RE: [EMAIL PROTECTED] Apache 2.055 Best Practices

2006-02-06 Thread Boyle Owen
> -Original Message- > From: Rosado, Rodolfo CTR MDA/IOM [mailto:[EMAIL PROTECTED] > Sent: Montag, 6. Februar 2006 16:37 > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] Apache 2.055 Best Practices > > All, > > I am attempting to redirect traffic incoming to an Apache > serv

RE: [EMAIL PROTECTED] apache error: client denied access by server configuration

2006-02-06 Thread Boyle Owen
> -Original Message- > From: George Moureau [mailto:[EMAIL PROTECTED] > Sent: Montag, 6. Februar 2006 23:09 > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] apache error: client denied access by > server configuration > > Can anyone help with this? I'm setting up a development s

Re: [EMAIL PROTECTED] DNS

2006-02-06 Thread Arturo Ignacio Partarrieu Ramos
DNS, domain name system, is needed to resolve the domain names and hostnames into IP addresses (and backwards). The machine that takes care of this conversion is called a name server. More information can be find in Suse Linux Documentation, chapter 38 Basic Networking, section 3 Name ResolutionOn

[EMAIL PROTECTED] Possible Configuration Problem

2006-02-06 Thread Carl Maloney
I am a ultra beginner with Apache/PHP.  I got the server up and running.  I can load up any html page/php file from my browser.  I started a html file that has a "submit" button that is suppose to launch a *.php file.  When I press the button, I first got Error Message: 404, File not found.  In

Re: [EMAIL PROTECTED] Open Proxy

2006-02-06 Thread Emmanuel E
which version of apache are you using? The proxy config typically looks like this:   = ProxyRequests OnAllowCONNECT 443 563 ... #Your allow deny directives should go here.     I am not sure whether is the way to go.   Cheers, Emmanuel - Original Message

[EMAIL PROTECTED] Open Proxy

2006-02-06 Thread Benjamin Neu
Can anyone help me secure my Apache proxy server. Here is the problem.The box that I have on the net is NOT behind a firewall. It has one NIC with a external IP. Order deny,allow Deny from all Allow from 127.0.0.1 That is the mod_proxy configuration I have in pl

[EMAIL PROTECTED] apache error: client denied access by server configuration

2006-02-06 Thread George Moureau
Can anyone help with this? I'm setting up a development server with httpd-2.2.0. I want to be able to develop and test multiple sites on this server. so far the only one I can get to is /usr/local/apache2/ htdocs, all others give me forbidden messages from my browser. I've set up virtual hos

[EMAIL PROTECTED] Limit user per directory

2006-02-06 Thread Cj B
Hello, I have a question about limiting users to a direcotry, basically I want to limit the users to a certain directory. ie: user1 would be limited to browsing user1's directory. Currently I am doing the following for each user in the htpasswd file: Alias /user1 "/export/home/user1" A

Re: [EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Joshua Slive
On 2/6/06, Mark McCulligh <[EMAIL PROTECTED]> wrote: > I think I now understanding the attack. They are changing the response > information when the login form is being sent to the user in plain > text. Yep. Joshua. - The offi

Re: [EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Mark McCulligh
Joshua Slive wrote: On 2/6/06, Mark McCulligh <[EMAIL PROTECTED]> wrote: This type of attack can be pulled off even if the login form is secured. The attacker just has create a login page that looks like mine and get the user to use it. A lot of users won't realize they are on the wrong web

Re: [EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Joshua Slive
On 2/6/06, Mark McCulligh <[EMAIL PROTECTED]> wrote: > > This type of attack can be pulled off even if the login form is secured. > The attacker just has create a login page that looks like mine and get > the user to use it. A lot of users won't realize they are on the wrong > website and the lock

Re: [EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Mark McCulligh
Joshua Slive wrote: On 2/6/06, Mark McCulligh <[EMAIL PROTECTED]> wrote: The client should alway be logging in on their website for I hope they reallize if they where not on their website. I'm not sure if you understood or not, but my point was that a man-in-the-middle could make it l

Re: [EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Joshua Slive
On 2/6/06, Mark McCulligh <[EMAIL PROTECTED]> wrote: > The client should alway be logging > in on their website for I hope they reallize if they where not on their > website. I'm not sure if you understood or not, but my point was that a man-in-the-middle could make it look exactly like they were

Re: [EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Mark McCulligh
Joshua Slive wrote: On 2/6/06, Mark McCulligh <[EMAIL PROTECTED]> wrote: If you have a login html (http://www.ex.com/login.html) where the action is to a https website (https://www.ex2.com/login_script.php). Will the login information be submitted encrypted. Or does the user first have to b

Re: [EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Joshua Slive
On 2/6/06, Mark McCulligh <[EMAIL PROTECTED]> wrote: > If you have a login html (http://www.ex.com/login.html) where the > action is to a https website (https://www.ex2.com/login_script.php). > Will the login information be submitted encrypted. Or does the user > first have to be on to the secure

[EMAIL PROTECTED] SSL / HTML question

2006-02-06 Thread Mark McCulligh
If you have a login html (http://www.ex.com/login.html) where the action is to a https website (https://www.ex2.com/login_script.php). Will the login information be submitted encrypted. Or does the user first have to be on to the secure website before loggin in? Just wondering when you go fr

RE: [EMAIL PROTECTED] Dual SAN certificate support

2006-02-06 Thread Savage, Robert CTR USTRANSCOM J6
Joe, On a Linux host I could get you a stack backtrace in a jiffy. I've never seen that done on a Winders machine, so I'll have to do some rummaging around at MSDN. I'll e-mail the certificate text you asked for directly to your e-mail box rather than to the list. --Doc Robert G. (Doc) Savage, C

Re: [EMAIL PROTECTED] Images are not shown

2006-02-06 Thread Richard Vinke
Thanks! This did the job! Joshua Slive wrote: On 2/6/06, Richard Vinke <[EMAIL PROTECTED]> wrote: Hello, I installed the newest XAMPP package on a pentium1, 133MHz, 64MB. With a simple index.html I test the server. But no images are visable at the client. The access log file of a

[EMAIL PROTECTED] Apache 2.055 Best Practices

2006-02-06 Thread Rosado, Rodolfo CTR MDA/IOM
Title: Apache 2.055 Best Practices All,   I am attempting to redirect traffic incoming to an Apache server located in a DMZ to two machines behind my firewall.  My Apache server listens on both ports 443 and 80.  The traffic on port 443 is redirected via a JK2 connector to a Tomact 4.1.30

RE: [EMAIL PROTECTED] Help! - question about file permissions and apache

2006-02-06 Thread Boyle Owen
> -Original Message- > From: Michael McCullough [mailto:[EMAIL PROTECTED] > Sent: Montag, 6. Februar 2006 15:19 > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Help! - question about file > permissions and apache > > I have figured it out. But now I can't get it to work

Re: [EMAIL PROTECTED] Help! - question about file permissions and apache

2006-02-06 Thread Michael McCullough
I have figured it out. But now I can't get it to work outside of my computer. Having trouble with port 80. I have a Westell 327 dsl modem/router and runing Windows XP Home. I had setup a DNS account and gave my computer a static IP, but the DNS site is saying they are getting another IP number from

RE: [EMAIL PROTECTED] only one ip per user (has many connections) can access resource at the same time ?

2006-02-06 Thread Boyle Owen
> -Original Message- > From: tvlgiao [mailto:[EMAIL PROTECTED] > Sent: Montag, 6. Februar 2006 14:20 > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] only one ip per user (has many > connections) can access resource at the same time ? > > > oh, i mean that while a file is

Re: [EMAIL PROTECTED] Images are not shown

2006-02-06 Thread Joshua Slive
On 2/6/06, Richard Vinke <[EMAIL PROTECTED]> wrote: > Hello, > > I installed the newest XAMPP package on a pentium1, 133MHz, 64MB. > With a simple index.html I test the server. But no images are visable at > the client. The access log file of apache says code 200 and the number > of bytes of the im

Re: [EMAIL PROTECTED] only one ip per user (has many connections) can access resource at the same time ?

2006-02-06 Thread tvlgiao
2006/2/6, Boyle Owen <[EMAIL PROTECTED]>: > -Original Message-> From: tvlgiao [mailto:[EMAIL PROTECTED]]> Sent: Sonntag, 5. Februar 2006 00:28> To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] only one ip per user (has many> connections) can access resource at the same time ?>> Hello

Re: [EMAIL PROTECTED] sumbol multiple-defined when compiling httpd 2.2.0 on Solaris 8

2006-02-06 Thread Nico De Ranter
On Mon, 2006-02-06 at 11:31 +, Joe Orton wrote: > On Mon, Feb 06, 2006 at 09:51:10AM +0100, Nico De Ranter wrote: > > thanks but I don't seem to be able to apply the patch (on a fresh > > httpd-2.2.0 directory) > > > > mena.[root]# cd httpd-2.2.0/srclib/apr > > mena.[root]# patch -p1 < apr-1.2

Re[2]: [EMAIL PROTECTED] Many virtual hosts on 80 port and one on 443 (SSL)

2006-02-06 Thread John
mod_rewrite is not enabled in my server's configuration (well i don't want to enable it) Any other idea ? From: Axel-Stéphane SMORGRAV <[EMAIL PROTECTED]> To: , "John" <[EMAIL PROTECTED]> Date: Monday, February 6, 2006, 1:28:14 PM Subject: [EMAIL PROTECTED] Many virtual hosts on 80 port and o

Re: [EMAIL PROTECTED] sumbol multiple-defined when compiling httpd 2.2.0 on Solaris 8

2006-02-06 Thread Joe Orton
On Mon, Feb 06, 2006 at 09:51:10AM +0100, Nico De Ranter wrote: > thanks but I don't seem to be able to apply the patch (on a fresh > httpd-2.2.0 directory) > > mena.[root]# cd httpd-2.2.0/srclib/apr > mena.[root]# patch -p1 < apr-1.2.2-random.patch > Looks like a unified context diff. > Hunk #1

RE: [EMAIL PROTECTED] Many virtual hosts on 80 port and one on 443 (SSL)

2006-02-06 Thread Axel-Stéphane SMORGRAV
What about this: RewriteEngine ON RewriteCond %{HTTP_HOST} =virtualhost RewriteRule .* - [F] or alternatively RewriteEngine ON RewriteCond %{HTTP_HOST} !=sslservername RewriteRule .* - [F] Instead or returning a HTTP 403 you could redirect the request to the apropriate URL: RewriteEngine ON

RE: [EMAIL PROTECTED] DNS

2006-02-06 Thread Boyle Owen
> -Original Message- > From: info.raa [mailto:[EMAIL PROTECTED] > Sent: Montag, 6. Februar 2006 11:48 > To: Apache List > Subject: [EMAIL PROTECTED] DNS > > Greetings List! > > Can anyone give me a hint about DNS? > Or tell where can i find documentation or the how to? Type "DNS howto"

[EMAIL PROTECTED] DNS

2006-02-06 Thread info . raa
Greetings List! Can anyone give me a hint about DNS? Or tell where can i find documentation or the how to? Thanks. Kbl - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/u

Re: [EMAIL PROTECTED] Dual SAN certificate support

2006-02-06 Thread Joe Orton
On Fri, Feb 03, 2006 at 10:08:19AM -0600, Savage, Robert CTR USTRANSCOM J6 wrote: > Event Type: Error > Event Source: Service Control Manager > Event Category: None > Event ID: 7024 > Date: 2/2/2006 > Time: 8:20:18 AM > User: N/A > Computer: UNDERDOG

[EMAIL PROTECTED] Many virtual hosts on 80 port and one on 443 (SSL)

2006-02-06 Thread John
Hi all I have set up a web server with many virtua users on 80 and a virtual host on 443 port (SSL) Then if a user type a domain of any virtual host (except SSL) using the form https://virtualhost then it goes to the host on the 443. Well, i want to prevent that from accessing SSL using any doma

RE: [EMAIL PROTECTED] Get original user host name through reverse proxy

2006-02-06 Thread Axel-Stéphane SMORGRAV
There was recently a thread on this subject on this list. The solution consisted of using a module that fiddles with the X-Forwarded-For header. The exact name of the thread was "[EMAIL PROTECTED] reverse proxy - forward ip" -ascs -Original Message- From: Mr Alex Eydelberg [mailto:[EMAI

RE: [EMAIL PROTECTED] Reverse proxy with proxy-html

2006-02-06 Thread Axel-Stéphane SMORGRAV
I have not used mod_proxy_html extensively, and it has been a while now, but from the understanding I have it will do textual substitution of links in a HTML document with another string. Therefore nothing prevents you from using a pattern that will match any part of the link URL, including the

Re: [EMAIL PROTECTED] sumbol multiple-defined when compiling httpd 2.2.0 on Solaris 8

2006-02-06 Thread Nico De Ranter
Hi Joe, thanks but I don't seem to be able to apply the patch (on a fresh httpd-2.2.0 directory) mena.[root]# cd httpd-2.2.0/srclib/apr mena.[root]# patch -p1 < apr-1.2.2-random.patch Looks like a unified context diff. Hunk #1 failed at line 57. Hunk #2 failed at line 5. Hunk #3 failed at line