RE: [EMAIL PROTECTED] Resolve issue

2007-05-12 Thread Glen Vickers
Hey Glen, On May 12, 2007, at 9:39 PM, Glen Vickers wrote: > Someone please tell me what I'm missing. I need to get paid! lol That's great, can we have some too? lol > Heres my resolv.conf > > > > search buddistpalm.net > > search sillumutah.com > > search sillumutah.net > > nameserver 192.168

Re: [EMAIL PROTECTED] Resolve issue

2007-05-12 Thread Sander Temme
Hey Glen, On May 12, 2007, at 9:39 PM, Glen Vickers wrote: Someone please tell me what I’m missing. I need to get paid! lol That's great, can we have some too? lol Heres my resolv.conf search buddistpalm.net search sillumutah.com search sillumutah.net nameserver 192.168.1.10 nameser

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Sam Lavitt
Res wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 12 May 2007, Dragon wrote: PHP provides for this directly. There is a restrict_base_dir setting that can be applied to each virtual host that prevents users from accessing anything outside of the specified directory tree.

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Res
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 12 May 2007, Dragon wrote: PHP provides for this directly. There is a restrict_base_dir setting that can be applied to each virtual host that prevents users from accessing anything outside of the specified directory tree. Correct, every

Re: [EMAIL PROTECTED] Is posible do that using my SERVER APACHE!!

2007-05-12 Thread Pitoniso Rikito Rikin
the method connect it's FORBIDEN ok thx anyway Krist van Besien <[EMAIL PROTECTED]> escribió: On 5/11/07, Pitoniso Rikito Rikin wrote: > In my network the only port avaible is the 80 and 21 You could also just run your ssh daemon on port 21 then, you know... Krist -- [EMAIL PROTECTED] Bremg

RE: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Glen Vickers
-Original Message- From: Jaqui Greenlees [mailto:[EMAIL PROTECTED] Sent: Saturday, May 12, 2007 1:04 PM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] multiple domain hosting --- Glen Vickers <[EMAIL PROTECTED]> wrote: > The only thing I changed was the server name from > t

RE: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Jaqui Greenlees
--- Glen Vickers <[EMAIL PROTECTED]> wrote: > The only thing I changed was the server name from > the IP address to the host > name. > > When you said it was working earlier I changed it > back. So is it all going > to 1 site still? Cuz that was my initial problem. > I'll check the host file

RE: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Glen Vickers
-Original Message- From: Jaqui Greenlees [mailto:[EMAIL PROTECTED] Sent: Saturday, May 12, 2007 3:02 AM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] multiple domain hosting --- Charles Michener <[EMAIL PROTECTED]> wrote: > > Since folks out on the internet can see your s

Re: [EMAIL PROTECTED] Can't set environment variable in per-birectory rewrite

2007-05-12 Thread Joshua Slive
On 5/12/07, Ian Brandt <[EMAIL PROTECTED]> wrote: RewriteRule ^(.+)$ frontcontroller.php [NS,E=REWRITTEN_REQUEST_URI:$1] I hate dealing with per-directory rewrites myself. Too darn complex. I don't know the exact problem here, but I can suggest a more typical way to get around this: Simple us

Re: [EMAIL PROTECTED] Apache as a frontend for OGo not working from LAN

2007-05-12 Thread Joshua Slive
On 5/12/07, Marco van Eck <[EMAIL PROTECTED]> wrote: My problem lies in accessing OGo from any location on the LAN with Apache working as frontend. I can access the document root of Apache just fine (http://webserver/ works), but when I redirect the browser to: http://webserver/OpenGroupWare I'm

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Joshua Slive
On 5/12/07, Dragon <[EMAIL PROTECTED]> wrote: PHP provides for this directly. There is a restrict_base_dir setting that can be applied to each virtual host that prevents users from accessing anything outside of the specified directory tree. Unless you happen to be using a library that access

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Dragon
Jaqui Greenlees did speak thusly: Yes, as Nick mentioned, suexec and user/group permissions are the common method for securing the site(s) from this. another option, slightly more hardware intensive is the have each hosted site running as a separate instance of apache chrooted so they do not hav

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Dragon
Sam Lavitt did speak thusly: Based on my research, suexec only works for SSI and CGI, so it would be pointless for providing security with php, and doing mass-hosting, php is something in pretty common use. And I am sorry, I mis-spoke, the mpm was mpm_perchild for apache 2.0, which apparentl

[EMAIL PROTECTED] Apache Service auto-enabling itself on Windows

2007-05-12 Thread Ruslan Sivak
I am seeing weird behaving for Apache running on windows. We have 2 servers, and due to maintanence, I have one of the servers' Apache service disabled. The problem is that it auto-enables itself (or something auto enables it) pretty much once a day. It seems to be initiated by the user SYST

[EMAIL PROTECTED] Apache as a frontend for OGo not working from LAN

2007-05-12 Thread Marco van Eck
Hello everyone, I've installed OpenGroupWare on a Suse 10.2 box. Before that I installed Cyrus, Apache2.2.3 and Postfix. The mailflow is working just fine, Apache is working just fine. After installing OGo I can run OGo perfectly on the server by executing http://localhost/OpenGroupware/ My p

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread andrew fong
Based on my research, suexec only works for SSI and CGI, so it would be pointless for providing security with php, and doing mass- hosting, php is something in pretty common use. And I am sorry, I mis-spoke, the mpm was mpm_perchild for apache 2.0, which apparently is abandoned and broken

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread The Gaijin
> >Sam Lavitt <[EMAIL PROTECTED]> wrote: > > > > > > > >>I am wondernig if apache 2.2 has a means to prevent a user with a > >>site hosted on the server, from accessing another users files. Sam - This might be a possible solution: http://www.telana.com/peruser.php I haven't used it, and the a

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Nick Kew
On Sat, 12 May 2007 05:00:24 -0400 (EDT) Jaqui Greenlees <[EMAIL PROTECTED]> wrote: > > pointless for providing security with php, and doing security with php is an oxymoron ... > > mass-hosting, php > > is something in pretty common use. > Yes, PHP is very commonly used. > No, suexec does not

[EMAIL PROTECTED] Can't set environment variable in per-birectory rewrite

2007-05-12 Thread Ian Brandt
Hi, I'm trying to implement the front controller pattern for a simple PHP site, while simultaneously leveraging mod_rewrite for some run-of-the- mill rewriting beforehand as well. Apache 2.2.4 & PHP 5.2.2. My simplified rules in .htaccess at present are as follows: - # Rewrite any r

RE: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Jaqui Greenlees
--- Charles Michener <[EMAIL PROTECTED]> wrote: > > Since folks out on the internet can see your sites > but you can't - is there a chance that your windows > HOSTS file is blocking your browser seeing your > virtual names - by default it only has localhost in > it - you need to add the others >

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Jaqui Greenlees
--- Sam Lavitt <[EMAIL PROTECTED]> wrote: > Sorry for my lack of clarity and experience, I came > here looking for > advice and help. This we do understand :) > Based on my research, suexec only works for SSI and > CGI, so it would be > pointless for providing security with php, and doing > m

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Sam Lavitt
Nick Kew wrote: On Fri, 11 May 2007 23:01:12 -0500 Sam Lavitt <[EMAIL PROTECTED]> wrote: I am wondernig if apache 2.2 has a means to prevent a user with a site hosted on the server, from accessing another users files. That's the operating system's business. (e.g. I hav

Re: [EMAIL PROTECTED] Apache 2.2 security concern

2007-05-12 Thread Nick Kew
On Fri, 11 May 2007 23:01:12 -0500 Sam Lavitt <[EMAIL PROTECTED]> wrote: > I am wondernig if apache 2.2 has a means to prevent a user with a > site hosted on the server, from accessing another users files. That's the operating system's business. > (e.g. > I have /hosting/user1, and I don

RE: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Charles Michener
Glen Vickers <[EMAIL PROTECTED]> wrote: On 5/11/07, Glen Vickers <[EMAIL PROTECTED]> wrote: I'm having some difficulty using the virtual domain hosting on my server. I have setup the virtual domains but it doesn't seem to recognize the two domains as they come i

RE: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Jaqui Greenlees
--- Glen Vickers <[EMAIL PROTECTED]> wrote: > I have tried a few things but here's the issue. The > site sillumutah.com or > sillumutah.net are a completely different site from > buddistpalm.net > > If you look at the virtualhost config I have 2 > different directories. So > what I'm trying t

RE: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Glen Vickers
I don't know if you changed anything since your last post, but both your sites are coming up for me. http://buddistpalm.net/ http://sillumutah.com/ Currently it is 00:12 PDT for me. You might be getting odd messages on the server, but the sites are available to the internet. Jaqui Be sm

Re: [EMAIL PROTECTED] multiple domain hosting

2007-05-12 Thread Jaqui Greenlees
I don't know if you changed anything since your last post, but both your sites are coming up for me. http://buddistpalm.net/ http://sillumutah.com/ Currently it is 00:12 PDT for me. You might be getting odd messages on the server, but the sites are available to the internet. Jaqui Be sm