Re: [users@httpd] off topic - how to secure httpd

2024-12-05 Thread mwood
On Wed, Dec 04, 2024 at 11:09:06PM +, gene heskett wrote: > On 12/4/24 09:20, Marc wrote: > > I hope nobody minds me addressing this off topic question. Is there a better place for this discussion? > > I was thinking about adding ipv6, and when I got a range to try with, I was > > actually s

Re: [users@httpd] off topic - how to secure httpd

2024-12-04 Thread gene heskett
On 12/4/24 09:20, Marc wrote: I hope nobody minds me addressing this off topic question. I was thinking about adding ipv6, and when I got a range to try with, I was actually surprised how many I got. This made me wonder how many ipv6 are being used and how many ipv4. Having these ipv6 so abun

Re: [users@httpd] off topic - how to secure httpd

2024-12-04 Thread E.S. Rosenberg
If you are storing blocks per single IP that won't scale (storage wise, searching the list/table, just a bitmap of the whole IPv6 space is 10^19 Exabytes! [2^128 bits in EiB]), if you aggressively block whole ranges you will most likely end up blocking a lot of legitimate potential users. I also t

[users@httpd] off topic - how to secure httpd

2024-12-04 Thread Marc
I hope nobody minds me addressing this off topic question. I was thinking about adding ipv6, and when I got a range to try with, I was actually surprised how many I got. This made me wonder how many ipv6 are being used and how many ipv4. Having these ipv6 so abundantly available made me also t

Re: [users@httpd] Off Topic

2014-01-11 Thread jidanni
Yes I am looking for some "if" test I can use that also works in subenvironments. works great but Dreamhost is still at 2.2.9. SetEnvIf works great, but not in subenvironments. Alas, it seems there really are no other methods $ w3m -dump file:///usr/share/doc/apache2-doc/manual/en/mod/directives.h

Re: [users@httpd] Off Topic

2014-01-11 Thread Eric Covener
On Sat, Jan 11, 2014 at 4:46 AM, wrote: >> "EC" == Eric Covener writes: > EC> Try logging the envvar. Whether it's logged the way you want or not, > EC> you can either focus on or remove the access control directives > > OK, I tried logging for the first time today. But I found that even at

Re: [users@httpd] Off Topic

2014-01-11 Thread jidanni
> "EC" == Eric Covener writes: EC> Try logging the envvar. Whether it's logged the way you want or not, EC> you can either focus on or remove the access control directives OK, I tried logging for the first time today. But I found that even at trace8 level, some things were never logged. Those

Re: [users@httpd] Off Topic

2014-01-10 Thread georg chambert
Find this one good for php; php-gene...@lists.php.net which I subscribe to too. chears georg - Original Message - From: Robert To: Apache Users Sent: Thursday, January 09, 2014 2:07 AM Subject: [users@httpd] Off Topic Is there an email forum like this one for

Re: [users@httpd] Off Topic

2014-01-10 Thread Eric Covener
Try logging the envvar. Whether it's logged the way you want or not, you can either focus on or remove the access control directives (also, use require env foo instead of order/allow/deny) On Fri, Jan 10, 2014 at 6:52 AM, wrote: > I just tried == instead of the = in > > SetEnvIf host abj\.jidan

Re: [users@httpd] Off Topic

2014-01-10 Thread jidanni
I just tried == instead of the = in SetEnvIf host abj\.jidanni\.org let_me_in Order Deny,Allow Deny from all Allow from env=let_me_in the result was that the test totally failed always. So == is not correct. > "AVF" == Antonio Vidal Ferrer > writes: AVF> Have you tried == instead of =

Re: [users@httpd] Off Topic

2014-01-10 Thread Antonio Vidal Ferrer
Have you tried == instead of =? Allow from env==good Best Toni On 10/01/14 12:14, jida...@jidanni.org wrote: "YK" == Yehuda Katz writes: YK> I don't know of a email list like this, but for programming questions (and answers) in any language, I suggest StackOverflow. I have been banned f

Re: [users@httpd] Off Topic

2014-01-10 Thread jidanni
> "YK" == Yehuda Katz writes: YK> I don't know of a email list like this, but for programming questions (and answers) in any language, I suggest StackOverflow. I have been banned from StackOverflow. I was hoping somebody could tell me why SetEnv blockme 1 Order Deny,Allow Deny from all A

[users@httpd] off topic - searching C++ list

2014-01-09 Thread georg chambert
Hi, Im looking for a good forum for C++ issues (cant find library std with my gcc dist) Anybody has a ref to one ? tnx Georg

Re: [users@httpd] Off Topic

2014-01-08 Thread Yehuda Katz
I don't know of a email list like this, but for programming questions (and answers) in any language, I suggest StackOverflow . - Y On Wed, Jan 8, 2014 at 8:07 PM, Robert wrote: > Is there an email forum like this one for javascript, php and mysql? > > Thanks, > Robe

[users@httpd] Off Topic

2014-01-08 Thread Robert
Is there an email forum like this one for javascript, php and mysql? Thanks, Robert