Re: [users@httpd] Preventing an open proxy with both a single SSL virtual host and a non-SSL virtual host

Just commenting on you're logged request, not your config... What was it that made you think you had an open proxy? Was it only requests like the one below? Where they all answered with status 403? Richard Mixon rnmi...@custco.biz wrote: After that we started getting flooded with requests

Re: [users@httpd] Multible SSL sites for a single httpd/IP

. This is typically done by setting multiple SubjectAltNames in the certificate. The SNI enhancements are only needed if you want/need to use different certificates. Regards /Jonas -- Jonas Eckerman http://www.truls.org

Re: [users@httpd] apache as ssl-proxy - recommended way?

. If you put the servers behind a proxy, the clients will not talk directly to the servers. Regards /Jonas -- Jonas Eckerman http://www.truls.org/ - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional

Re: [users@httpd] Apache Reverse Proxy Configuration

mismatch. Regards /Jonas -- Jonas Eckerman http://www.truls.org/ - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [us...@httpd] MaxRequestsPerChild for worker mpm

to change this directive during a restart will be ignored, but MaxClients can be modified during a restart. ---8--- More info at: http://httpd.apache.org/docs/current/mod/mpm_common.html#serverlimit Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org

Re: [us...@httpd] Re: LimitRequestBody http return code

: Internal response header indicates that the error is generated by the perl or XS HTTP code and not by the server. http://search.cpan.org/~gaas/libwww-perl-5.837/lib/LWP/UserAgent.pm#REQUEST_METHODS Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http

Re: [us...@httpd] Options for multiple SSL domains on 1 server

. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [us...@httpd] Re: recommended setup apache/php

in .php5. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project

Re: [us...@httpd] Re: mod_webdav problem

. It'd probably be better if they reread the RFCs themselves, keeping an eye out for everything relevant to this problem. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org

Re: [us...@httpd] what threads and processes apache needs to run

. A really basic HTTP server is a pretty simple and straightforward piece of software, so if that's all you need it might actually be easier to write your own rather than port an advanced server (depending on the platform you're targeting). /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges

Re: [us...@httpd] Re: mod_webdav problem

modified when the file is updated. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum

Re: [us...@httpd] Re: mod_webdav problem

with relation to the 204 answer. This means that the client can't really trust that the Date header in the answer contains the new time stamp of the uploaded file. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http

Re: [us...@httpd] enabling directory indexing on apache2

in that order if you put them in separate included files. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User

Re: [us...@httpd] enabling directory indexing on apache2

want a default virtual host with docuent root /var/www. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User

Re: [us...@httpd] enabling directory indexing on apache2

Directive: http://httpd.apache.org/docs/2.2/mod/core.html#include Configuration Sections: http://httpd.apache.org/docs/2.2/sections.html Virtual Hosts: http://httpd.apache.org/docs/2.2/vhosts/ Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http

Re: [us...@httpd] beginner problem in setting up apache2

://httpd.apache.org/ /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [us...@httpd] beginner problem in setting up apache2

a response from the default host at that address. /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum

Re: [us...@httpd] httpd vhost centralized logging

error logs, one for each vhost, place ErrorLog directives in virtual host scope (inside VirtualHost containers). The same goes for RewriteLog, ScriptLog, TransferLog and CustomLog. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org

Re: [us...@httpd] httpd vhost centralized logging

/bin/logger -h 10.0.7.12 -t httpd -p local4.notice vhostcombinedsyslog CustomLog |/usr/bin/logger -h 10.0.7.12 -t httpd -p local4.notice vhostnumsyslognc Those two lines results in a total of two logger apps running. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http

Re: [us...@httpd] Re: ProxyPreserveHost On

directly to the backend. What's the complete answer for http://10.19.72.127:8080/arsys/ ? /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org

[us...@httpd] KeepAlive settings for reverse proxy (was: Apache module that enables ActiveX)

-- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http

Re: [us...@httpd] KeepAlive settings for reverse proxy

, but for some reason they are sometimes dropped. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support

Re: [us...@httpd] Apache module that enables ActiveX

to the ProxyPass config verb. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server

Re: [us...@httpd] Apache module that enables ActiveX

://httpd.apache.org/docs/2.2/mod/core.html#keepalive Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User

Re: [us...@httpd] easier handling of https/ssl ?

On 2010-04-02 19:31, peter pilsl wrote: So actually I have to copy/paste each virtualhost-section [...] Isnt there an easier way to do this? You might like to use mod_macro. Especially if most of the hosts are very similar to each other. Regards /Jonas -- Jonas Eckerman Fruktträdet

Re: [us...@httpd] VirtualHost with different users?

mpm-itk to do this on a couple of systems. It's a MPM based on prefork made for just this purpose. It works fine here. regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org

Re: [us...@httpd] httpd.config subroutine

. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [us...@httpd] Response time without client network delay

-firstbyte.googlecode.com/svn/trunk/ http://code.google.com/p/mod-log-firstbyte/ Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org

Re: [us...@httpd] SSL cert for alias too

want your browser to automagically trust the certs for the sites above.) If you examine the two cerificates for the sites above, you'll see that they are issued for more than 2 fqdns each (using the Subject Alternative Name extension of X509v3 IIUC). Regards /Jonas -- Jonas Eckerman

Re: [us...@httpd] SSL cert for alias too

SSL cert for each, as SSL wildcard doesn't work in this case. Use one cert issued for both hosts. /jonas - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [us...@httpd] Apache Conf for 2000 Users ??

that). IfModule prefork.c If the Moodle LMS thingy works in a threaded environment you should consider using the worker mpm. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org

Re: [us...@httpd] Apache Conf for 2000 Users ??

than the amount of simultaneous connections, but in systems where most pages and even images are dynamically and slowly generated it may well be that the amount of simultaneous connections is sometimes way higher than the amount of simultaneous users. Regards /Jonas -- Jonas Eckerman Fruktträdet

Re: [us...@httpd] http/1.1 persistent connection issue.

. If you use keep-alive you need to handle the content-length header correctly. More info about HTTP is available in the HTTP 1.1 RFC (2616): http://www.ietf.org/rfc/rfc2616.txt Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org

Re: [us...@httpd] https works, http doesn't

John Oliver wrote: You don't have permission to access / on this server. [...] There is an index.html with 644, and it's in /var/www/html with 755, and that is set as the DocumentRoot. And DirectoryIndex is set to use it? Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges

Re: [us...@httpd] Domain Masking (I think?)

can use for this. You should also check the UseCanonicalName directive. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org

Re: [us...@httpd] Apache hangs when maximum connection beyond 2000

/Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http

Re: [us...@httpd] How To Secure My Site?

. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See

Re: [us...@httpd] Fwd: Home Web Server

could use a dynamic DNS service to get a fixed host name even though you have a dynamic IP. Please note that I don't know if the above scenario is applicable to your situation. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org

Re: [us...@httpd] Two virtual hosts with 2 different sets of SSL certificates

headers are parsed. Either use different IP+port for the two hosts, or have them share one set of SSL certificates. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://www.frukt.org/ http://whatever.frukt.org

Re: [us...@httpd] Two virtual hosts with 2 different sets of SSL certificates

certificates for different sites. If you only have one IP adress you can use the same cerificate-set for all your name based virtual hosts. Of course the certificate should be issued for all those hosts. Regards /Jonas -- Jonas Eckerman Fruktträdet Förbundet Sveriges Dövblinda http

Re: [EMAIL PROTECTED] Hacked the website replace the index.hm page

it was due to it's path beeing the same as in the default documentroot of many APache installs.)) Regards /Jonas -- Jonas Eckerman, FSDB Fruktträdet http://whatever.frukt.org/ http://www.fsdb.org/ http://www.frukt.org/ - The official