RE: [us...@httpd] File does not exist error in my error log

2009-08-24 Thread Kamaraj, Jayakumar
Hi, Basically this many errors comes for just favicon.ico .Anyway we will compare with our old apache logs and will inform you . Thanks, Jai -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Monday, August 24, 2009 6:47 PM To: users@httpd.apache.org Subject: Re: [us

RE: [us...@httpd] File does not exist error in my error log

2009-08-24 Thread Kamaraj, Jayakumar
Hi, Thanks for your reply. I will try once more comparing this with my old apache version error logs and will inform you. Thanks, Jai -Original Message- From: Tom Evans [mailto:tevans...@googlemail.com] Sent: Monday, August 24, 2009 7:20 PM To: users@httpd.apache.org Subject: R

Re: [us...@httpd] Apache 2.2.9 known vulnerabilities?

2009-08-24 Thread Georgi Hristozov
On Mon, Aug 24, 2009 at 8:38 PM, David Taveras wrote: > Hello, > > Iam still a user of apache 2.2.9 and wish to know what vulnerabilites this > version is exposed to aisde from: CVE-2008-2939 > > Is there any site, where I can get an accurate listing? CVE site seems > confusing and I just wonder if

Re: [us...@httpd] Proposal to Optionally Block DNS

2009-08-24 Thread J. Greenlees
Mike -- EMAIL IGNORED wrote: > I propose this upgrade to Apache: > > Options +NoDNS > > Prevents Apache from initiating DNS activity for > any reason. > > I am now running my server with all DNS blocked > by iptables. Performance is thereby substantially > improved. Fortunately, I usually do

Re: [us...@httpd] downstream server wanted client certificate but none are configured

2009-08-24 Thread Eric Covener
On Mon, Aug 24, 2009 at 7:47 PM, pe uni wrote: > I see the following message in the error_log > > Proxy client certificate callback: downstream server wanted client > certificate but none are configured > > I have the following directives in my proxy virtual host... > --- >

[us...@httpd] downstream server wanted client certificate but none are configured

2009-08-24 Thread pe uni
I see the following message in the error_log Proxy client certificate callback: downstream server wanted client certificate but none are configured I have the following directives in my proxy virtual host... --- SSLProxyCACertificateFile /etc/httpd/ssl/CA/CA-bundle.crt SS

Re: [us...@httpd] Re: Proposal to Optionally Block DNS

2009-08-24 Thread Nick Kew
André Warnier wrote: Mike -- EMAIL IGNORED wrote: I would hope that such a person might submit a patch. Some elements maybe to enlighten you, from someone who is, like you, a grateful (?) user of Apache httpd, and not a contributor of code. It's fair enough that he makes a request for en

Re: [us...@httpd] Re: Proposal to Optionally Block DNS

2009-08-24 Thread Evan Platt
At 11:37 AM 8/24/2009, you wrote: Since I have not looked at Apache source code, for me this would be at least several hours work, if not several days. For someone into the source code, I expect it to take a few minutes, to an hour or two, depending on structure. I would hope that such a person

Re: [us...@httpd] Re: Proposal to Optionally Block DNS

2009-08-24 Thread André Warnier
Mike -- EMAIL IGNORED wrote: On Mon, 24 Aug 2009 10:57:45 -0700, Aaron Turner wrote: [...] I believe Eric was agreeing with Tom's sentiment. Ie: If you think this is worthwhile, please feel free to submit a patch adding this feature. Since I have not looked at Apache source code, for me thi

[us...@httpd] memory growth of httpd

2009-08-24 Thread bf...@free-man.net
Centos 5 Apache version 2.2.3 when I first started up the server each httpd thread was about 50 MB Now when i restart apache it comes in at about 80mb. I have not changed anything that I know of. is there a way to see what is using memory in httpd? thanks

Re: [us...@httpd] (internal app) --http-->apache---https--->(external app)

2009-08-24 Thread pe uni
Hi Eric, I tried the hint - SSLProxyEngine On. The https connection works with websites/applications that don't require a certificate. For websites/applications that require a certificate, it fails. Please verify if the below config makes sense? I included the following SSL directives in the vi

[us...@httpd] Re: Proposal to Optionally Block DNS

2009-08-24 Thread Mike -- EMAIL IGNORED
On Mon, 24 Aug 2009 10:57:45 -0700, Aaron Turner wrote: [...] > I believe Eric was agreeing with Tom's sentiment. Ie: If you think > this is worthwhile, please feel free to submit a patch adding this > feature. Since I have not looked at Apache source code, for me this would be at least several

Re: [us...@httpd] Re: Proposal to Optionally Block DNS

2009-08-24 Thread Aaron Turner
On Mon, Aug 24, 2009 at 9:36 AM, Mike -- EMAIL IGNORED wrote: > On Mon, 24 Aug 2009 11:32:17 -0400, Eric Covener wrote: > >> On Mon, Aug 24, 2009 at 4:25 AM, Tom Evans >> wrote: >>> On Sun, 2009-08-23 at 00:31 +, Mike -- EMAIL IGNORED wrote: I propose this upgrade to Apache:   Op

[us...@httpd] Apache 2.2.9 known vulnerabilities?

2009-08-24 Thread David Taveras
Hello, Iam still a user of apache 2.2.9 and wish to know what vulnerabilites this version is exposed to aisde from: CVE-2008-2939 Is there any site, where I can get an accurate listing? CVE site seems confusing and I just wonder if there is something more practical. Thank you. Daniel

[us...@httpd] Re: Proposal to Optionally Block DNS

2009-08-24 Thread Mike -- EMAIL IGNORED
On Mon, 24 Aug 2009 11:32:17 -0400, Eric Covener wrote: > On Mon, Aug 24, 2009 at 4:25 AM, Tom Evans > wrote: >> On Sun, 2009-08-23 at 00:31 +, Mike -- EMAIL IGNORED wrote: >>> I propose this upgrade to Apache: >>> >>>   Options +NoDNS >> >> I think your mailer dropped your patch, can you rese

Re: [us...@httpd] Proposal to Optionally Block DNS

2009-08-24 Thread Eric Covener
On Mon, Aug 24, 2009 at 4:25 AM, Tom Evans wrote: > On Sun, 2009-08-23 at 00:31 +, Mike -- EMAIL IGNORED wrote: >> I propose this upgrade to Apache: >> >>   Options +NoDNS > > I think your mailer dropped your patch, can you resend? golf-clapping this one. -- Eric Covener cove...@gmail.com -

Re: [us...@httpd] File does not exist error in my error log

2009-08-24 Thread Tom Evans
On Mon, 2009-08-24 at 17:28 +0530, Kamaraj, Jayakumar wrote: > Hi, > > I recently upgraded from apache 1.3.37 to 1.3.41 ,I didn't change > any of the configuration parameter. > When I am using the apache 1.3.37 ,my http logs contain only 404 > request, but there is no equivalent error li

Re: [us...@httpd] File does not exist error in my error log

2009-08-24 Thread André Warnier
Kamaraj, Jayakumar wrote: Hi, For your questions here are my possible answers Which kind of platform ? Linux fw01 2.6.18-1.2798.fc6PAE #1 SMP Mon Oct 16 14:54:22 EDT 2006 i686 i686 i386 GNU/Linux Error line in http access log : 2009-08-24~05:28:22~10.181.4.3~-~test123.com~pw12~10.183.22.42~

RE: [us...@httpd] File does not exist error in my error log

2009-08-24 Thread Kamaraj, Jayakumar
Hi, For your questions here are my possible answers Which kind of platform ? Linux fw01 2.6.18-1.2798.fc6PAE #1 SMP Mon Oct 16 14:54:22 EDT 2006 i686 i686 i386 GNU/Linux Error line in http access log : 2009-08-24~05:28:22~10.181.4.3~-~test123.com~pw12~10.183.22.42~GET~/2.jpg~~404~0~19910~-~0~

Re: [us...@httpd] File does not exist error in my error log

2009-08-24 Thread André Warnier
Kamaraj, Jayakumar wrote: Hi, I recently upgraded from apache 1.3.37 to 1.3.41 , on which kind of platform ? I didn't change any of the configuration parameter. mmm. Maybe you did not, but maybe the update did ? When I am using the apache 1.3.37 ,my http logs which exact file

[us...@httpd] File does not exist error in my error log

2009-08-24 Thread Kamaraj, Jayakumar
Hi, I recently upgraded from apache 1.3.37 to 1.3.41 ,I didn't change any of the configuration parameter. When I am using the apache 1.3.37 ,my http logs contain only 404 request, but there is no equivalent error line in error_log file ,provided LogLevel equals error . Even with sa

[us...@httpd] AddOutputFilterByType vs. SSI/php-cgi

2009-08-24 Thread Andre Hübner
linux, apache 2.2.10 Hello, my situation is as follows. i have activated mod_deflate by: LoadModule deflate_module /usr/lib/apache/mod_deflate.so AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript text/x-js text/javascript In test.shtml Page (SSI) i

Re: [us...@httpd] Proposal to Optionally Block DNS

2009-08-24 Thread Tom Evans
On Sun, 2009-08-23 at 00:31 +, Mike -- EMAIL IGNORED wrote: > I propose this upgrade to Apache: > > Options +NoDNS > > Prevents Apache from initiating DNS activity for > any reason. > > I am now running my server with all DNS blocked > by iptables. Performance is thereby substantially > i

Re: [us...@httpd] (internal app) --http-->apache---https--->(external app)

2009-08-24 Thread Krist van Besien
On Sun, Aug 23, 2009 at 8:30 PM, pe uni wrote: > Hi Eric, below is the excerpt from the apache log > -- > [Sun Aug 23 12:24:39 2009] [debug] mod_proxy_http.c(56): proxy: HTTP: > canonicalising URL //www.techmed.com/VENDOR/vendor.asmx > [Sun Aug 23 12:24:39 2009] [debug]