Tag Info

New answers tagged

0

I think that you dont need redirect any. Can edit server.xml to create 2 connectors.... fe. <Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" URIEncoding="UTF-8" /> <Connector port="80" protocol="HTTP/1.1" connectionTimeout="20000" ...


2

mod_rewrite is an Apache module, but based on the error message you posted, it looks like you must have an entry in php.ini that is similar to: extension=/usr/lib/php5/20090626/mod_rewrite.so. PHP cannot load mod_rewrite as an extension, and also it is saying the file referenced does not exist. Find the line in php.ini that is trying to load extension ...


0

The one worked for me SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH" Try this one.


0

If not present. It's generated by mod_jk (tomcat module for apache - called also jakarta via Apache which runs Tomcat https://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html#s81 ) Using text editor Apache calls module mod_jk which is the tomcat itself Configure workers in Tomcat configuration file called workers.properties as in point # 4


0

The Goolge image proxy is caching. You can easily test this by embedding an image into an e-mail and send it to an Gmail account you have control over. Reload the page a few times (with dropped cache of course). The cache gets hit, your server will not receive any request. It's unclear if the same cached URL/file gets served to multiple users. Maybe this ...


1

Try the block below, I just tested it myself on one of my Apache setups and it worked fine. <IfModule mod_rewrite.c> RewriteEngine on SetEnvIfNoCase User-Agent ^libwww-perl bad_bot Order Allow,Deny Allow from ALL Deny from env=bad_bot


0

Every process that requires a timestamp requires to call gettimeofday, so it is difficult to know whether it is normal or not. It can be a module that creates a log, a module that checks the time to know if it is time to close the communication. In fact, in your case, to know why there are so many gettomeofday, disable apache modules that could responsible ...


1

I ran into this exact problem recently. While the suggested solutions will work, Nginx offers a built-in solution: proxy_redirect default; Documentation at http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect Here's a full example of how to use it: server { listen 80; location / { proxy_pass http://localhost:8080 ...


2

The problem was that I forgot I was using CloudFlare (easy to forget once you installed it). That's why HTTP_X_FORWARDED_PROTO said HTTPS, because I was behind a reverse proxy. My CloudFlare config under CRYPTO / SSL with SPDY also said: Flexible. When changed to full then PHP return the expected HTTPS and SERVER_PORT vars.


0

The rule is as follows: SecRule TX:INBOUND_ANOMALY_SCORE "@gt 0" \ "chain,phase:5,id:'981203',t:none,log,noauditlog,pass,skipAfter:END_CORRELATION,msg:'Inbound Anomaly Score (Total Inbound Score: %{TX.INBOUND_ANOMALY_SCORE}, SQLi=%{TX.SQL_INJECTION_SCORE}, XSS=%{TX.XSS_SCORE}): %{tx.inbound_tx_msg}'" SecRule TX:INBOUND_ANOMALY_SCORE "@lt ...


0

In my case I had not enabled the site 'default-ssl'. Only '000-default' was listed in the /etc/apache2/sites-enabled folder. Enable SSL site on Ubuntu 14 LTS, Apache 2.4.7: a2ensite default-ssl service apache2 reload


0

In my case I had not enabled the site 'default-ssl'. Only '000-default' was listed in the /etc/apache2/sites-enabled folder. Enable SSL site on Ubuntu 14 LTS, Apache 2.4.7: a2ensite default-ssl service apache2 reload


0

Sounds like a memory and/or resources problem. No guarantee it will help, but I think it's worth experimenting / checking: Increase the php memory limits by editing the following lines in the php.ini file as: max_execution_time = 30 --> 60 ; memory_limit = 32 --> 128, or even 256M ; Add the following lines to the end of .htaccess file: php_value ...


0

So the answer about another process using port 80 or 443 or something is probably correct more or less, but this looks like a classic mistake which I thought I'd share. You should never ever kill -9 pidof httpd or otherwise kill apache abruptly. If you do, you will get that error until the system kills all the remaining tcp connections to/from port 80. Try ...


2

Yes, over https basic auth is secure. Additionally between the RADIUS server and the HTTP server the passwords are reversibly encrypted using the RADIUS shared secret.


1

In the following logs, sub.example.com represents a subdomain which is different from that actually being hosted by the servers in question. [Fri May 01 06:28:37.315175 2015] [ssl:debug] [pid 13873] ssl_engine_io.c(1201): (70014)End of file found: [client 10.0.0.123:37617] AH02007: SSL handshake interrupted by system [Hint: Stop button pressed in ...


2

Seeing how you have a /private/etc directory I guess you're running Apache on MacOS X (please avoid putting linux windows and mac tags at the same time). This article should help you set up apache (ignore PHP related stuff). Basically, start by learning what httpd.conf file you should edit and look at Virtual Host/DocumentRoot. Having said that, you ...


0

When you're using e.g. the vhost_combined Logformat: CustomLog ${APACHE_LOG_DIR}/access.log vhost_combined You can adapt vhost_combined by adding %{Host}i, e.g. LogFormat "%v:%p %h %l %u %t %{Host}i \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined


0

I've come back to this after lunch, and found the problem. I've since tweaked my config slightly to add a Directory block for the other folder (/kibana), but I think the key change was this: Alias /logging "/usr/share/kibana/" Changing the AliasMatch to Alias! Hope this helps future Googlers.


0

I still have no idea what causes this. I discovered that it was only serving files from /Users/john and not the rest of the file system (other than the correct document root for the server), so I assume it is something related to some clever OS X file sharing something something. I checked for mod_userdir, which was not enabled. I checked all Directory and ...


-1

The domain name is linked to the website directory using the htttp.conf file. If you are on a centos server the conf file is located at /etc/httpd/httpd.conf. I do not have the expertise to guide you to httpd.conf file on other types of OS. But I think you can easily figure that out. Inside httpd.conf look at these lines. <VirtualHost *:80> ...


0

This is pretty simple: Guess someone types aa.com in his browsers address bar. The browser then starts a dns lookup of aa.com to find out what IP address to talk to. Lets say, for the example, DNS answers 8.8.8.8 Browser then connects to 8.8.8.8 on port 80 and submits a GET request and additional HTTP header fields. One of this HTTP header fields is "HOST" ...


3

An HTTP request contains a header field named Host which contains the name of the virtual host that should answer. Apache reads this and maps the request to the appropriate vhost. http://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol, specifically the Host: header...


1

There is almost nothing you can do on your site to defend from DDoS. Essentially when malicious traffic reaches your site it is already too late to do anything. Your best chance to defend yourself is by using third party provider. There are several of them offering different features for different budgets but you could start with Incapsula or Cloudflare.


0

You can achieve it with mod_rewrite RewriteEngine On RewriteRule /api/([a-z]+)/(.*) http://$1.test.com/api/$2 [P] The [P] on mod_rewrite makes it act as mod_proxy (from apache doc http://httpd.apache.org/docs/2.2/rewrite/flags.html#flag_p): Use of the [P] flag causes the request to be handled by mod_proxy, and handled via a proxy request. For ...


3

Try looking for a <Directory /> section and make sure that any settings within that tag are restrictive. Also check if mod_userdir is enabled and configured. Look for tags like UserDir


0

As far as you are changing also the URI when doing ProxyPass probably you will need to rewrite also the cookie <VirtualHost *:8080> ServerName myserver.domain.com ProxyVia On ProxyPreserveHost Off ProxyAddHeaders Off ProxyRequests Off SSLProxyEngine On SSLProxyCheckPeerCN Off ProxyPass /wso2/ ...


0

In my case I had mod_ssl installed but it was not enabled. To do this I ran: sudo a2enmod ssl


0

TL;DR delete www www is already a subdomain of example.com. so you certainly are able to define 3rd or 4th level domains from your original domain. But you most likely do not want something.www.yourdomain.com as your subdomain. What you probably want is subdomain.yourdomain.com, thus just delete the wwww. Havent tested your configuration yet, so I dont ...


0

I noticed in your subdomain2, you didn't include the . Not sure if that's just in the config here, or yours. Did you do service httpd reload (or service apache2 reload depending on OS) Is your DNS pointed at your IP using those domain names?


2

According to this old thread on the apache-modssl mailing list, file() reads the contents of the file into a single string, and so special characters (such as newlines) in the referenced file may break the SSLRequire syntax. Given that this was posted by the original author of mod_ssl, I'd trust this theory to be spot on. Try with the following contents in ...


2

You should set up a Sanitise rule: https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#sanitiseArg 5kKate the password is in section C which is the request body. Which is where passwords should be for POST requests. I agree you shouldn't use them in URLS via GET requests (in which case they would should in section B of the audit log).


0

You can configure mod_security to disable logging the request URL. This is the letter B which I removed from the below configuration. SecAuditLogParts ACIFHZ You can read more here: http://resources.infosecinstitute.com/analyzing-mod-security-logs/ The bigger issue though is that you are sending cleartext passwords in the URL. I'm not as familiar with ...


0

If you want a python solution, check out Pygtail: https://github.com/bgreenlee/pygtail It's based on logcheck's logtail2 tool


0

RewriteCond and RewriteRule can also be used in server config. Something along the lines of RewriteEngine On RewriteCond %{HTTP_REFERER} ^http://(.*\.)?example\.com [NC] RewriteRule .* http://127.0.0.1 [R=301,L] in your server config should do the trick. For this to work though you have to add this to every VirtualHost you want to apply the global ...


2

Debian 6 (Debian Squeeze) is an old Debian version and will not include newer utilities like OpenSSL 1.0.1 & above. Utilities like OpenSSL 0.9.8 will receive security updates until February 2016. Plan your migration to Debian stable now. If you are not very experienced in compiling utilities like OpenSSL and replacing them in Apache, don't do it-- you ...


1

The Error is here: Edit your httpd.conf/apache2.conf <IfModule security2_module> Include crs/modsecurity_crs_10_setup.conf Include crs/activated_rules/*.conf </IfModule> Change it to <IfModule security2_module> # Include crs/modsecurity_crs_10_setup.conf Include crs/activated_rules/*.conf </IfModule> With booth lines activated, ...


1

I faced with same problem, so this works at my web-server: iptables -I INPUT -m string --string "announce.php" --algo kmp --to 65535 -j TARPIT I've added this rule at the top. You cat use DROP instead of TARPIT(yes, I'm a bad and forced —Āhinese to suffer :-D).


0

Biggest problem with your idea is that if you expect the reverse proxy to send cookies to the backend, but the client wouldn't send cookies to the frontend (unless the backend cookie domain was inferior to the frontend). I would suggest that mod_proxy would likely be too difficult to use, and in this case you'd get to your goal faster with mod_rewrite. ... ...


1

As Craig Watson already told, you should not mess with PHP memory limit if not really necessary. Anyway, it is not possible to correctly size the server without a profound understanding of your workload. I suggest you to simulate a realistic load and in the meanwhile to monitor your server resource allocation/usage. For what it matters, 512 MB are very few ...


2

TL;DR - Don't bump your memory limits for the sake of it. For a standard PHP application like WordPress, 128MB is huge and should be enough for 90% of your needs. However, there are a few important facts here: PHP Memory Allocation is per-script/process As per the PHP documentation for the max_memory option: This sets the maximum amount of memory in ...


0

You measure. You run it at your workplace in a VM of similar specs and put a load test on it. Simple like that. Given that any half decent tablet can run visualization that is also not really an issue.


0

I had the same problem and it's likely to be an Apache bug; in my case, the problem showed up after an update, and disappeared after a subsequent update, but I had to add this at the bottom: Deny from all That's scary that Apache could open security holes like this :(


1

You don't have php installed yet. Run: apt-get install php5 libapache2-mod-php service apache2 restart


0

This is a sample after a real wold configuration that works for me I had to use individual ProxyPassReverse directives to get redirections/links to work. Even the final / seems important. <Proxy balancer://mycluster> Order deny,allow Allow from all BalancerMember http://192.168.151.101 BalancerMember http://192.168.151.102 BalancerMember ...


1

Unless an .htaccess file has been created before, you'll just need to create one in a relevant directory - for example, if you want a redirect from /foo/bar.html you can put the .htaccess file in the web root (/) or in the /foo directory. From there, you'll just want to use mod_alias for a simple redirect: Redirect /foo/bar.html ...


0

The fix was to follow the instructions at https://www.howtoforge.com/how-to-set-up-apache2-with-mod_fcgid-and-php5-on-centos-5.2. Commenting out everything in php.conf. After that mod_fcgi took over handling php in it's own process, rather than in Apache's process.


0

You missed VirtualHost setting. NG: DocumentRoot "/Library/WebServer/Documents/dev2" OK: DocumentRoot /Library/WebServer/Documents/dev2


1

I also came across this question googling for apache2 dynamic vhost fallback and Luc's answer helped me a lot with solving my problem, but I still want to show what I did to achieve my goals, mainly because it involved some extra works and because I think it could be helpful for any future googlers... My goals dynamic vhosting for all domains and ...


0

Following apache recommendations (http://httpd.apache.org/docs/2.2/mod/mod_proxy.html), if your apache only works as ReverseProxy you must configure this: ProxyRequests Off # Then the config you actually have <Proxy balancer://mycluster> BalancerMember http://192.168.151.101 BalancerMember http://192.168.151.102 BalancerMember http://192.168.151.103 ...



Top 50 recent answers are included