Re: [EMAIL PROTECTED] Some problems with Virtual Host setup and SSL

2007-08-19 Thread via . lej
Thanks, so, i give up my system...The easiest way to do what i want is to use:

1)VirtualHost1 without SSL (http://my.server/)
2)Virtualhost2 with SSL (http://admin.server/ with redirection to 
https://admin.server/)
3)A way to redirect webpages from https://localhost:3000/ to 
https://admin.server/ntop/

Is it possible and how to do that ?

Thanks,
Vianney


Le Sat, 18 Aug 2007 22:58:20 +0200, Tony Stevenson <[EMAIL PROTECTED]> a écrit:

> Vianney
>
> You cannot (without some major tweaks) use name based virtualhosts + SSL.
>
> For each site it is recommended that you use 1 IP and or port.
> Have a look at the wikipage, even though it is still a work in progress
> you should understand the reasons.
>
> http://wiki.apache.org/httpd/NameBasedSSLVHosts
>
> Or you can refer to the official Apache documentation, here:
>
> http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html#vhosts2
>
>
>
> Cheers,
> Tony
>
>
>
>
> [EMAIL PROTECTED] wrote:
>> Hello !
>>
>>  I've some problems with Virtual Hosts on Apache2, please have a look at 
>> my config files:
>>
>> ===
>> File sites-enabled/default
>> ===
>>
>> >
>> NameVirtualHost *
>> 
>>  ServerAdmin [EMAIL PROTECTED]
>>
>>  DocumentRoot /var/www/
>>  
>>  Options FollowSymLinks
>>  AllowOverride None
>>  
>>  
>>  Options Indexes FollowSymLinks MultiViews
>>  AllowOverride None
>>  Order allow,deny
>>  allow from all
>>  
>>
>>  ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
>>  
>>  AllowOverride None
>>  Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
>>  Order allow,deny
>>  Allow from all
>>
>>
>>  ErrorLog /var/log/apache2/error.log
>>
>>  # Possible values include: debug, info, notice, warn, error, crit,
>>  # alert, emerg.
>>  LogLevel warn
>>
>>  CustomLog /var/log/apache2/access.log combined
>>  ServerSignature On
>>
>>  Alias /doc/ "/usr/share/doc/"
>>  
>>  Options Indexes MultiViews FollowSymLinks
>>  AllowOverride None
>>  Order deny,allow
>>  Deny from all
>>  Allow from 127.0.0.0/255.0.0.0 ::1/128
>>  
>>
>>  DocumentRoot /var/www/phpmyadmin
>>  ServerSignature On
>>
>>  
>>  RewriteEngine on
>>  RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]
>>  
>>
>> 
>>
>> <---
>>
>>
>>
>> ===
>> File sites-enabled/ssl
>> 
>>
>> -->
>> NameVirtualHost *:443
>> 
>>
>> # change: address of web admin
>> ServerAdmin [EMAIL PROTECTED]
>> SSLEngine On
>> SSLCertificateFile /etc/ssl/CA/private/Administration-key-cert.pem
>>
>> ServerSignature On
>>
>>   
>>   Options FollowSymLinks
>>   AllowOverride None
>>   
>>
>>
>> ProxyHTMLLogVerbose On
>> ProxyHTMLExtended On
>>
>>
>> ProxyRequests Off
>> 
>> Order deny,allow
>> Allow from all
>> 
>>
>> ProxyPass /ntop/  https://localhost:3000/
>> ProxyPassReverse /ntop/  https://localhost:3000/
>>
>> <---
>>
>>
>> When i go to http://server/, it redirects to https://server/ and i have a 
>> 404 error.
>>
>> I just want to redirect http://admin.server/phpmyadmin (not 
>> http://server/phpmyadmin byt http://admin.server/phpmyadmin) to 
>> https://admin.server/phpmyadmin
>>
>> I would also redirect the web pages of a software running on localhost:3000 
>> (on the server) to https://admin.server/ntop/
>>
>> How can i do that ?
>>
>> Thanks !
>> Vianney
>>
>>
>>
>>
>> -
>> The official User-To-User support forum of the Apache HTTP Server Project.
>> See http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>"   from the digest: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
>"   from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] POST message handling

2007-08-19 Thread Rakesh Agarwal
Hi,

I am new to Apache so please excuse me for asking fundamental question. 
I would like to know how is a http message processed by the httpd server. I 
have constructed  a POST message with the login details for logging in to a 
website, I would like to know what are the criteria apart from the "action" tag 
with which Apache determines the "PHP" script to be invoked. I need some other 
criteria for invoking the PHP script because I want to hide the actual PHP 
script doing the processing. I require this to prevent the PHP source code from 
getting leaked


- Rakesh

   
-
Luggage? GPS? Comic books? 
Check out fitting  gifts for grads at Yahoo! Search.

Re: [EMAIL PROTECTED] POST message handling

2007-08-19 Thread Vincent Bray
On 19/08/07, Rakesh Agarwal <[EMAIL PROTECTED]> wrote:
> I am new to Apache so please excuse me for asking fundamental question.
> I would like to know how is a http message processed by the httpd server. I
> have constructed  a POST message with the login details for logging in to a
> website, I would like to know what are the criteria apart from the "action"
> tag with which Apache determines the "PHP" script to be invoked. I need some
> other criteria for invoking the PHP script because I want to hide the actual
> PHP script doing the processing. I require this to prevent the PHP source
> code from getting leaked

Apache doesn't understand, or generally care, about the format of POST
request entities. There's a common misconception that POST ==
application/x-www-form-urlencoded, but there are several encodings one
can use for POST entities.

Hiding PHP is another matter entirely, and somewhat impossible to do
given the various remote crashing bugs it contains. Perhaps you could
explain better what you're trying to hide?

-- 
noodl

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] authn_dbd: what format for encrypted password?

2007-08-19 Thread Phil Endecott

Tom Donovan wrote:

Joshua Slive wrote:

How about making a page on wiki.apache.org/httpd/ for that?


Done!  http://wiki.apache.org/httpd/Encrypted_Passwords


Thanks Tom, that's excellent.  You might like to make it explicit that
the format is detected by inspection of the first part of the string; I
mention this because it's not how the old mod_auth_pgsql worked (it had
an Auth_PG_hash_type directive).


Regards,

Phil.








-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] POST message handling

2007-08-19 Thread Jeff Peng

 Original-Nachricht 
Datum: Sun, 19 Aug 2007 01:50:59 -0700 (PDT)
Von: Rakesh Agarwal <[EMAIL PROTECTED]>
An: users@httpd.apache.org
Betreff: [EMAIL PROTECTED] POST message handling

> Hi,
> 
> I am new to Apache so please excuse me for asking fundamental question. 
> I would like to know how is a http message processed by the httpd server.
> I have constructed  a POST message with the login details for logging in to
> a website, I would like to know what are the criteria apart from the
> "action" tag with which Apache determines the "PHP" script to be invoked. I 
> need
> some other criteria for invoking the PHP script because I want to hide the
> actual PHP script doing the processing. I require this to prevent the PHP
> source code from getting leaked
> 
> 

Generally PHP scripts wouldn't get leaked if you set it correctly.
If you really want to hide the reponse details,maybe writting a Apache module 
by yourself is better.Apache has full APIs to some language interface like C 
and Perl(mod_perl),you may check their documents.
-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] How to deny sites

2007-08-19 Thread lists . httpd-users
Hallo httpd users,

Quite some time ago I had an option in my configuration which made
it possible to deny sites when they were listed in a file in the
form:
Deny from aaa.bbb.ccc.ddd
Deny from ppp.qqq.rrr.sss
&c
That option disappeared from my configuration somehow and I can't
find how to put it in anymore.
Does anybody know what I'm talking about and can tell me how to
do it?
I'm running Apache httpd 2.0.4 on a SlackWare 12.0 Linux system.

Many thanks in advance.

Groeten,

   Hans.

jdh punt beekhuizen bij duinheks punt xs4all punt nl

--- GoldED+/LNX 1.1.5/070624
 * Origin: The Wizard is using MBSE/Linux (2:280/1018)

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] POST message handling

2007-08-19 Thread Rakesh Agarwal
Hi Vincent,

Let me tell you the situation I have
The home page of my site has a form for user to login with user login and 
passwd. The logic for the "login" is in a file login.php. I do not want this 
URL to be visible in the home page as part of the form action because then 
anyone could download my php file and see the source code.

What I was wondering was the Apache web server could somehow figure out which 
php file to invoke based on some information in the HTTP message other than the 
URL. This I thouht could be done with some configuration of Apache

Thanks
Rakesh

Vincent Bray <[EMAIL PROTECTED]> wrote: On 19/08/07, Rakesh Agarwal  wrote:
> I am new to Apache so please excuse me for asking fundamental question.
> I would like to know how is a http message processed by the httpd server. I
> have constructed  a POST message with the login details for logging in to a
> website, I would like to know what are the criteria apart from the "action"
> tag with which Apache determines the "PHP" script to be invoked. I need some
> other criteria for invoking the PHP script because I want to hide the actual
> PHP script doing the processing. I require this to prevent the PHP source
> code from getting leaked

Apache doesn't understand, or generally care, about the format of POST
request entities. There's a common misconception that POST ==
application/x-www-form-urlencoded, but there are several encodings one
can use for POST entities.

Hiding PHP is another matter entirely, and somewhat impossible to do
given the various remote crashing bugs it contains. Perhaps you could
explain better what you're trying to hide?

-- 
noodl

-
The official User-To-User support forum of the Apache HTTP Server Project.
See  for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



   
-
Yahoo! oneSearch: Finally,  mobile search that gives answers, not web links. 

Re: [EMAIL PROTECTED] POST message handling

2007-08-19 Thread Rakesh Agarwal
Hi Jeff,

Maybe this is a bit off-topic, you mentioned that there are ways to prevent 
leaking of my source code. If you do not mind can share some of the 
methodolgies to prevent the php source code from getting leaked since the URL 
which has the php file name needs to be mentioned in the html pages

- Rakesh

Jeff Peng <[EMAIL PROTECTED]> wrote: 
 Original-Nachricht 
Datum: Sun, 19 Aug 2007 01:50:59 -0700 (PDT)
Von: Rakesh Agarwal 
An: users@httpd.apache.org
Betreff: [EMAIL PROTECTED] POST message handling

> Hi,
> 
> I am new to Apache so please excuse me for asking fundamental question. 
> I would like to know how is a http message processed by the httpd server.
> I have constructed  a POST message with the login details for logging in to
> a website, I would like to know what are the criteria apart from the
> "action" tag with which Apache determines the "PHP" script to be invoked. I 
> need
> some other criteria for invoking the PHP script because I want to hide the
> actual PHP script doing the processing. I require this to prevent the PHP
> source code from getting leaked
> 
> 

Generally PHP scripts wouldn't get leaked if you set it correctly.
If you really want to hide the reponse details,maybe writting a Apache module 
by yourself is better.Apache has full APIs to some language interface like C 
and Perl(mod_perl),you may check their documents.
-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

-
The official User-To-User support forum of the Apache HTTP Server Project.
See  for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



   
-
Looking for a deal? Find great prices on flights and hotels with Yahoo! 
FareChase.

Re: [EMAIL PROTECTED] POST message handling

2007-08-19 Thread Jeff Peng

 Original-Nachricht 
Datum: Sun, 19 Aug 2007 05:07:23 -0700 (PDT)
Von: Rakesh Agarwal <[EMAIL PROTECTED]>
An: users@httpd.apache.org
Betreff: Re: [EMAIL PROTECTED] POST message handling

> Hi Jeff,
> 
> Maybe this is a bit off-topic, you mentioned that there are ways to
> prevent leaking of my source code. If you do not mind can share some of the
> methodolgies to prevent the php source code from getting leaked since the URL
> which has the php file name needs to be mentioned in the html pages
> 

Hello,

When you compiled php as Apache's handler,Apache can invoke php files correctly 
by itself.That's to say,when users access the php file with http method,it only 
output the html content.Given your php file is /auth.php,and user access this 
php with any useragent,http://www.site.com/auth.php,he only get the html 
content generated by php,not php script itself.
If you need to hide the php script path,I think there's some ways under 
apache.One way I can think (maybe not best) is use mod_rewrite,for example,you 
put auth.php into a special dir like /auth,and you config the mod_rewrite 
rules,when request path include /auth,then rewrite it to /auth/auth.php,then 
users can't see the full php file path.
-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread Jeff Peng

 Original-Nachricht 
Datum: Sun, 19 Aug 2007 15:28:31 +0200
Von: [EMAIL PROTECTED]
An: users@httpd.apache.org
Betreff: [EMAIL PROTECTED] How to deny sites

> Hallo httpd users,
> 
> Quite some time ago I had an option in my configuration which made
> it possible to deny sites when they were listed in a file in the
> form:
> Deny from aaa.bbb.ccc.ddd
> Deny from ppp.qqq.rrr.sss
> &c
> That option disappeared from my configuration somehow and I can't
> find how to put it in anymore.
> Does anybody know what I'm talking about and can tell me how to
> do it?
> I'm running Apache httpd 2.0.4 on a SlackWare 12.0 Linux system.
> 

Hello,

You may see the document which give you full details about that access control.
http://httpd.apache.org/docs/2.0/mod/mod_access.html

Good luck.
-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread jake borg

stop spamming  m!
 
> Date: Sun, 19 Aug 2007 14:25:54 +0200> From: [EMAIL PROTECTED]> To: 
> users@httpd.apache.org> Subject: Re: [EMAIL PROTECTED] How to deny sites> > > 
>  Original-Nachricht > Datum: Sun, 19 Aug 2007 15:28:31 +0200> 
> Von: [EMAIL PROTECTED]> An: users@httpd.apache.org> Betreff: [EMAIL 
> PROTECTED] How to deny sites> > > Hallo httpd users,> > > > Quite some time 
> ago I had an option in my configuration which made> > it possible to deny 
> sites when they were listed in a file in the> > form:> > Deny from 
> aaa.bbb.ccc.ddd> > Deny from ppp.qqq.rrr.sss> > &c> > That option disappeared 
> from my configuration somehow and I can't> > find how to put it in anymore.> 
> > Does anybody know what I'm talking about and can tell me how to> > do it?> 
> > I'm running Apache httpd 2.0.4 on a SlackWare 12.0 Linux system.> > > > 
> Hello,> > You may see the document which give you full details about that 
> access control.> http://httpd.apache.org/docs/2.0/mod/mod_access.html> > Good 
> luck.> -- > Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu 
> sparen! > Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer> > 
> -> The 
> official User-To-User support forum of the Apache HTTP Server Project.> See 
> http://httpd.apache.org/userslist.html> for more info.> To unsubscribe, 
> e-mail: [EMAIL PROTECTED]> " from the digest: [EMAIL PROTECTED]> For 
> additional commands, e-mail: [EMAIL PROTECTED]> 
_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

Re: RE: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread Jeff Peng

 Original-Nachricht 
Datum: Sun, 19 Aug 2007 14:27:02 +0200
Von: jake borg <[EMAIL PROTECTED]>
An: users@httpd.apache.org
Betreff: RE: [EMAIL PROTECTED] How to deny sites

> 
> stop spamming  m!
>  

mhh?who spam you?I just replied to this list with normal way.If you don't like 
to get list messages,get off.
-- 
Pt! Schon vom neuen GMX MultiMessenger gehört?
Der kanns mit allen: http://www.gmx.net/de/go/multimessenger

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread jake borg

how do i remove these msgs from ending up in my email ?> Date: Sun, 19 Aug 2007 
14:30:00 +0200> From: [EMAIL PROTECTED]> To: users@httpd.apache.org> Subject: 
Re: RE: [EMAIL PROTECTED] How to deny sites> > >  Original-Nachricht 
> Datum: Sun, 19 Aug 2007 14:27:02 +0200> Von: jake borg <[EMAIL 
PROTECTED]>> An: users@httpd.apache.org> Betreff: RE: [EMAIL PROTECTED] How to 
deny sites> > > > > stop spamming  m!> > > > mhh?who spam you?I just 
replied to this list with normal way.If you don't like to get list messages,get 
off.> -- > Pt! Schon vom neuen GMX MultiMessenger gehört?> Der kanns mit 
allen: http://www.gmx.net/de/go/multimessenger> > 
-> The 
official User-To-User support forum of the Apache HTTP Server Project.> See 
http://httpd.apache.org/userslist.html> for more info.> To unsubscribe, 
e-mail: [EMAIL PROTECTED]> " from the digest: [EMAIL PROTECTED]> For additional 
commands, e-mail: [EMAIL PROTECTED]> 
_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

Re: RE: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread Jeff Peng

 Original-Nachricht 
Datum: Sun, 19 Aug 2007 14:31:10 +0200
Von: jake borg <[EMAIL PROTECTED]>
An: users@httpd.apache.org
Betreff: RE: [EMAIL PROTECTED] How to deny sites

> how do i remove these msgs from ending up in my email 

To unsubscribe, send a messages to [EMAIL PROTECTED]


-- 
Pt! Schon vom neuen GMX MultiMessenger gehört?
Der kanns mit allen: http://www.gmx.net/de/go/multimessenger

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] filters and handlers?

2007-08-19 Thread Per Jessen
I've been re-reading the manual to try to gain a better understanding of
filters and handlers, specifically the difference between the two. 

The reason being - 

by default, the PHP interpreter is called as a handler (a typical
config: "AddHandler application/x-httpd-php .phtml".  By implementation
INCLUDES is a filter which is enabled using e.g. 
"AddOutputFilter INCLUDES shtml".

I'd like to have my files processed first by the INCLUDES filter, then
by the PHP handler.  The "AddOutputFilter" option clearly supports this
type of sequence. 

But back to my initial question - what is the functional difference
between a handler and a filter?


/Per Jessen, Zürich



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Mod Rewrite Help

2007-08-19 Thread Jack Stone

From: "Joshua Slive" <[EMAIL PROTECTED]>
Reply-To: users@httpd.apache.org
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] Mod Rewrite Help
Date: Fri, 17 Aug 2007 09:58:12 -0400

On 8/17/07, wi <[EMAIL PROTECTED]> wrote:
> You'll need to configure a virtual host listening to the 8765 interface.
> Once you've done that, you will simply need to put together a rewrite to
> send requests to /abc.html to whatever target url you want.
>
> Start by reading http://httpd.apache.org/docs/2.2/vhosts/
>
> From there, configuring the rewrite will be the next task.

Or, if you don't want the virtual host, you can use a RewriteCond
based on the %{SERVER_PORT} as mentioned here:
http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html#rewriterule

Joshua.



More help question.

I've wondered if is is necessary to use the RewriteEngine every time another 
redirect set is used like this for example:


## stop offender & redirect to "why" page
RewriteEngine on
RewriteCond %{HTTP_USER_AGENT} ^webwalk [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^yodao
RewriteRule .* /usr/local/www/vhost/whystopped.htm

## replace stolen images with "illegal" image
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?vhost.com/.*$ [NC]
RewriteRule \.(gif|jpg)$ http://www.mainhost.net/images/illegal.gif [R,L]

## forbidden 403
RewriteEngine on
RewriteCond %{HTTP_USER_AGENT} Zango [NC,OR]
RewriteCond %{HTTP_USER_AGENT} link_checker
RewriteRule ^.* - [F,L]

.or, could this be used, just turning on the engine once at the very 
top:


## stop offender & redirect to "why" page
RewriteEngine on
RewriteCond %{HTTP_USER_AGENT} ^webwalk [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^yodao
RewriteRule .* /usr/local/www/vhost/whystopped.htm

## replace stolen images with "illegal" image
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?vhost.com/.*$ [NC]
RewriteRule \.(gif|jpg)$ http://www.mainhost.net/images/illegal.gif [R,L]

## forbidden 403
RewriteCond %{HTTP_USER_AGENT} Zango [NC,OR]
RewriteCond %{HTTP_USER_AGENT} link_checker
RewriteRule ^.* - [F,L]

Thanks for advice.

Jack

_
Booking a flight? Know when to buy with airfare predictions on MSN Travel. 
http://travel.msn.com/Articles/aboutfarecast.aspx&ocid=T001MSN25A07001



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] filters and handlers?

2007-08-19 Thread Joshua Slive
On 8/19/07, Per Jessen <[EMAIL PROTECTED]> wrote:
> I've been re-reading the manual to try to gain a better understanding of
> filters and handlers, specifically the difference between the two.
>
> The reason being -
>
> by default, the PHP interpreter is called as a handler (a typical
> config: "AddHandler application/x-httpd-php .phtml".  By implementation
> INCLUDES is a filter which is enabled using e.g.
> "AddOutputFilter INCLUDES shtml".
>
> I'd like to have my files processed first by the INCLUDES filter, then
> by the PHP handler.  The "AddOutputFilter" option clearly supports this
> type of sequence.
>
> But back to my initial question - what is the functional difference
> between a handler and a filter?

Handlers must originate the content themselves, whereas filters can
deal with content passed down from someplace else.

PHP is only a handler, due to zend's requirement that it deal with the
php file on disk and not in memory. (This was the argument at the
time, anyway. I'm not sure if things in php land have evolved since
that decision was made.) Therefore PHP must originate the content and
can't act on content passed from someplace else like mod_include.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: How to deny sites

2007-08-19 Thread \"Crash\" Dummy
> how do i remove these msgs from ending up in my email ?

In order to only see responses posted in the NNTP server and not receive e-mail
responses, some prep is necessary. I set up an e-mail account specifically and
exclusively for gmane, then set filters to only accept mail from the gmane
domain. E-mail replies from mail list recipients are blocked.
-- 
Crash
Running: Windows 2000 Pro - Apache 2.2.4 - PHP 5.2.1 - Perl 5.8.8

Reply to group only. E-mail is blocked.




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] how to add htcacheclean.sh

2007-08-19 Thread Galaxy Virus
Hello,
 
   I am using Apache2.2.0 on FreeBSD 6.1 release. I would like to start apache 
and htcacheclean automatically when the server boots. 

In /usr/local/etc/rc.d/   there is only apache22.sh.

How can I add htcacheclean.sh ?

To start apache automatically, I did the following. 

RUN kldload accf_http 
ADD accf_http_load = "YES"   to /boot/loader.conf
ADD apache22_http_accept_enable = "YES" to  /etc/rc.conf

Will it be OK?
   
  regards,
galax
   
-
Fussy? Opinionated? Impossible to please? Perfect.  Join Yahoo!'s user panel 
and lay it on us.

Re: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread lists . httpd-users
Hallo Jeff,

Op zondag 19 augustus 2007 schreef Jeff Peng aan users@httpd.apache.org:


 >> Quite some time ago I had an option in my configuration which
 >> made it possible to deny sites when they were listed in a file
 >> in the
 >> form:
 >> Deny from aaa.bbb.ccc.ddd
 >> Deny from ppp.qqq.rrr.sss
 >> &c
 >> That option disappeared from my configuration somehow and I
 >> can't find how to put it in anymore. Does anybody know what
 >> I'm talking about and can tell me how to do it? I'm running
 >> Apache httpd 2.0.4 on a SlackWare 12.0 Linux system.

I'm sorry about the mistake: I'm running httpd 2.2.4.

 JP> You may see the document which give you full details about that
 JP> access control.
 JP> http://httpd.apache.org/docs/2.0/mod/mod_access.html

I did look at that, but that doesn't seem to give an answer to my
question.
The sites I want to deny access are listed in a file.
I used too have a configuration so that that file was somehow
included in the httpd.conf.
But that disappeared and I don't remember how to do it :(

Groeten,

   Hans.

jdh punt beekhuizen bij duinheks punt xs4all punt nl

--- GoldED+/LNX 1.1.5/070624
 * Origin: The Wizard is using MBSE/Linux (2:280/1018)

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread Joshua Slive
On 8/19/07, [EMAIL PROTECTED]
<[EMAIL PROTECTED]>
>  >> Deny from aaa.bbb.ccc.ddd
>  >> Deny from ppp.qqq.rrr.sss

> I did look at that, but that doesn't seem to give an answer to my
> question.
> The sites I want to deny access are listed in a file.
> I used too have a configuration so that that file was somehow
> included in the httpd.conf.
> But that disappeared and I don't remember how to do it :(

Since those Deny things are regular apache directives, you can use
Include to include them in the regular config file like


Order Allow,Deny
Allow from all
Include /full/path/to/deny.conf


Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] ProxyPassReverse doesn't work for redirected sites.

2007-08-19 Thread Joshua Slive
On 8/18/07, Mario Herrera <[EMAIL PROTECTED]> wrote:
>
> I have this configuration:
>
> ServerName cid.ulatina.com
>
> 
> Order deny,allow
> Allow from all
> 
>
> ProxyPass / http://www.mdconsult.com/
> ProxyPassReverse / http://www.mdconsult.com/
>
>
> When I try http://cid.ulatina.com in my browser the site
> http://www.mdconsult.com redirect me automatically  to another site inside
> the same domain, like www.mdconsult.com/php/homepage.
>
> At this moment the URL of my browser has been changed to this second site,
> and I lose my ProxyPassReverse.

I briefly looked at your site, and it uses a complicated chain of
redirects to check cookies and do auth stuff. My guess is that one of
these redirects is not a true HTTP redirect (using the Location HTTP
response header), but rather some javascript code that asks the
browser to do the redirect. ProxyPassReverse acts only on the Location
header, and therefore the javascript will still point to the wrong
place.

You may (or may not) be able to rewrite the javascript on-the-fly
using mod_proxy_html.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Re: How to deny sites

2007-08-19 Thread Jonesy
On Sun, 19 Aug 2007 15:28:31 +0200, [EMAIL PROTECTED] wrote:
> Hallo httpd users,
>
> Quite some time ago I had an option in my configuration which made
> it possible to deny sites when they were listed in a file in the
> form:
> Deny from aaa.bbb.ccc.ddd
> Deny from ppp.qqq.rrr.sss
> &c
> That option disappeared from my configuration somehow and I can't
> find how to put it in anymore.
> Does anybody know what I'm talking about and can tell me how to
> do it?

It looks like you're referring to the .htaccess file.
Here's one I have in the sub-directory containing a message board:

$ cat .htaccess
# 403 Forbidden: Block REFERER's containing multiple URL's: SPAMMERs
RewriteEngine on
RewriteCond %{HTTP_REFERER} http.*http [NC]
RewriteRule .* - [F]

# 403 Forbidden for (some of) the spammers' trojanned botnet machines
order allow,deny
allow from all

#Handle rDNS nets -- if available.
deny from .bbtec.net
deny from .bezeqint.net
deny from .sagonet.net

#058/8  APNIC  (whois.apnic.net)
#059/8  APNIC  (whois.apnic.net)
deny from 58.0.0.0/8
deny from 59.0.0.0/8

#61/8  APNIC (whois.apnic.net)
#62/8  RIPE NCC  (whois.ripe.net)
deny from 61.0.0.0/8
deny from 62.0.0.0/8

#OrgName:Sago Networks
#inetnum:65.110.32.0 - 65.110.63.255
deny from 65.110.32.0/19

#Specific machines in ARIN / LACNIC
deny from 64.246.44.4
deny from 65.165.10.1
deny from 66.139.76.245
deny from 66.165.172.163
deny from 66.192.59.18
deny from 66.228.143.9
deny from 67.128.15.151
deny from 67.128.15.151
deny from 68.250.254.137
deny from 68.81.240.5
deny from 69.119.234.228
deny from 70.234.81.185
deny from 71.145.191.48
deny from 72.232.39.162
deny from 72.32.59.213
deny from 72.36.252.178
deny from 128.121.50.31
deny from 201.28.107.230
deny from 201.34.32.42
deny from 201.36.161.104
deny from 201.38.194.188
deny from 201.57.112.148
deny from 201.80.46.24
deny from 206.222.15.114
deny from 209.6.158.223
deny from 209.51.221.58
deny from 209.147.47.74
deny from 209.190.6.194
deny from 209.190.9.26
deny from 209.190.23.50
deny from 209.190.38.42
deny from 209.190.39.210
deny from 216.144.234.2
deny from 216.144.235.139
deny from 216.27.182.198

#080/8  RIPE NCC  (whois.ripe.net)
#081/8  RIPE NCC  (whois.ripe.net)
#082/8  RIPE NCC  (whois.ripe.net)
#083/8  RIPE NCC  (whois.ripe.net)
#084/8  RIPE NCC  (whois.ripe.net)
#085/8  RIPE NCC  (whois.ripe.net)
#086/8  RIPE NCC  (whois.ripe.net)
#087/8  RIPE NCC  (whois.ripe.net)
#088/8  RIPE NCC  (whois.ripe.net)
#089/8  RIPE NCC  (whois.ripe.net)
#090/8  RIPE NCC  (whois.ripe.net)
#091/8  RIPE NCC  (whois.ripe.net)
deny from 80.0.0.0/8
deny from 81.0.0.0/8
deny from 82.0.0.0/8
deny from 83.0.0.0/8
deny from 84.0.0.0/8
deny from 85.0.0.0/8
deny from 86.0.0.0/8
deny from 87.0.0.0/8
deny from 88.0.0.0/8
deny from 89.0.0.0/8
deny from 90.0.0.0/8
deny from 91.0.0.0/8

#121/8  APNIC  (whois.apnic.net)
#125/8  APNIC  (whois.apnic.net)
deny from 121.0.0.0/8
deny from 125.0.0.0/8

#inetnum:  134.157.0.0 - 134.157.255.255
#descr:4 Place Jussieu, 75252 Paris CEDEX  05, France
deny from 134.157.0.0/16

#inetnum:  138.195.0.0 - 138.195.255.255
#descr:Ecole Centrale Paris
deny from 138.195.0.0/16

#inetnum:  148.233/16
#address:  01900 - Ciudad de México - DF
deny from 148.233.0.0/16

#193/8  RIPE NCC  (whois.ripe.net)
#194/8  RIPE NCC  (whois.ripe.net)
#195/8  RIPE NCC  (whois.ripe.net)
deny from 193.0.0.0/8
deny from 194.0.0.0/8
deny from 195.0.0.0/8

#inetnum: 200.37/16
#owner:   Telefonica del Peru S.A.A.
deny from 200.37.0.0/16

#inetnum: 200.55.96/19
#address: C1214ADG - Buenos Aires -
deny from 200.55.96.0/19

#inetnum:200.64/15
#address:01900 - Ciudad de México - DF
deny from 200.64.0.0/15

#inetnum:200.67.30/24
#address:01900 - Mexico DF - DF
deny from 200.67.30.0/24

#inetnum:200.71.60/22
#address:0 - Bogotá - DC
deny from 200.71.60.0/22

#inetnum:200.80.128/19
#address:C1063AB - Buenos Aires
deny from 200.80.128.0/19

#inetnum:200.90.188.72/29
#address:02 - santiago -
deny from 200.90.188.72/29

#inetnum:200.185.224/19
#address:05425-902 - São Paulo - SP
deny from 200.185.224.0/19

#inetnum:200.223.210.200/29
#address:48110-000 - Catu - BA
deny from 200.223.210.200/29

#inetnum:201.10/16
#owner:  Brasil Telecom S/A - Filial Distrito Federal
deny from 201.10.0.0/16

#202/8  APNIC  (whois.apnic.net)
#203/8  APNIC  (whois.apnic.net)
deny from 202.0.0.0/8
deny from 203.0.0.0/8

#210/8  APNIC  (whois.apnic.net)
#211/8  APNIC  (whois.apnic.net)
deny from 210.0.0.0/8
deny from 211.0.0.0/8

#213/8  RIPE NCC  (whois.ripe.net)
deny from 213.0.0.0/8

#217/8  RIPE NCC  (whois.ripe.net)
#218/8  APNIC  (whois.apnic.net)
#219/8  APNIC  (whois.apnic.net)
#220/8  APN

Re: [EMAIL PROTECTED] Mod Rewrite Help

2007-08-19 Thread Joshua Slive
On 8/19/07, Jack Stone <[EMAIL PROTECTED]> wrote:

> I've wondered if is is necessary to use the RewriteEngine every time another
> redirect set is used like this for example:

This is one of those questions that I wonder why you bother asking.
Why not just try it and see if it works.

But anyway, you only need the RewriteEngine once.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] want to start apache when server boot up HELP HELP

2007-08-19 Thread Galaxy Virus
Hello,

  On FreeBSD release 6.1,  

  I configured apache 2.2.4 with all modules and installed.

 I would like to start apache when PC boots up.   How can I do it ?

rgds,
galaxy


  

  




   
-
Shape Yahoo! in your own image.  Join our Network Research Panel today!

Re: [EMAIL PROTECTED] want to start apache when server boot up HELP HELP

2007-08-19 Thread Brian A. Seklecki


On Sun, 19 Aug 2007, Galaxy Virus wrote:


Hello,

 On FreeBSD release 6.1,


If you installed it from FreeBSD ports, set "apache22_enable=YES" in 
/etc/rc.conf.


If you didn't install it from Ports -- grab the FreeBSD RC script from:

http://www.freebsd.org/cgi/cvsweb.cgi/ports/www/apache22/files/apache22.sh.in?rev=1.3

And drop it in place in /usr/local/etc/rc.d

Cheers!

~BAS



 I configured apache 2.2.4 with all modules and installed.

I would like to start apache when PC boots up.   How can I do it ?

rgds,
galaxy










-
Shape Yahoo! in your own image.  Join our Network Research Panel today!








-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] want to start apache when server boot up HELP HELP

2007-08-19 Thread Galaxy Virus
Thank you so much. But could you please answer me more precisely 'coz I am very 
newbie in apache on FreeBSD.

-  I gave file name as apache22.sh ( Although my apache folder name is 
/usr/local/apache2 ).

- And I put apache22_enable="YES"  in /etc/rc.conf

After rebooting, I didnt find httpd.   

regards,
galaxy






"Brian A. Seklecki" <[EMAIL PROTECTED]> wrote: 
On Sun, 19 Aug 2007, Galaxy Virus wrote:

> Hello,
>
>  On FreeBSD release 6.1,

If you installed it from FreeBSD ports, set "apache22_enable=YES" in 
/etc/rc.conf.

If you didn't install it from Ports -- grab the FreeBSD RC script from:

http://www.freebsd.org/cgi/cvsweb.cgi/ports/www/apache22/files/apache22.sh.in?rev=1.3

And drop it in place in /usr/local/etc/rc.d

Cheers!

~BAS

>
>  I configured apache 2.2.4 with all modules and installed.
>
> I would like to start apache when PC boots up.   How can I do it ?
>
> rgds,
> galaxy
>
>
>
>
>
>
>
>
>
>
> -
> Shape Yahoo! in your own image.  Join our Network Research Panel today!
>
>
>
>
>
>


   
-
Yahoo! oneSearch: Finally,  mobile search that gives answers, not web links. 

Re: [EMAIL PROTECTED] want to start apache when server boot up HELP HELP

2007-08-19 Thread Brian A. Seklecki


Right the RC script framework expects $LOCALBASE = /usr/local.  I haven't 
looked but you'll need to set:


 command="%%PREFIX%%/sbin/httpd"

Actually ports regex replacecs %%PREFIX%% to $LOCALBASE.  If you do the 
same, in theory you'll be okay. ~BAS


On Sun, 19 Aug 2007, Galaxy Virus wrote:


Thank you so much. But could you please answer me more precisely 'coz I am very 
newbie in apache on FreeBSD.

-  I gave file name as apache22.sh ( Although my apache folder name is 
/usr/local/apache2 ).

- And I put apache22_enable="YES"  in /etc/rc.conf

After rebooting, I didnt find httpd.

regards,
galaxy






"Brian A. Seklecki" <[EMAIL PROTECTED]> wrote:
On Sun, 19 Aug 2007, Galaxy Virus wrote:


Hello,

 On FreeBSD release 6.1,


If you installed it from FreeBSD ports, set "apache22_enable=YES" in
/etc/rc.conf.

If you didn't install it from Ports -- grab the FreeBSD RC script from:

http://www.freebsd.org/cgi/cvsweb.cgi/ports/www/apache22/files/apache22.sh.in?rev=1.3

And drop it in place in /usr/local/etc/rc.d

Cheers!

~BAS



 I configured apache 2.2.4 with all modules and installed.

I would like to start apache when PC boots up.   How can I do it ?

rgds,
galaxy










-
Shape Yahoo! in your own image.  Join our Network Research Panel today!










-
Yahoo! oneSearch: Finally,  mobile search that gives answers, not web links.


l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
   http://www.spiritual-machines.org/

"Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?"
~Maynard James Keenan


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] want to start apache when server boot up HELP HELP

2007-08-19 Thread Galaxy Virus
I couldnt.  Although I replaced the necessary path for every PREFIX, httpd 
didnt wakeup when server boots up.  :( 



"Brian A. Seklecki" <[EMAIL PROTECTED]> wrote: 
Right the RC script framework expects $LOCALBASE = /usr/local.  I haven't 
looked but you'll need to set:

  command="%%PREFIX%%/sbin/httpd"

Actually ports regex replacecs %%PREFIX%% to $LOCALBASE.  If you do the 
same, in theory you'll be okay. ~BAS

On Sun, 19 Aug 2007, Galaxy Virus wrote:

> Thank you so much. But could you please answer me more precisely 'coz I am 
> very newbie in apache on FreeBSD.
>
> -  I gave file name as apache22.sh ( Although my apache folder name is 
> /usr/local/apache2 ).
>
> - And I put apache22_enable="YES"  in /etc/rc.conf
>
> After rebooting, I didnt find httpd.
>
> regards,
> galaxy
>
>
>
>
>
>
> "Brian A. Seklecki"  wrote:
> On Sun, 19 Aug 2007, Galaxy Virus wrote:
>
>> Hello,
>>
>>  On FreeBSD release 6.1,
>
> If you installed it from FreeBSD ports, set "apache22_enable=YES" in
> /etc/rc.conf.
>
> If you didn't install it from Ports -- grab the FreeBSD RC script from:
>
> http://www.freebsd.org/cgi/cvsweb.cgi/ports/www/apache22/files/apache22.sh.in?rev=1.3
>
> And drop it in place in /usr/local/etc/rc.d
>
> Cheers!
>
> ~BAS
>
>>
>>  I configured apache 2.2.4 with all modules and installed.
>>
>> I would like to start apache when PC boots up.   How can I do it ?
>>
>> rgds,
>> galaxy
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> -
>> Shape Yahoo! in your own image.  Join our Network Research Panel today!
>>
>>
>>
>>
>>
>>
>
>
>
> -
> Yahoo! oneSearch: Finally,  mobile search that gives answers, not web links.

l8*
  -lava (Brian A. Seklecki - Pittsburgh, PA, USA)
 http://www.spiritual-machines.org/

 "Guilty? Yeah. But he knows it. I mean, you're guilty.
 You just don't know it. So who's really in jail?"
 ~Maynard James Keenan



   
-
Pinpoint customers who are looking for what you sell. 

Re: [EMAIL PROTECTED] How to deny sites

2007-08-19 Thread lists . httpd-users
Hallo Joshua,

Op zondag 19 augustus 2007 schreef Joshua Slive aan users@httpd.apache.org:

 >> The sites I want to deny access are listed in a file. I used too
 >> have a configuration so that that file was somehow included in the
 >> httpd.conf. But that disappeared and I don't remember how to do it
 >> :(
 JS> Since those Deny things are regular apache directives, you can
 JS> use Include to include them in the regular config file like

That's it! Why couldn't I find the Include directive myself???
Maybe I should start drinking beer again...

Thank you very much for yor help!

Groeten,

   Hans.

jdh punt beekhuizen bij duinheks punt xs4all punt nl

--- GoldED+/LNX 1.1.5/070624
 * Origin: The Wizard is using MBSE/Linux (2:280/1018)

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] suppressing HTTP 100 continue

2007-08-19 Thread Jimmy Lee
1. The client can't be modified.
2. The client doesn't send "Expect".
3. The client claims to use HTTP1.1 (but ironically doesn't support 100
contine!)

Will apache still send random 100 continues? IIS does that. The RFC 2616
seems to allow it.

So if apache does send 100 continue without Expects', I want to know if
there's any way to suppress it at all.

-Original Message-
From: André Malo [mailto:[EMAIL PROTECTED] 
Sent: Friday, 17 August 2007 5:59 PM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] suppressing HTTP 100 continue

* Jimmy Lee wrote: 

> I'm working with some devices that can't handle 100 continues.
>
> Is there a way to apply filters to apache to stop it from sending HTTP
> 100? Or is the only way to hack the base code?

RFC 2616 (8.2.3):

> An origin server SHOULD NOT send a 100 (Continue) response if
> the request message does not include an Expect request-header
> field with the "100-continue" expectation, and MUST NOT send a
> 100 (Continue) response if such a request comes from an HTTP/1.0
> (or earlier) client. There is an exception to this rule: for
> compatibility with RFC 2068, a server MAY send a 100 (Continue)
> status in response to an HTTP/1.1 PUT or POST request that does
> not include an Expect request-header field with the "100-
> continue" expectation. This exception, the purpose of which is
> to minimize any client processing delays associated with an
> undeclared wait for 100 (Continue) status, applies only to
> HTTP/1.1 requests, and not to requests with any other HTTP-
> version value.

So, teach the clients to not send the Expect header and/or use HTTP/1.0.
Apache does not send the header without the client "Expect"ing it.

HTH, nd

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] suppressing HTTP 100 continue

2007-08-19 Thread Tom Donovan

Jimmy Lee wrote:

1. The client can't be modified.
2. The client doesn't send "Expect".
3. The client claims to use HTTP1.1 (but ironically doesn't support 100
contine!)

Will apache still send random 100 continues? IIS does that. The RFC 2616


* Jimmy Lee wrote: 


I'm working with some devices that can't handle 100 continues.



Setting the "downgrade-1.0" environment variable might do what you want, 
if your client will accept HTTP 1.0 responses.


The Apache 2.2 docs for "downgrade-1.0" are at 
http://httpd.apache.org/docs/2.2/env.html#special


-tom-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] suppressing HTTP 100 continue

2007-08-19 Thread Jimmy Lee
Hmmm, I'll try that and test it with the client.

Thanks Tom!

-Original Message-
From: Tom Donovan [mailto:[EMAIL PROTECTED] 
Sent: Monday, 20 August 2007 11:16 AM
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] suppressing HTTP 100 continue

Jimmy Lee wrote:
> 1. The client can't be modified.
> 2. The client doesn't send "Expect".
> 3. The client claims to use HTTP1.1 (but ironically doesn't support 100
> contine!)
> 
> Will apache still send random 100 continues? IIS does that. The RFC 2616

> * Jimmy Lee wrote: 
> 
>> I'm working with some devices that can't handle 100 continues.
>>

Setting the "downgrade-1.0" environment variable might do what you want, 
if your client will accept HTTP 1.0 responses.

The Apache 2.2 docs for "downgrade-1.0" are at 
http://httpd.apache.org/docs/2.2/env.html#special

-tom-

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] How can I add mod_proxy.so ????

2007-08-19 Thread Galaxy Virus
Hello, 

  At last, I installed apache2.2.0 using ports on FreeBSD release 6.1.  I found 
apache22.sh in  /rc.d.  but not htcacheclean.sh.

So I added 'LoadModule proxy_module libexec/apache22/mod_proxy.so'  in 
httpd.conf. 

But when I start httpd, I got this error. httpd: 

Syntax error on line 76 of /usr/local/etc/apache22/httpd.conf: Cannot load 
/usr/local/libexec/apache22/mod_proxy.so into server: Cannot open 
"/usr/local/libexec/apache22/mod_proxy.so"


I checked mod_proxy in /libexec/apache22 directory but I found no proxy module 
file there. 

How can I add   mod_proxy.so   


rgds,
galaxy

   
-
Yahoo! oneSearch: Finally,  mobile search that gives answers, not web links.