -0400 David A. De Graaf wrote: > With BOTH fixes, httpd now starts correctly. I have so many network things fail to start correctly that I just started putting stuff like this in rc.local: /bin/bash -c 'sleep 5 ; systemctl restart ypbind' > /dev/null

Re: httpd fails to start

2016-07-01 Thread David A. De Graaf
] Failed to start The Apache HTTP Server. > >See 'systemctl status httpd.service' for details. > > and, sure enough, httpd isn't running. > > > > It can be started manually later, readily enough, with > >systemctl start httpd > > but that&

Re: httpd fails to start

2016-07-01 Thread David A. De Graaf
he HTTP Server. > > See 'systemctl status httpd.service' for details. > > and, sure enough, httpd isn't running. > > > > It can be started manually later, readily enough, with > > systemctl start httpd > > but that's a PITA. > > > &g

Re: httpd fails to start

2016-06-28 Thread Sam Varshavchik
David A. De Graaf writes: On a newly installed F24 I have a /home/... directory with a collection of movie files - *.m4v and such, that I want to googlecast to a TV for viewing. I've configured a private httpd setup to display this directory listing when the local machine name is enter

Re: httpd fails to start

2016-06-28 Thread Jose Maria Terry Jimenez
El 28/6/16 a las 11:28, David A. De Graaf escribió: On a newly installed F24 I have a /home/... directory with a collection of movie files - *.m4v and such, that I want to googlecast to a TV for viewing. I've configured a private httpd setup to display this directory listing when the

httpd fails to start

2016-06-28 Thread David A. De Graaf
On a newly installed F24 I have a /home/... directory with a collection of movie files - *.m4v and such, that I want to googlecast to a TV for viewing. I've configured a private httpd setup to display this directory listing when the local machine name is entered in the address line of g

Re: httpd failed to start on F21 with current updates [solved]

2015-08-03 Thread Tommy Pham
False alarm. It appears that the mod_gnutls was installed somehow and it prevented ssl and nss modules to load. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://

Re: httpd failed to start on F21 with current updates

2015-08-03 Thread Tommy Pham
and relevant packages: [root@d-f21-web httpd]# rpm -qa|egrep -i 'kernel|httpd'|sort abrt-addon-kerneloops-2.3.0-8.fc21.x86_64 fedora-logos-httpd-21.0.5-1.fc21.noarch httpd-2.4.16-1.fc21.x86_64 httpd-filesystem-2.4.16-1.fc21.noarch httpd-manual-2.4.16-1.fc21.noarch httpd-tools-2.4.16-1.f

httpd failed to start on F21 with current updates

2015-08-03 Thread Tommy Pham
Hi folks, Anyone having problems with httpd unable to start? journalctl -xe shows: Aug 03 14:09:16 d-f21-web sshd[1071]: pam_unix(sshd:session): session opened for user root by (uid=0) Aug 03 14:10:17 d-f21-web httpd[1106]: AH00558: httpd: Could not reliably determine the server's

Re: Set SELinux to allow only httpd daemon to use specific tty device

2014-05-06 Thread Daniel J Walsh
On 05/06/2014 12:03 AM, Emmanuel Noobadmin wrote: > On 5/5/14, Daniel J Walsh wrote: >> Simplest would be to just use >> # grep usbDataCollector /var/log/audit/audit.log | audit2allow -M myhttp >> # semodule -i myhttp.pp >> >> This would allot httpd_t processes the ability to use usb_device_t. >>

Re: Set SELinux to allow only httpd daemon to use specific tty device

2014-05-05 Thread Emmanuel Noobadmin
On 5/5/14, Daniel J Walsh wrote: > Simplest would be to just use > # grep usbDataCollector /var/log/audit/audit.log | audit2allow -M myhttp > # semodule -i myhttp.pp > > This would allot httpd_t processes the ability to use usb_device_t. > If you really wanted to tighten it up, you could build a c

Re: Set SELinux to allow only httpd daemon to use specific tty device

2014-05-05 Thread Daniel J Walsh
particular > installation. However, I thought it would be good to find the > 'correct' solution to this. > > But I am unable to find a more fine grain SELinux control for this, > Fedora 20 has no documentation and the only vaguely relevant one I > could find elsewh

Set SELinux to allow only httpd daemon to use specific tty device

2014-05-03 Thread Emmanuel Noobadmin
this. But I am unable to find a more fine grain SELinux control for this, Fedora 20 has no documentation and the only vaguely relevant one I could find elsewhere is httpd_tty_com which appears unrelated as it is about allow httpd to communicate with terminal. So the question is whether there is

Re: F19: Is this an httpd attack attempt?

2014-03-06 Thread Wolfgang S. Rupprecht
Tim writes: > I've always configured all domains separately, and left the default > service showing that pre-configuration Apache page that tells you that > the service is alive, or just a basic page. That way, non-matching > connections don't connect to /some/ virtual host, as if by accident.

Re: F19: Is this an httpd attack attempt?

2014-03-06 Thread Tim
Allegedly, on or about 05 March 2014, Wolfgang S. Rupprecht sent: > 2) apache has (to my mind) a minor bug where it serves pages from the >first vhost if you ask for an unknown vhost. In the absence of a matching virtual host, it returns the default service. The same as if you'd requested a

Re: F19: Is this an httpd attack attempt?

2014-03-06 Thread lee
Tom Rivers writes: > On 3/5/2014 10:45, Tom Rivers wrote: >> Now that I had successfully simulated the attack signature in the >> log file of the proxy web server, I logged into the target web >> server and looked at its access log. Thankfully I found no log of >> any activity from my XXX.XXX.XX

Re: F19: Is this an httpd attack attempt?

2014-03-06 Thread lee
Tim writes: > Allegedly, on or about 05 March 2014, lee sent: >> Could someone please explain why/how this may be considered as an >> attack or at least as something bad? > > Have a look at the log line that the original poster sent: > > 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET > http

Re: F19: Is this an httpd attack attempt?

2014-03-05 Thread Wolfgang S. Rupprecht
lee writes: > "Wolfgang S. Rupprecht" writes: > >> lee writes: >>> Could someone please explain why/how this may be considered as an attack >>> or at least as something bad? Someone requesting an URL from a web >>> server that doesn´t serve this URL --- or doesn´t serve the specified >>> domai

Re: F19: Is this an httpd attack attempt?

2014-03-05 Thread Tom Rivers
On 3/5/2014 10:45, Tom Rivers wrote: Now that I had successfully simulated the attack signature in the log file of the proxy web server, I logged into the target web server and looked at its access log. Thankfully I found no log of any activity from my XXX.XXX.XXX.XXX workstation IP. Not want

Re: F19: Is this an httpd attack attempt?

2014-03-05 Thread Tom Rivers
On 3/5/2014 09:41, Tim wrote: Allegedly, on or about 05 March 2014, lee sent: Could someone please explain why/how this may be considered as an attack or at least as something bad? Have a look at the log line that the original poster sent: 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET h

Re: F19: Is this an httpd attack attempt?

2014-03-05 Thread lee
"Wolfgang S. Rupprecht" writes: > lee writes: >> Could someone please explain why/how this may be considered as an attack >> or at least as something bad? Someone requesting an URL from a web >> server that doesn´t serve this URL --- or doesn´t serve the specified >> domain at all --- could be

Re: F19: Is this an httpd attack attempt?

2014-03-05 Thread Tim
Allegedly, on or about 05 March 2014, lee sent: > Could someone please explain why/how this may be considered as an > attack or at least as something bad? Have a look at the log line that the original poster sent: 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET http://24x7-allrequestsallowed

Re: F19: Is this an httpd attack attempt?

2014-03-04 Thread Wolfgang S. Rupprecht
lee writes: > Could someone please explain why/how this may be considered as an attack > or at least as something bad? Someone requesting an URL from a web > server that doesn´t serve this URL --- or doesn´t serve the specified > domain at all --- could be caused by incorrect responses from name

Re: F19: Is this an httpd attack attempt?

2014-03-04 Thread lee
"eoconno...@gmail.com" writes: > What's the best way to avoid/prevent this from happening?... > > - Reply message - > From: "Mark Haney" > To: > Subject: F19: Is this an httpd attack attempt? > Date: Mon, Mar 3, 2014 11:59 am > > &

Re: F19: Is this an httpd attack attempt?

2014-03-04 Thread Dan Thurman
On 03/03/2014 10:47 PM, Tim wrote: Allegedly, on or about 03 March 2014, Dan Thurman sent: It looks to me like a successful indirect connection? The following is taken from /var/log/httpd/access_log 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET http://24x7-allrequestsallowe

Re: F19: Is this an httpd attack attempt?

2014-03-04 Thread Mike Wright
03/03/2014 06:09 PM, Joe Zeff wrote: On 03/03/2014 05:40 PM, Dan Thurman wrote: # Blacklist order allow,deny allow from all deny from 85.25.196.141 deny from 85.25.226.154 deny from 146.185.239.100 deny from 185.4.227.194 deny from 192.99.2.75 I'm not familiar with thi

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread Tim
Allegedly, on or about 03 March 2014, Dan Thurman sent: > It looks to me like a successful indirect connection? > > The following is taken from /var/log/httpd/access_log > > 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET > http://24x7-allrequest

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread Joe Zeff
On 03/03/2014 05:40 PM, Dan Thurman wrote: # Blacklist order allow,deny allow from all deny from 85.25.196.141 deny from 85.25.226.154 deny from 146.185.239.100 deny from 185.4.227.194 deny from 192.99.2.75 I'm not familiar with this, but I think I spotted a typo. Isn'

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread Rick Stevens
NPUT [some-rulenumber] -s 185.4.227.0/24 -j DROP It's difficult to weed out traffic selectively unless you have the ability to do a deep packet inspection and look at the actual request. Generally that equipment costs a good deal of . - Reply message - From: "Mark Haney" To

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread Dan Thurman
difficult to weed out traffic selectively unless you have the ability to do a deep packet inspection and look at the actual request. Generally that equipment costs a good deal of . - Reply message - From: "Mark Haney" To: Subject: F19: Is this an httpd attack attempt? Date: Mo

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread Dan Thurman
have the ability to do a deep packet inspection and look at the actual request. Generally that equipment costs a good deal of . - Reply message - From: "Mark Haney" To: Subject: F19: Is this an httpd attack attempt? Date: Mon, Mar 3, 2014 11:59 am -BEGIN PGP SIGNED M

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread Rick Stevens
pection and look at the actual request. Generally that equipment costs a good deal of . - Reply message - From: "Mark Haney" To: Subject: F19: Is this an httpd attack attempt? Date: Mon, Mar 3, 2014 11:59 am -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/03/14 11:

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread eoconno...@gmail.com
What's the best way to avoid/prevent this from happening?... - Reply message - From: "Mark Haney" To: Subject: F19: Is this an httpd attack attempt? Date: Mon, Mar 3, 2014 11:59 am -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/03/14 11:42, Dan Thurman wrote: &

Re: F19: Is this an httpd attack attempt?

2014-03-03 Thread Mark Haney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/03/14 11:42, Dan Thurman wrote: > > It looks to me like a successful indirect connection? > > The following is taken from /var/log/httpd/access_log > > 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] &

F19: Is this an httpd attack attempt?

2014-03-03 Thread Dan Thurman
It looks to me like a successful indirect connection? The following is taken from /var/log/httpd/access_log 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET http://24x7-allrequestsallowed.com/?PHPSESSID=1rmsxtj500143TRMUTP_ODZZWA HTTP/1.1" 200 5264 "-" "-"

Re: packages requiring "httpd" as opposed to requiring "webserver"?

2014-02-20 Thread Robert P. J. Day
On Thu, 20 Feb 2014, Rahul Sundaram wrote: > HI > > > On Thu, Feb 20, 2014 at 11:11 AM, Robert P. J. Day wrote: >   that might be a *lot* of bug reports: > > $ repoquery -q --whatrequires webserver| wc -l > 20 > $ repoquery -q --whatrequir

Re: packages requiring "httpd" as opposed to requiring "webserver"?

2014-02-20 Thread Rahul Sundaram
HI On Thu, Feb 20, 2014 at 11:11 AM, Robert P. J. Day wrote: > that might be a *lot* of bug reports: > > $ repoquery -q --whatrequires webserver| wc -l > 20 > $ repoquery -q --whatrequires httpd| wc -l > 205 > You shouldn't do this blindly. Some packages specifical

Re: packages requiring "httpd" as opposed to requiring "webserver"?

2014-02-20 Thread Robert P. J. Day
On Thu, 20 Feb 2014, Remi Collet wrote: > Le 20/02/2014 14:43, Robert P. J. Day a écrit : > > > is that considered good package design? it may be that there are > > some packages that absolutely need some webserver feature that is > > provided only by httpd, but is it

Re: packages requiring "httpd" as opposed to requiring "webserver"?

2014-02-20 Thread Remi Collet
Le 20/02/2014 14:43, Robert P. J. Day a écrit : > is that considered good package design? it may be that there are > some packages that absolutely need some webserver feature that is > provided only by httpd, but is it also possible that some packages are > being unnecessarily restr

Re: packages requiring "httpd" as opposed to requiring "webserver"?

2014-02-20 Thread Robert P. J. Day
On Thu, 20 Feb 2014, Rahul Sundaram wrote: > Hi > > > On Thu, Feb 20, 2014 at 8:43 AM, Robert P. J. Day  wrote: > >   is that considered good package design? it may be that there are > some packages that absolutely need some webserver feature that is >

Re: packages requiring "httpd" as opposed to requiring "webserver"?

2014-02-20 Thread Rahul Sundaram
Hi On Thu, Feb 20, 2014 at 8:43 AM, Robert P. J. Day wrote: > > is that considered good package design? it may be that there are > some packages that absolutely need some webserver feature that is > provided only by httpd, but is it also possible that some packages are > bein

packages requiring "httpd" as opposed to requiring "webserver"?

2014-02-20 Thread Robert P. J. Day
currently playing with various features of rpm/yum/repoquery, and a general philosophy question. i can see that, when i query some packages, they officially "provide" (among other things) a generic service name. for instance, on my f20 system, i can see that the httpd package pr

Re: BUG: soft lockup - CPU#3 stuck for 22s! [httpd:1889]

2013-12-28 Thread Heinz Diehl
On 24.12.2013, Steven P. Ulrick wrote: > Right now I am FINALLY going to remember to reboot into the "offending" > kernel and see if this happens again. This one came up on LKML today, maybe it's related: https://lkml.org/lkml/2013/12/27/255 -- users mailing list users@lists.fedoraproject.org

Re: BUG: soft lockup - CPU#3 stuck for 22s! [httpd:1889]

2013-12-23 Thread Heinz Diehl
On 24.12.2013, Steven P. Ulrick wrote: > > Is there a kernel which doesn't lead to these lockups? > Yes: > kernel-3.11.10-301.fc20.x86_64 > Right now I am FINALLY going to remember to reboot into the "offending" > kernel and see if this happens again. If you can reproduce this with a vanilla 3

  1   2   3   >