Package: apache2-mpm-prefork Version: 2.2.3-1 Severity: important I have following lines in /etc/apache2/ports.conf: #v+ #Listen 80 Listen [::]:80 Listen 0.0.0.0:80 #<IfDefine SSL> # Listen [::]:443 # Listen 0.0.0.0:443 #</IfDefine> #v-
This configuration worked fine with Apache 2.0, but not now. Actually
Apache binds only to [::]:80 and doesn't accept connections on IPv4
socket (sysctl net.ipv6.bindv6only returns 1) making web server
absolutely unusable (I haven't set severity to grave because AFAIR
net.ipv6.bindv6only is disabled on Debian by default).
Netstat output:
#v+
[EMAIL PROTECTED] ~]% sudo netstat -ntlp|grep :80
tcp 0 0 192.168.0.1:8080 0.0.0.0:* LISTEN
29161/(squid)
tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN
29161/(squid)
tcp6 0 0 :::80 :::* LISTEN
2439/apache2
#v-
and with [::]:80 commented:
#v+
[EMAIL PROTECTED] ~]% sudo netstat -ntlp|grep :80
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
2656/apache2
tcp 0 0 192.168.0.1:8080 0.0.0.0:* LISTEN
29161/(squid)
tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN
29161/(squid)
#v-
As a workaround I've commented 0.0.0.0 and listed all IPv4 addresses
explicitly.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-ck11
Locale: LANG=pl_PL, LC_CTYPE=pl_PL (charmap=ISO-8859-2)
Versions of packages apache2-mpm-prefork depends on:
ii apache2. 2.2.3-1 Next generation, scalable, extenda
ii libapr1 1.2.7-6 The Apache Portable Runtime Librar
ii libaprut 1.2.7+dfsg-2 The Apache Portable Runtime Utilit
ii libc6 2.3.6.ds1-5 GNU C Library: Shared libraries
ii libdb4.3 4.3.29-6 Berkeley v4.3 Database Libraries [
ii libdb4.4 4.4.20-7 Berkeley v4.4 Database Libraries [
ii libexpat 1.95.8-3.3 XML parsing C library - runtime li
ii libldap2 2.1.30-13+b1 OpenLDAP libraries
ii libpcre3 6.7-1 Perl 5 Compatible Regular Expressi
ii libpq4 8.1.4-7 PostgreSQL C client library
ii libsqlit 3.3.7-1 SQLite 3 shared library
ii libuuid1 1.39+1.40-WIP-2006.10.02+dfsg-1 universally unique id library
apache2-mpm-prefork recommends no packages.
-- no debconf information
--
Linux jest darmowy, jeśli twój czas nie przedstawia żadnej wartości.
Jeśli jest coś warty(czas), Linux jest po prostu tańszy od innych.
Jarek Kamiński
gg# 453620
pgpjimmrYJ3wm.pgp
Description: PGP signature
