Re: [users@httpd] Some questions about configuration Apache from a beginer. [EXT]

2020-09-06 Thread Jason Long
my-sandbox-server.mydomain.com   ServerAlias   freds-sandbox-server.mydomain.com   Include   conf/ssl-conf/mydomain.com.conf   … configuration … From: Jason Long Sent: 03 September 2020 22:43To: users@httpd.apache.orgSubject: [users@httpd] Some questions about configuration Apache from a b

[users@httpd] Some questions about configuration Apache from a beginer.

2020-09-03 Thread Jason Long
Hello,I have some questions about Apache configuration and I'm thankful if anyone help me. 1- In Apache configuration, both of "ServerName" and "ServerAlias" must be defined? Which one must have "www" prefix?  2- If "/etc/pki/tls/private/localhost.key" and "/etc/ssl/certs/localhost.crt" files

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-15 Thread Jason Long
ains; preload" >> >>  ServerAdmin root@localhost >> >>  ServerName >> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.example.com= >> DwIFaQ=D7ByGjS34AllFgecYw0iC6Zq7qlm8uclZFI0SqQnqBo=oH2yp0ge1ecj4oD >> X0XM7vQ=ERvrDk3V3OmOKQ_c29so3_jWrThxEfgCkxLIfX3

[users@httpd] Forwarding IP to HTTPS.

2020-10-11 Thread Jason Long
Hello, Forwarding an IP address to HTTPS domain is the task of Apache or SSL? Thank you. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread Jason Long
site.com=DwIFaQ=D7ByGjS34AllFgecYw0iC6Zq7qlm8uclZFI0SqQnqBo=oH2yp0ge1ecj4oDX0XM7vQ=rK8vCBmQ5CHbZU9JjXzRNDNz8RofAv82ZlfXjYIEtgY=rt4c_6jtMKJiE15dKtx138HTXgpDRMPcmCGbZ0yYwZk= ". On Monday, October 12, 2020, 12:14:31 PM GMT+3:30, Antony Stone wrote: On Monday 12 October 2020 at 07:25:56, Jason

Re: [users@httpd] Forwarding IP to HTTPS.

2020-10-12 Thread Jason Long
Thank you. I want when a user enter my server IP address in his\her browser then it forward to "https://mywebsite.com;. On Monday, October 12, 2020, 12:14:31 PM GMT+3:30, Antony Stone wrote: On Monday 12 October 2020 at 07:25:56, Jason Long wrote: > Hello, > Forwa

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread Jason Long
http://ip/ requests, define another. On 12/10/20 10:26 AM, Jason Long wrote: > Thank you. > I added that lines to my Virtual Host file but it show me "Your connection is > not private". > > > > > > > On Monday, October 12, 2020, 05:16:27 PM GMT+

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread Jason Long
Excuse me, How? On Monday, October 12, 2020, 06:29:38 PM GMT+3:30, Frank Gingras wrote: Always match the trailing slashes when redirecting. On 12/10/20 10:43 AM, Jason Long wrote: > # apachectl -S > # > > My Virtual Host configuration is: > > > Header always

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread Jason Long
At the end of domain name? On Monday, October 12, 2020, 07:01:27 PM GMT+3:30, Frank wrote: I mentioned slashes. Look at yours, and mine. On 12/10/20 11:22 AM, Jason Long wrote: > You used "Redirect / https://hostname.tld/; <https://hostname.tld/> and > I'm using &q

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread Jason Long
Excuse me,Can you clean my configuration? On Monday, October 12, 2020, 07:06:17 PM GMT+3:30, Frank wrote: James, Omitting an explicit ServerName in name-based vhosts is a bad idea as well. You can create conflicts or ambiguities. On 12/10/20 11:22 AM, James Smith wrote: > This would

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread Jason Long
. There is a subtle difference. Also, you don't need a documentroot in a vhost if you redirect every request. On 12/10/20 11:02 AM, Jason Long wrote: > Excuse me, How? > > > > > > > On Monday, October 12, 2020, 06:29:38 PM GMT+3:30, Frank Gingras > wrote:

RE: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-12 Thread Jason Long
t the rest of your wordpress stuff here...   From: Jason Long Sent: 12 October 2020 16:39 To: users@httpd.apache.org Subject: Re: [users@httpd] Forwarding IP to HTTPS. [EXT]   Excuse me, Can you clean my configuration?   On Monday, October 12, 2020, 07:06:17 PM GMT+3:30, Fra

Re: [users@httpd] Forwarding IP to HTTPS. [EXT]

2020-10-18 Thread Jason Long
-S instead. You'll want to read the contents of welcome.conf too. Lastly, you don't need to use mod_rewrite to redirect. It should be your last absolute resort. Every vhost should have an explicit ServerName set too. On 15/10/20 03:22 PM, Jason Long wrote: > Hello, > Here is the output

Re: [users@httpd] IP address show Apache welcome page but domain name working!

2020-09-22 Thread Jason Long
ing the command 'httpd -S'. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Tue, Sep 22, 2020, 9:15 AM Jason Long wrote: > Where is "000-default.conf" file? I have not it!! > > # ls /etc/httpd/conf.modules.d/ > 00-base.conf           00-pro

[users@httpd] IP address show Apache welcome page but domain name working!

2020-09-22 Thread Jason Long
Hello, When I visit my website by its IP address the welcome page of Apache showed, but with "https://domain-name.net; everything is OK. How can I block direct access by IP or forward it to domain? I enabled "mod_rewrite" and my Virtual Host config is: RewriteEngine on RewriteCond

[users@httpd] How to set “Strict-Transport-Security”?

2020-09-27 Thread Jason Long
Hello, For a website with the name "my-example.net", what is the correct syntax of: Header set Content-Security-Policy "default-src 'self';" ? Thank you. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For

Re: [users@httpd] IP address show Apache welcome page but domain name working!

2020-09-22 Thread Jason Long
        01-cgi.conf            README 00-optional.conf       10-fcgid.conf           00-proxy.conf          10-h2.conf  On Tuesday, September 22, 2020, 11:12:28 AM GMT+3:30, Walter Penn wrote: Jason Long wrote: > When I visit my website by its IP address the welcome page of

[users@httpd] Content-Security-Policy for a WordPress website.

2020-09-17 Thread Jason Long
Hello, When I added "Header set Content-Security-Policy "default-src 'self';"" to "httpd.conf" then my website style and some graphical features are disable. Why? Thank you. - To unsubscribe, e-mail:

Re: [users@httpd] Content-Security-Policy for a WordPress website.

2020-09-17 Thread Jason Long
' Note there are no ' "" ' around the default-src. My reference is:     https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP Regards, John On Thu, 2020-09-17 at 19:27 +0000, Jason Long wrote: > Hello, > When I added "Header set Co

Re: [users@httpd] How to set “Strict-Transport-Security”?

2020-09-28 Thread Jason Long
Header set Content-Security-Policy "default-src 'self';" After it, some features of WordPress like menu disabled! On Sunday, September 27, 2020, 05:29:51 PM GMT+3:30, Jim Albert wrote: On 9/27/2020 2:50 AM, Jason Long wrote: > Hello, > For a website with the name

Re: [users@httpd] IP address show Apache welcome page but domain name working!

2020-09-25 Thread Jason Long
, 11:28 AM Jason Long wrote: > I'm using Let's Encrypt. Is it not enough? > > > > > > > On Thursday, September 24, 2020, 08:45:06 PM GMT+3:30, Eric Covener > wrote: > > > > > > Use a certificate valid for (SAN entry) your IP or don't access

Re: [users@httpd] IP address show Apache welcome page but domain name working!

2020-09-24 Thread Jason Long
Can anyone here help me? On Tuesday, September 22, 2020, 04:56:50 PM GMT+3:30, Jason Long wrote: I did: # httpd -S [Tue Sep 22 16:54:21.799963 2020] [so:warn] [pid 1419476:tid 139725243156800] AH01574: module reqtimeout_module is already loaded, skipping [Tue Sep 22 16:54:21.800135

Re: [users@httpd] IP address show Apache welcome page but domain name working!

2020-09-24 Thread Jason Long
How can I solve it? On Thursday, September 24, 2020, 06:54:08 PM GMT+3:30, Eric Covener wrote: This is not avoidable. The SSL handshake is always going to happen before the server has any chance to redirect a request. On Thu, Sep 24, 2020 at 11:20 AM Jason Long wrote: > > I

Re: [users@httpd] IP address show Apache welcome page but domain name working!

2020-09-24 Thread Jason Long
I'm using Let's Encrypt. Is it not enough? On Thursday, September 24, 2020, 08:45:06 PM GMT+3:30, Eric Covener wrote: Use a certificate valid for (SAN entry) your IP or don't access the server via the IP. On Thu, Sep 24, 2020 at 11:26 AM Jason Long wrote: > > How can I

[users@httpd] How to clean Apache memory automatically?

2021-01-12 Thread Jason Long
Hello, Can I use "htcacheclean" for clean memory instead of reset Apache service? Thank you. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Apache in under attack.

2021-01-11 Thread Jason Long
Hello, On a CentOS web server with Apache, someone make a lot of request and it make slowing server. when I disable "httpd" service then problem solve. How can I find who made a lot of request? [url]https://imgur.com/O33g3ql[/url] Any idea to solve it? Thank you.

Re: [users@httpd] Apache in under attack.

2021-01-11 Thread Jason Long
On Tuesday, January 12, 2021, 02:47:01 AM GMT+3:30, Filipe Cifali wrote: You need to investigate your logs and find common patterns there, also there are different tools to handle small and big workloads like you could use iptables/nftables to block based on patterns and number of

Re: [users@httpd] Apache in under attack.

2021-01-11 Thread Jason Long
Thank you. I see a lot of request in "/var/log/httpd/access_log". On Tuesday, January 12, 2021, 02:46:10 AM GMT+3:30, Alain D D Williams wrote: On Mon, Jan 11, 2021 at 11:06:33PM +0000, Jason Long wrote: > Hello, > On a CentOS web server with Apache, someone make

Re: [users@httpd] Apache in under attack.

2021-01-11 Thread Jason Long
, either the attack target or the attackers origins. On Mon, Jan 11, 2021 at 8:26 PM Jason Long wrote: > I used a rule like: > > # firewall-cmd --permanent --zone="public" --add-rich-rule='rule port > port="80" protocol="tcp" accept limit value="1

Re: [users@httpd] Apache in under attack.

2021-01-11 Thread Jason Long
It is a lot of IP addresses !!! On Tuesday, January 12, 2021, 03:30:02 AM GMT+3:30, Nick Folino wrote: How to find pattern: Look at log. Find bad things that are similar. Then: Block bad things from reaching web server. On Mon, Jan 11, 2021 at 6:49 PM Jason Long wrote: >

Re: [users@httpd] Apache in under attack.

2021-01-11 Thread Jason Long
Can you help me?  On Tuesday, January 12, 2021, 03:36:30 AM GMT+3:30, Nick Folino wrote: Concentrate on just one... On Mon, Jan 11, 2021 at 7:02 PM Jason Long wrote: > It is a lot of IP addresses !!! > > > > > > > On Tuesday, January 12, 2021, 03

Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
System administrators doing it manually??? On Tuesday, January 12, 2021, 01:28:50 PM GMT+3:30, James Smith wrote: Rate limiting may work - but the rate may be just slightly to slow for your setting - manually doing it is a good thing ... -Original Message- From: Jason Long

Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
I often use cut instead of awk.. tail -1 access.log | cut -d ' ' -f 1 | sort | uniq -c | sort -nr | head -----Original Message- From: Jason Long Sent: 12 January 2021 08:53 To: users@httpd.apache.org Subject: Re: [users@httpd] Apache in under attack. [EXT] It show me: 13180 X.X.X.X    1127 X

Re: [users@httpd] Apache in under attack.

2021-01-12 Thread Jason Long
Apache configuration is: https://paste.ubuntu.com/p/RTC2WWMdYH/ And "www.conf" is: https://paste.ubuntu.com/p/S9q5Kwpfcc/ And other settings: https://paste.ubuntu.com/p/NydSyZghJ8/ Which one is not OK? On Tuesday, January 12, 2021, 12:23:52 PM GMT+3:30, Jason Long wrote:

Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
development stuff it is a better flavour of linux} What is the output of: apache2 -t -D DUMP_MODULES to see what modules you have installed -Original Message- From: Jason Long Sent: 12 January 2021 09:43 To: users@httpd.apache.org Subject: Re: [users@httpd] Apache in under attack. [EXT

Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
) mime_module (shared) mpm_prefork_module (shared) perl_module (shared) php7_module (shared) proxy_module (shared) proxy_ftp_module (shared) proxy_http_module (shared) rewrite_module (shared) setenvif_module (shared) status_module (shared) -Original Message- From: Jason Long Sent: 12

Re: [users@httpd] Apache in under attack.

2021-01-12 Thread Jason Long
in bash shell cat access.log | awk '{print $1}' | sort | uniq -c | sort -nr | head This will show you most frequent IPs, sorted in descending order. Block as needed On 1/11/21, 7:11 PM, "Jason Long" wrote:     Can you help me?                             On Tuesday, Januar

Re: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
: https://security.stackexchange.com/q/35773/213194 Am 12.01.21, 10:26 schrieb Jason Long : >  Thank you, but "Firewalld" or "iptables" can't do it automatically? When an >IP sending many request then it automatically blocked. > > > > > > > On

Re: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
can use a cron job which emails you the output of: ps -e -o rsz,vsz,sz,cp,cmd | grep apache2 | grep -v grep | sort -k 1 -n to see if you start or if it grows gradually -Original Message- From: Jason Long Sent: 12 January 2021 10:01 To: users@httpd.apache.org Subject: Re: [users@httpd

Re: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
incoming traffic you can do: netstat -n | grep ':443 ' | grep -v TIME_WAIT The incoming IP should be the 2nd address (or ':80 ' if you aren't doing SSL) Remove the grep -v TIME_WAIT to see all connections {and recent connections} -Original Message- From: Jason Long Sent: 12 January 2021

Re: [users@httpd] Aw: Re: [users@httpd] Apache in under attack. [EXT]

2021-01-12 Thread Jason Long
the server to swap - If you are permanently using a lot of swap then that slows down your processes and can cause your request to back up (a bit like a traffic jam) You should only really have about 20-30 modules running. -Original Message- From: Jason Long Sent: 12 January 2021 11:14

Re: [users@httpd] Disable directory indexing for a specific directory.

2020-11-24 Thread Jason Long
anted (which is, I suppose, in server global configuration) Le 23/11/2020 à 12:11, Jason Long a écrit : > Sure. > > > Header always set Strict-Transport-Security "max-age=63072000; > includeSubdomains; preload" > ServerAdmin root@localhost > ServerName www.Examp

Re: [users@httpd] Disable directory indexing for a specific directory.

2020-11-28 Thread Jason Long
it in your original message : Hello, I have a WordPress website and my Virtual Host file include below lines: Options Indexes FollowSymLinks AllowOverride all Require all granted Le 24/11/2020 à 13:46, Jason Long a écrit : > Not really. > In server global configuration? Is you mean "

Re: [users@httpd] Disable directory indexing for a specific directory.

2020-11-28 Thread Jason Long
nse to let .htaccess file override the configuration you are trying to apply. El sáb, 28 nov 2020 a las 17:20, Jason Long () escribió: > > Thank you. > I asked it on WordPress froum: > https://wordpress.org/support/topic/how-to-disable-directory-listing-in-wordpress/#post-137196

[users@httpd] Disable directory indexing for a specific directory.

2020-11-16 Thread Jason Long
Hello, I have a WordPress website and my Virtual Host file include below lines: Options Indexes FollowSymLinks AllowOverride all Require all granted Some of my WordPress directories are browsable and when I open the URLs, then the content of the directories displayed:

Re: [users@httpd] Disable directory indexing for a specific directory.

2020-11-22 Thread Jason Long
Hello, Any idea? Thanks. On Monday, November 16, 2020, 08:11:58 PM GMT+3:30, Jason Long wrote: Hello, I have a WordPress website and my Virtual Host file include below lines: Options Indexes FollowSymLinks AllowOverride all Require all granted Some of my WordPress directories

Re: [users@httpd] Disable directory indexing for a specific directory.

2020-11-23 Thread Jason Long
in your Virtual host complete configuration ? Le 22/11/2020 à 14:50, Jason Long a écrit : > Hello, > Any idea? > > Thanks. > > > > > > > On Monday, November 16, 2020, 08:11:58 PM GMT+3:30, Jason Long > wrote: > > > > > > Hello, > I have a W

[users@httpd] Is it possible to exclude a directory from listing?

2021-01-21 Thread Jason Long
Hello, Is it possible to disable Directory Listing for a directory and its sub-directory except one of them? For example, I used "Options -Indexes" and my directory have two  sub-directories "Dir1" and "Dir2", but I like Directory Listing enabled for "Dir2". Thank you.

Re: [users@httpd] Apache in under attack.

2021-01-14 Thread Jason Long
Server have 4 CPU cores and 6GB of RAM. I pasted Apache configuration. In your opinion, which parts of servers must be examine? On Wednesday, January 13, 2021, 08:30:58 PM GMT+3:30, @lbutlr wrote: > On 12 Jan 2021, at 01:52, Jason Long wrote: > > It show me: > >

Re: [users@httpd] Is it possible to exclude a directory from listing?

2021-01-21 Thread Jason Long
Thank you. I did: Options -Indexes AllowOverride All Require all granted But when I browse "https://MyDomain.net/wp-content/plugins; then I can see the content of the plugins directory! Why? On Thursday, January 21, 2021, 07:56:38 PM GMT+3:30, Dino Ciuffetti wrote: > Is it

[users@httpd] Is my configuration safe enough?

2021-01-20 Thread Jason Long
Hello, I want to disable Directory Listing on my server and my Virtual Server configuration is: Options -Indexes AllowOverride All Require all granted Is it OK and safe? Thank you. - To unsubscribe, e-mail:

Re: [users@httpd] Apache in under attack.

2021-01-17 Thread Jason Long
>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio On Thursday, January 14, 2021, 11:43:33 PM GMT+3:30, Richard wrote: You should look at adding the %D and %T format strings to your httpd access log configuration so that you can capture the

Re: [users@httpd] Is it possible to exclude a directory from listing?

2021-01-29 Thread Jason Long
ry Listing for all directories except "wp-includes" directory then what should my settings be like? Thank you. On Friday, January 22, 2021, 01:11:41 AM GMT+3:30, Antony Stone wrote: On Thursday 21 January 2021 at 22:09:39, Jason Long wrote: > I did: > > Options -

[users@httpd] Is proxy to proxy improving the security?

2021-05-15 Thread Jason Long
Hello, Is proxy to proxy improving the security? For example: The Internet --> Reverse Proxy Server --> Reverse Proxy Server --> Web Site Thank you. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional

[users@httpd] Which parameters must be set to solve these Vulnerabilities?

2021-02-08 Thread Jason Long
Hello, I scanned my Apache web server and below Vulnerabilities discovered: 1- Content Security Policy (CSP) Header Not Set 2- HTTP to HTTPS Insecure Transition in Form Post 3- Reverse Tabnabbing 4- Source Code Disclosure - PHP 5- Source Code Disclosure - Perl 6- Sub Resource Integrity Attribute

Re: [users@httpd] Is it possible to exclude a directory from listing?

2021-02-08 Thread Jason Long
Hello, Any idea? On Friday, January 29, 2021, 04:07:30 PM GMT+3:30, Jason Long wrote: Thank you for your reply. The "wp-content" directory is a sub-directory of "wp" directory: $ ls /var/www/wp/ cgi-bin                                     

Re: [users@httpd] Which parameters must be set to solve these Vulnerabilities?

2021-02-08 Thread Jason Long
Thank you for your useful information. I checked my server with "https://securityheaders.com/; and result is: https://i.postimg.cc/SsBBtRsT/Header.png To solve the Content Security Policy, I added below line to "httpd.conf": Header set Content-Security-Policy "default-src 'self';" But after it

Re: [users@httpd] Which parameters must be set to solve these Vulnerabilities?

2021-02-09 Thread Jason Long
What do you mean? On Monday, February 8, 2021, 09:00:46 PM GMT+3:30, Nick Folino wrote: What a great site!  It consolidates weak servers for hackers to find easier. On Mon, Feb 8, 2021 at 11:00 AM Jason Long wrote: > Thank you for your useful information. > I checked my

Re: [users@httpd] Which parameters must be set to solve these Vulnerabilities? [EXT]

2021-02-09 Thread Jason Long
ind easier.   On Mon, Feb 8, 2021 at 11:00 AM Jason Long wrote: >   > Thank you for your useful information. > I checked my server with "https://securityheaders.com/ [securityheaders.com]" > and result is: > https://i.postimg.cc/SsBBtRsT/Header.png [i.postimg.cc] > >

[users@httpd] How to set a password for the WordPress logging page?

2021-02-09 Thread Jason Long
Hello, I want to set a password for the WordPress logging page and when someone visit "https://mywebsite.com/wp-admin; then Apache asks a username and password and then show the logging page. Something like  https://www.tecmint.com/phpmyadmin-login-password-protection-htaccess/ If my WordPress

Re: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread Jason Long
M GMT+3:30, Jason Long wrote: Thank you so much. Thus, The Front end and Back end servers are same about the security. What does "handle backend server down" mean? On Tuesday, March 9, 2021, 04:30:01 PM GMT+3:30, James Smith wrote: Yes - you should harden the front

Re: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread Jason Long
You can also add/remove headers on the way in/out. -Original Message- From: Jason Long Sent: 11 March 2021 12:21 To: users@httpd.apache.org Subject: Re: [users@httpd] What should be considered about the reverse proxy server? [EXT] Hello, Can anyone answer to my questions? 1- What

[users@httpd] Is NGINX faster than Apache?

2021-03-11 Thread Jason Long
Hello, Is it true that NGINX is faster than Apache?  https://www.hostingadvice.com/how-to/nginx-vs-apache/ In which environment, Apache must use? Thank you. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For

Re: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread Jason Long
r), need I to install Apache Web Server on the Front-End server? 3- Can anyone tell me what is the main difference between the Forward Proxy and Reverse Proxy? On Thursday, March 11, 2021, 07:14:29 PM GMT+3:30, Antony Stone wrote: On Thursday 11 March 2021 at 15:35:17, Jason Long wrote

Re: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread Jason Long
proxy is between the internet and the webserver There are some issues with mod_security and e.g. wordpress sites - so you have to take care to tune it - we often just use a set of general rules to act as a first level of security -Original Message- From: Jason Long Sent: 11 March 2021

[users@httpd] Apache Reverse Proxy and Load Balancer.

2021-03-11 Thread Jason Long
Hello, I configured my Apache Reverse Proxy as a Load Balancer to handle Back-End servers. When a Back-End server stopped, then another one provide service. How can I do it with Reverse Proxy server itself? When a Reverse Proxy stopped, then another Reverse Proxy provides services? Thank you.

Re: [users@httpd] Apache Tomcat and Load Balancing.

2021-03-11 Thread Jason Long
Sorry. I asked it because in a tutorial, the author talked about configuring Apache Tomcat on the Back-End servers first. On Thursday, March 11, 2021, 11:06:18 PM GMT+3:30, Eric Covener wrote: On Thu, Mar 11, 2021 at 2:33 PM Jason Long wrote: > > Hello, > Is Apache Tomc

Re: [users@httpd] What should be considered about the reverse proxy server? [EXT]

2021-03-11 Thread Jason Long
it is to restrictive (it breaks wordpress admin ) so we don't actually use it -Original Message- From: Jason Long Sent: 11 March 2021 18:47 To: users@httpd.apache.org Subject: Re: [users@httpd] What should be considered about the reverse proxy server? [EXT] Thank you. How about questions number 2 and 3

[users@httpd] Apache Tomcat and Load Balancing.

2021-03-11 Thread Jason Long
Hello, Is Apache Tomcat needed to launch a Load Balancer? Thank you. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Is NGINX faster than Apache?

2021-03-11 Thread Jason Long
:34 AM Jason Long wrote: > Hello, > Is it true that NGINX is faster than Apache?  > > https://www.hostingadvice.com/how-to/nginx-vs-apache/ > > In which environment, Apache must use? > > Thank you. > > ---

Re: [users@httpd] Re: httpd[803535]:

2021-03-14 Thread Jason Long
Yes: Options -Indexes AllowOverride All Require all granted Include conf.d/tor-ip.conf On Sunday, March 14, 2021, 07:04:15 PM GMT+3:30, Christophe JAILLET wrote: Le 14/03/2021 à 14:59, Jason Long a écrit : > Hello, > I want to block Tor IP addresses and I downloaded a list

Re: [users@httpd] httpd[803535]:

2021-03-14 Thread Jason Long
at 10:00 AM Jason Long wrote: > Hello, > I want to block Tor IP addresses and I downloaded a list of Tor IP addresses > and put it as a "tor-ip.conf" file under the "/etc/httpd/conf.d/" directory. > Then edited my Virtual Host configuration file as below: > &

[users@httpd] httpd[803535]:

2021-03-14 Thread Jason Long
Hello, I want to block Tor IP addresses and I downloaded a list of Tor IP addresses and put it as a "tor-ip.conf" file under the "/etc/httpd/conf.d/" directory. Then edited my Virtual Host configuration file as below: Options -Indexes AllowOverride All Require all granted Include

Re: [users@httpd] Re: httpd[803535]:

2021-03-14 Thread Jason Long
/03/2021 à 17:23, Jason Long a écrit : > Yes: > > > Options -Indexes > AllowOverride All > Require all granted > Include conf.d/tor-ip.conf > > > That is not my point. How your conf files are loaded (the one for your vh, ...)? Sometimes the "main&quo

Re: [users@httpd] Re: httpd[803535]:

2021-03-14 Thread Jason Long
can visit my website with the Tor Browser!!! On Sunday, March 14, 2021, 11:00:19 PM GMT+3:30, Eric Covener wrote: On Sun, Mar 14, 2021 at 3:25 PM Jason Long wrote: > > Thanks. > I commented that line and got below error: > > # apachectl configtest > [Sun Mar 14 22:51:10.

Re: [users@httpd] Re: httpd[803535]:

2021-03-16 Thread Jason Long
Hello, Instead of "ErrorDocument 403 "Unusual activity has been detected from this IP address."" message, how can I forward it to another page? Thanks. On Monday, March 15, 2021, 11:49:41 PM GMT+3:30, Jason Long wrote: I solved the problem:          

Re: [users@httpd] Apache Reverse Proxy and Load Balancer.

2021-03-15 Thread Jason Long
Yes. I create a load balancer my Apache website, but I'm thinking about my Reverse Proxy itself. On Monday, March 15, 2021, 04:15:52 PM GMT+3:30, Jim Albert wrote: On 3/15/2021 7:25 AM, Jason Long wrote: > Thanks. > Thus, Apache can't help me about it? I need somethin

Re: [users@httpd] Re: httpd[803535]:

2021-03-15 Thread Jason Long
me my IP is : 79.99.83.* On Monday, March 15, 2021, 04:34:12 PM GMT+3:30, Antony Stone wrote: On Monday 15 March 2021 at 13:48:27, Jason Long wrote: > Thank you. > I guess something is wrong! I agree with you. > I put my IP address Please answer, in as much detail a

Re: [users@httpd] Re: httpd[803535]:

2021-03-15 Thread Jason Long
conf | grep "IP" Require not ip "IP" Why? On Monday, March 15, 2021, 01:29:31 AM GMT+3:30, Antony Stone wrote: On Sunday 14 March 2021 at 20:37:15, Jason Long wrote: > I can visit my website with the Tor Browser!!! Look in your website log files to find out w

Re: [users@httpd] Apache Reverse Proxy and Load Balancer.

2021-03-15 Thread Jason Long
jue, 11 mar 2021 a las 20:29, Jason Long () escribió: > > Hello, > I configured my Apache Reverse Proxy as a Load Balancer to handle Back-End > servers. When a Back-End server stopped, then another one provide service. > How can I do it with Reverse Proxy server itself? When

Re: [users@httpd] Re: httpd[803535]:

2021-03-15 Thread Jason Long
IP address is "1.2.3.4", but in Apache log, my IP address is "1.2.3.5". Please see: https://paste.ubuntu.com/p/BhWN6dmCJX/ On Monday, March 15, 2021, 04:01:58 PM GMT+3:30, Antony Stone wrote: On Monday 15 March 2021 at 12:22:07, Jason Long wrote: > Thank you. &

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-16 Thread Jason Long
ProxyPass / http://192.168.1./         ProxyPassReverse / http://192.168.1.5/ Am I right? On Tuesday, March 16, 2021, 10:01:27 PM GMT+3:30, Antony Stone wrote: On Tuesday 16 March 2021 at 19:16:56, Jason Long wrote: > Hello, > For a website, I created a reverse proxy c

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
at 13:25:34, Jason Long wrote: > No, I don't need a load balance. Okay, so each request goes to one back-end server, and if that server is unavailable, the request fails.  You do not expect the request to be sent to another backend server instead. > I want my Reverse Proxy service to the

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
GMT+3:30, Antony Stone wrote: On Wednesday 17 March 2021 at 14:28:29, Jason Long wrote: > I want to have one Reverse Proxy server that service to some web servers > that each of them has theirs domains and IPs. I want to know, for 10 > different websites that each of them has diff

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
Antony Stone wrote: On Wednesday 17 March 2021 at 14:57:06, Jason Long wrote: > My current configuration is: > > >      ServerName node3 >      ErrorLog /var/log/httpd/error_log >      TransferLog /var/log/httpd/access_log >      I don't like the look of the / in that tag.  It'

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
Wednesday 17 March 2021 at 14:40:32, Jason Long wrote: > Thank you. > Which part of my configuration is wrong? I don't know.  I've lost track of what your configuration looks like now. > My Reverse Proxy can see my Apache web servers and as I said, its worked > with one host, but can'

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
2021 at 12:34:44, Jason Long wrote: > I'm a newbie and as you said you are here from 2010. OK, tell me how can I > configure an Apache Reverse Proxy to service to the multiple web servers? I did a Google search for "Apache reverse proxy multiple web servers". https://stackoverfl

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
://httpd.apache.org/docs/2.4/howto/reverse_proxy.html No example! Here is for questions and answers, not to spread hatred. On Wednesday, March 17, 2021, 01:57:52 AM GMT+3:30, Stormy wrote: On 2021-03-16 5:43 p.m., Jason Long wrote: > I used Name-based Virtual Host too: Dear moderators, I h

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
om server. Is it clear? Examples that I found was about subdomain or... On Wednesday, March 17, 2021, 03:43:26 PM GMT+3:30, Eric Covener wrote: On Wed, Mar 17, 2021 at 8:09 AM Jason Long wrote: > > Thank you. > I saw https://stackoverflow.com/questions/50611098. I tested it, b

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
configuration? On Wednesday, March 17, 2021, 07:45:47 PM GMT+3:30, Eric Covener wrote: On Wed, Mar 17, 2021 at 12:05 PM Jason Long wrote: > > Thank you. > My VM uses port forwarding. When I browse 127.0.0.1:2080 on my host then it > forwarded to my guest port 80. &

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
No, it is not home work. On Wednesday, March 17, 2021, 08:11:51 PM GMT+3:30, Eric Covener wrote: On Wed, Mar 17, 2021 at 12:36 PM Jason Long wrote: > > Why this is a matter to the Apache? In a real scenario, consider that an > Apache Reverse Proxy servicing to 100 web ser

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
t to properly server. Right? On Wednesday, March 17, 2021, 08:17:29 PM GMT+3:30, Antony Stone wrote: On Wednesday 17 March 2021 at 17:33:46, Jason Long wrote: > The load balancing is different. It is kind of HA. Yes. > When my real server is down then Apache forward requests

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
her server. I used " " and not any IP. On Wednesday, March 17, 2021, 05:57:50 PM GMT+3:30, Antony Stone wrote: On Wednesday 17 March 2021 at 15:15:49, Jason Long wrote: > One of my Apache server (192.168.1.4) is turned off and I tried to see my > server. Please speci

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
ers. On Wednesday, March 17, 2021, 08:11:51 PM GMT+3:30, Eric Covener wrote: On Wed, Mar 17, 2021 at 12:36 PM Jason Long wrote: > > Why this is a matter to the Apache? In a real scenario, consider that an > Apache Reverse Proxy servicing to 100 web servers, one of these servers is

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
//1.2.3.5/ ProxyPassReverse   http://1.2.3.5/    On Wednesday, March 17, 2021, 07:54:53 PM GMT+3:30, Antony Stone wrote: On Wednesday 17 March 2021 at 17:05:37, Jason Long wrote: > Thank you. > My VM uses port forwarding. When I browse 127.0.0.1:2080 on my host then it &g

Re: [users@httpd] Apache Reverse Proxy for more than one website.

2021-03-17 Thread Jason Long
Sure. Thank you. On Wednesday, March 17, 2021, 08:26:40 PM GMT+3:30, Antony Stone wrote: On Wednesday 17 March 2021 at 17:44:07, Jason Long wrote: > No, it is not home work. What Eric means is that you should start trying to solve some of these problems on your own, and not

Re: [users@httpd] Re: httpd[803535]:

2021-03-15 Thread Jason Long
Yes. I saw the same IP address. What is the problem? On Monday, March 15, 2021, 05:07:07 PM GMT+3:30, Antony Stone wrote: On Monday 15 March 2021 at 14:23:18, Jason Long wrote: > Thank you. > As I said, I visted https://www.myip.com/ website without Tor Browser and > it sho

Re: [users@httpd] Re: httpd[803535]:

2021-03-15 Thread Jason Long
I have a question. My website configuration must be inside of "..." ? My "..." is outside of VirtualHost! Please see: https://paste.ubuntu.com/p/fGsHN6mz8G/ On Monday, March 15, 2021, 09:08:11 PM GMT+3:30, Jason Long wrote: Yes. I saw the same IP address.

Re: [users@httpd] Re: httpd[803535]:

2021-03-15 Thread Jason Long
I solved the problem:           Require all granted       Include conf/tor-ip.conf     ErrorDocument 403 "Unusual activity has been detected from this IP address." On Monday, March 15, 2021, 10:28:22 PM GMT+3:30, Antony Stone wrote: On Monday 15 March 2021 at 18:37:40,

[users@httpd] Apache Reverse Proxy for more than one website.

2021-03-16 Thread Jason Long
Hello, For a website, I created a reverse proxy config file under the "/etc/httpd/conf.d/" directory as below:         ProxyPreserveHost On         ProxyPass / http://192.168.1.4/         ProxyPassReverse / http://192.168.1.4/ If I have other servers, then I must create a config file for each

  1   2   >