program for viewing apache connections.
http://fabletech.com/ftss
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
done). I'm also not entirely sure of
what TRACE and TRACK do?
Just set the TraceEnable directive to off. The rewrite rules only apply
for older versions of apache that did not support TraceEnable.
--
Justin Pasher
Distribion
http://support.distribion.com
setup.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
that standpoint, I can't offer any first hand
experience (it seems like you've already done the basic checks like
verifying apache is linked to the correct OpenSSL module).
Good luck.
--
Justin Pasher
-
The official User-To-User
looked at the back
trace, I found out it was crashing on a regex handling portion of the
PHP module. Now, once you figure this out, getting a FIX is a different
story...
|
--
Justin Pasher
-
The official User-To-User support
/mythweb.conf that points to the aforementioned file. You'll
have to tweak a few of the settings in the file to make it work for you
(database settings, some directory paths, etc), but that will probably get you
going.
-- Justin Pasher
%{HTTP_HOST} ^application$ [NC]
RewriteRule . http://server/application [R=permanent]
/VirtualHost
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http
} ^application$ [NC]
RewriteRule . http://server/application [R=permanent]
/VirtualHost
--
Justin Pasher
I get the same looping result. (I shortened application to app because
I am too lazy to type all that!):
The requested URL
RewriteEngine on
RewriteRule ^/$ http://survey.juicycouture.com/tellus
RewriteRule ^/tellus$ http://survey.juicycouture.com/tellus
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http
VirtualHost on a non-standard SSL
port, are you sure you are trying to access the site using https in the URL?
e.g.
https://www.example.com:10991/
and not
http://www.example.com:10991/
and not just
www.example.com:10991
--
Justin Pasher
that the Timeout directive can be set within a
VirtualHost container, so that should work fine. There is no way that I
know of to verify it was set, but if the directive is within a
VirtualHost container, you should be good.
--
Justin Pasher
itself is sucking it all up (i.e.
loading tons of data into memory from a database, a script processing a
lot of data in memory, etc).
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server
are
different than those for the apache directive. You can verify that by
starting out with a much simpler sed script, then expanding from there.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP
Error: 336027900
error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol speaking
not SSL to HTTPS port!?
Are you sure that whatever is connecting via port 443 is actually using
the HTTPS protocol? Perhaps someone tries to access
http://www.vizion2000.net:443 ?
--
Justin
for port 80. I've had trouble myself using *:443 for SSL,
so it may not be supported. As pointed out, using the hostname in the
NameVirtualHost and VirtualHost directives is not recommended (DNS
lookups).
--
Justin Pasher
(RHEL/CentOS?).
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr
HTTPS traffic back to HTTP
if it doesn't start with /webmail.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe
hardware (e.g.
bad RAM), but they can't reboot the server to run memtest86 because it's
production. It won't get you any closer to a solution when you can't
test all possible avenues, especially when it's very difficult to even
replicate the issue consistently.
--
Justin Pasher
Justin Pasher wrote:
gary lim wrote:
Hu justin,
1. Because its a production site, we are unable to disable the PHP
modules/script..From the log output below, we are having
difficulty to pinpoint the source of error. I just spent the last
couple of hours to run through the pages and see
François Beaune wrote:
On Wed, Dec 16, 2009 at 7:00 PM, Justin Pasher
just...@newmediagateway.com mailto:just...@newmediagateway.com wrote:
[snip]
Here is the SSLCipherSuite directive that I use on my servers to
lock out insecure ciphers:
SSLCipherSuite AES256-SHA:DES-CBC3
apache error log too to make sure it's not complaining
about anything.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
. The IfModule directive simply checks to make
sure the module is loaded before attempting to set the directives within it.
Make sure you check your Apache logs too for any errors or notifications.
--
Justin Pasher
-
The official
directive and only offering the
ciphers you have allowed?
http://www.lazorsoftware.com/lazorsoft/files/openssl_check.sh
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http
, such as
Directory or VirtualHost. I know that on CentOS, the default config
file that has the SSL directives actually contains the SSLCipherSuite
directive within a VirtualHost container. That threw me off recently
when I was trying to setup apache on a CentOS box for the first time.
--
Justin Pasher
.
Also, you can use this script to check which ciphers are supported by
your site.
http://www.lazorsoftware.com/lazorsoft/files/openssl_check.sh
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP
]
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
from
the
Apache server can access
http://ploneserver:8080/VirtualHostBase/https/%{SERVER_NAME}:443/. If
you try to pull up that URL using something like wget or lynx (replacing
${SERVER_NAME} accordingly), do you get a successful response? Do you
see anything in the apache error logs?
--
Justin
individual IP address to get universal
browser support (i.e. without SNI). Even with a wildcard cert for
*.example.com, I don't believe that will work to example.com.
--
Justin Pasher
-
The official User-To-User support forum
network.
[1] http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
- Single IP, assuming cert
supports all (sub)domains listed. Otherwise Multiple IP
(c) Multiple FQDN, multiple DocumentRoot - Multiple IP addresses (one
for each FQDN)
--
Justin Pasher
-
The official User-To-User support forum
both the cert and private key (private
keys SHOULD only be readable by root, if secured properly). This is all
speculation on my part though.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server
mod_limitipconn.
http://dominia.org/djao/limitipconn2.html
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail
can just capture the results of
RewriteRule match.
RewriteRule (.*) https://%{SERVER_NAME}/$1 [R,L]
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org
) Try cranking up the RewriteLogLevel a bit to see the rewrites in
action, once again to make sure it's processing properly.
3) Make sure you clear your browser cache. I've seen odd instances where
a browser might cache a redirect.
--
Justin Pasher
\.com$ [NC]
RewriteRule ^/(.*) http://%1.new-domain.com/$1 [R=301,L]
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
can limit globally or per virtual host
(whether the IP address pool it tracks is virtual host specific, I'm,
not sure).
http://www.dominia.org/djao/limitipconn.html
--
Justin Pasher
-
The official User-To-User support forum
-bookings_([0-9]+)/(.*)
/bookingsdata/bookings_data/bookings_$1/$2
You'll have to leave the first two Alias definitions in there, since
their format is different.
--
Justin Pasher
-
The official User-To-User support forum
to the browser (indicating the
service is unavailable).
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail
to continue to wait for a response. This is critical for situations
where the connection is either very slow or is flaky and drops out
frequently. The Timeout directive in Apache is what determines how
long Apache will wait.
--
Justin Pasher
the top of my head, so
this might be a little off).
RewriteCond ${QUERY_STRING} ^id=([0-9]+)$
RewriteRule ^/index.html$ /index/%1/
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See
of attack.
My question: is there possible to configure Apache HTTPd in order to
protect it against these attacks?
Check out mod_limitipconn. You can restrict the number of simultaneous
connections from individual IP addresses.
http://dominia.org/djao/limitipconn.html
--
Justin Pasher
the iptables route would work too, but I think it would be much
easier to just manage it strictly on the apache side.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http
ServerName www.VideoFortWorth.com
I assume these are actually in VirtualHost containers (they don't show
in the email)?
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See
if it says it's enabled. You can try disabling it
temporarily by running setenforce 0. If the problem goes away, you
have your answer. As far as how to get around it without disabling
SElinux, that would be more appropriate for an SElinux mailing list (and
beyond my expertise).
--
Justin
config file to avoid the warning on start-up.
NameVirtualHost 127.0.0.1:80
This will also ensure that Apache tries to server up your VirtualHost
entry when the Host: header is DataEnvironment (as opposed to falling
back to the default site).
--
Justin Pasher
, then the problem lies elsewhere. Try doing an ls
/full/path/in/error/log to see if the system itself shows the file.
Since I personally have not experienced this problem with autofs, I
can't think of much else to look at.
--
Justin Pasher
) versus a 302
(found) redirect shouldn't break any modern browser. Generally a 301
redirect is better in regards to search engine related redirects, but
either should work just fine.
What is the proof that the developer has that shows IE being broken?
--
Justin Pasher
for no obvious reason.
All in all, signs point more to an autofs problem and not Apache.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more
in IE7 versus IE6, Firefox,
Opera, etc.
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users
message (at least one of them) seems to
indicate it is trying to include a PHP file
(/home/domain/apps/Bootstrap.php).
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http
]
RewriteRule .* - [F]
Justin Pasher
/---Original Message---/
/*From:*/ Eric Covener mailto:[EMAIL PROTECTED]
/*Date:*/ 01/12/2008 18:27:25
/*To:*/ users@httpd.apache.org mailto:users@httpd.apache.org
/*Subject:*/ Re: [EMAIL PROTECTED] .htaccess
On Mon, Dec 1, 2008 at 11:46 AM, Kriss [EMAIL
On 11/14/08 4:38 PM, Justin Pasher wrote:
Tolga Guver wrote:
Hi,
I have just setup an apache server in which i want one general page
linked to the users own web pages in their home directories.
I setup the httpd.conf so that users public_html folders be
accessible :
IfModule
:
Inside /var/www/webacula/html/.htaccess:
RewriteCond %{REQUEST_URI} !^/index\.php$
RewriteRule !\.(js|ico|gif|jpg|png|css)$ /index.php
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project
, you are loading
mod_userdir in your apache config, correct? Do you by chance have any
rewrite rules in your config that might be messing with the URL?
--
Justin Pasher
-
The official User-To-User support forum of the Apache
!\.(js|ico|gif|jpg|png|css)$ index.php
You might need to remove the slash at the beginning of ^/index\.php$
(I can't recall off the top of my head how the URI will look when
defining the rules in an .htaccess file with a RewriteBase versus the
apache config).
Justin Pasher
Now when I trying
/firefox.png
Works - Request to http://foo.localhost/webacula/
Works - Request to http://foo.localhost/webacula/index.php
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http
to old emails or the archives).
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED
or possibly the network
connection between the server machine and client machine. You can try
checking the system logs on both machines (/var/log/syslog) to see if
anything useful shows up in there. There might also be something in
/var/log/kern.log.
--
Justin Pasher
://tdocs.travelchannel.com/teams/Login.do
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
from
as
mod_rewrite is altering the URL in some way unexpected, you're still
going to have weird anomalies.
Also, in what directory is the .htaccess file located? It is inside of a
Directory container?
--
Justin Pasher
definitive answers for that. I think
the %ENV hash will hold the rest of the info you need.
Justin Pasher
- Original Message
From: Justin Pasher [EMAIL PROTECTED]
To: users@httpd.apache.org
Sent: Tuesday, October 21, 2008 11:00:33 AM
Subject: Re: [EMAIL PROTECTED] Invoking single app
media.domain1.com
|ProxyPassReverse /media/ https://www.domain2.com/media/|
/VirtualHost
See the documentation for more details.
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html
--
Justin Pasher
-
The official User-To-User
enough...
Cheers and thanks,
Erik
Unless I'm misunderstanding the task, a simple RewriteRule will
accomplish this.
RewriteRule .* /cgi-bin/helloworld.cgi [L]
--
Justin Pasher
-
The official User-To-User support forum
themselves look fine to me, and I
copied them verbatim to my server and it doesn't complain. Perhaps the
file itself is corrupted (something like Windows CRLF line endings
instead of UNIX LF)?
--
Justin Pasher
-
The official
file that does not exist). You
can explore the RewriteCond -f directive to make it smarter in that case.
http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html#rewritecond
--
Justin Pasher
-
The official User-To-User support
are
completely different web site, even if they are the same logically.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
/howto/auth.html
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
from
installation
:( (it says it's an invalid flag). Maybe you'll have better luck than me.
I'm sure there's a way do do this, but I'm not finding anything obvious
in the docs.
--
Justin Pasher
-
The official User-To-User support
directive)?
--
Justin Pasher
- Original Message - From: Justin Pasher
[EMAIL PROTECTED]
To: users@httpd.apache.org
Sent: Friday, October 03, 2008 12:08 PM
Subject: Re: [EMAIL PROTECTED] Protecting a Directory
[EMAIL PROTECTED] wrote:
There still seems to be alot of discrepancy on this issue
anything
special in the rewrite rules to accommodate for http versus https.
You might want to put the RewriteCond directive directly above
RewriteRule, for better readability.
--
Justin Pasher
Is there a way to change the RewriteCond or RewriteRule to accommodate the
Https issues
this.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
from the digest: [EMAIL
this behaviour, or perhaps a better form of
host canonicalization?
Cheers
Tom
Try removing the QSA flag from the RewriteRule. It should only be needed
when you are modifying the query string (which you are not).
--
Justin Pasher
use a rewrite rule or redirect in
the VirtualHost container for the NON-https host.
VirtualHost 1.2.3.4:80
...
RewriteEngine On
RewriteRule ^/(.*)$ https://www.example.com/$1 [R=permanent]
/VirtualHost
--
Justin Pasher
Mike Soultanian wrote:
Justin Pasher wrote:
Ahhh... Now it should actually be possible. If possible, I would
(personally) try to push all traffic to www.csulb.edu whenever they
try to pull csulb.edu. Whether or not this is possible in your
situation, I do not know. Something like
%{HTTP_HOST} !^www\.csulb\.edu$
RewriteRule ^/(.*)$ https://www.csulb.edu/$1 [R=permanent,L]
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html
Mike Soultanian wrote:
Justin Pasher wrote:
You can simplify this a bit by saying redirect anything that is not
going to www.csulb.edu. However, you'll have to put the rewrite
directives inside the VirtualHost configuration for the SSL version
of the site, as the .htaccess file is run after
Justin Pasher wrote:
Mike Soultanian wrote:
Justin Pasher wrote:
You can simplify this a bit by saying redirect anything that is not
going to www.csulb.edu. However, you'll have to put the rewrite
directives inside the VirtualHost configuration for the SSL
version of the site
Mike Soultanian wrote:
Justin Pasher wrote:
Actually, ignore everything I just said. All this time I thought that
was what apache was doing, but it's actually occurring after the
mismatched server name warning is presented. The rewrite rule will
still catch the request and redirect them
the apache processes to be able to
dynamically change configuration options on the fly, which sounds like
it would be extremely messy. It would also have to be defined in some
sort of user created container context, and KeepAlive is only support
in the global config and vhosts.
--
Justin Pasher
UserDir disable
/VirtualHost
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED
, but the next line is ignored.)
RewriteRule ^jahia/Jahia/(.+)$ $1 [L]
/VirtualHost
Have you tried using this?
RewriteRule ^/jahia/Jahia/(.+)$ $1 [L]
Notice the slash at the beginning.
--
Justin Pasher
-
The official User-To-User
it should with the change above). Then
additional rules can be added.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
want to load.
The third rule catches the request to the root directory.
You might need/want to tweak the second rule on how much of the URL it
matches for the rewrite, since I don't know whether things under /site
that are not under /site/jazzd should be redirected.
--
Justin Pasher
. This is most
commonly set to public_html. The files will be pulled like so...
http://1.2.3.4/~username/ - pulls from -
/home/username/public_html (UserDir directive)
--
Justin Pasher
On Sep 16, 2008, at 12:50 PM, Justin Pasher wrote:
Carol Walter wrote:
Hello,
I'm having a configuration
usages
available here:
http://www.pixelbeat.org/scripts/ps_mem.py
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
your page.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
from
[EMAIL PROTECTED] wrote:
On 9/17/08, André Warnier [EMAIL PROTECTED] wrote:
Justin Pasher wrote:
amiribarksdale wrote:
What is the standard way to determine whether a user is indeed logged
in to
a site and online right then? I have a web app where users log
accordingly based upon your
home directory structure. Otherwise, please explain what you are trying
to do a little more.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http
rules depends on whether your files or
directories are symlinks. Check the apache error log to see what what
page the browser is attempting to pull.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP
). If you are trying to
read from the server set value, you should use
$_SERVER['DOCUMENT_ROOT']. If the file works on the other server, then
it probably means you have register_globals set to on, which is a very
bad idea.
Justin Pasher
?
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
from the digest: [EMAIL
of it. If all else
fails, I find checking the apache error log can sometimes reveal things
that you may not have known were going wrong.
At any rate, it sounds like you're all set now!
--
Justin Pasher
-
The official User-To-User
directories/files
like that, then there is no need to worry.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe
the shell's globbing
functionality, which means that it will only return files that exist.
Justin Pasher
- Original Message - From: Justin Pasher
[EMAIL PROTECTED]
To: users@httpd.apache.org
Sent: Thursday, September 11, 2008 6:10 PM
Subject: Re: [EMAIL PROTECTED] Logs
Grant Peel wrote
rules being invoked? Can you turn on the rewrite logging to see
exactly what mod_rewrite is doing?
RewriteLogLevel 3
RewriteLog /path/to/rewrite.log
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP
have a RewriteBase set in the config? It looks like
%{REQUEST_FILENAME} is not being evaluated to the full path of the file.
I haven't had a chance to test myself in a VirtualHost config setup.
--
Justin Pasher
-
The official
Jason Pruim wrote:
On Sep 10, 2008, at 1:38 PM, Justin Pasher wrote:
Jason Pruim wrote:
Actually it is... It was something that I tried to fix the problem.
All the links refer to /mail.php though...
BEGIN LOG
192.168.0.253 - - [10/Sep/2008:13:28:26 -0400]
[purl.schreurprinting.com/sid
system logs in /var/log. Since it's run as a cron job, you only
experience the overheard (VERY small) when the script run each night
Of course, all of this assumes you are running in a *nix environment as
opposed to Windows. I'm not sure about the availability on Windows.
--
Justin Pasher
the apache user have write
access to files it doesn't need write access to.
--
Justin Pasher
-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info
, but those
directives are only allowed in the global and virtualhost config context.
Even with mod_rewrite, since you are actually tricking the server to
report the 405 error code, I don't think you'll be able to report a
proper list of commands in the Allow header without using Limit.
Justin
1 - 100 of 107 matches
Mail list logo
