On Sun, 27 May 2001, Gerald Waugh wrote:

> > > Regarding httpd, yes, that's correct. You should have two httpd processes
> > > running as root (at least)
> > > 
> > > which are the admserv and the normal httpd listening on port 80 and 81.
> > > they must run as root for a very simple reason - normal users can't listen
> > > on ports 1-1024. (or 1023, i'm not sure, anyhow it's within range)
> > > 
> With SSL:
> admserv listening on ports 81,443 and 444, normal httpd listening of port 80.
> Without SSL:
> admserv listening on ports 81,and 444, normal httpd listening of port 80.
> Is this correct?
> Gerald

I have only with SSL, and I think you're wrong...

because my URL is https://www.domain.com:81/blablabla

I believe that the : who states the port bypassws all defaults... besides,
if admserv listens on the normal httpd's security (ssl) port, where is
httpd (normal) listens? think about it :)

I believe admserv always listens on 81, and serves SSL if an SSL cert is
installed. I might be wrong, of course :0

- shimi.

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to