On May 14, 2010, at 11:34 PM, Brian Christmas wrote: > G'day listers > > Friend of mine got this email from his strictly PC IT manager, blaming him > for an attack on his network via my mates Power Mac (which is on the network). > > I can't really help him, but knowing you guys, someone will know what's going > on. > > This IT guy is very, very anti Mac. > > Asterisks are mine. > > > Any advice please.
Apache on the Mac does not come with mod_php enabled by default; if web sharing is turned off, apache isn't running. Have you friend do this (with his IT guy, if the windows droid has any clue regarding unix) Start Terminal. grep php /private/etc/apache2/httpd.conf You will most likely get: #LoadModule php5_module libexec/apache2/libphp5.so The hash at the beginning of the line indicates that it's a comment, and so the module is NOT running. to find out if httpd is running, look in activity monitor, or do this in terminal: sudo ps aux | grep httpd Password: If Apache is running you'll get : _www 120 0.0 0.0 2455412 948 ?? S 7:30AM 0:00.00 /usr/sbin/httpd -D FOREGROUND root 25 0.0 0.3 2455412 6468 ?? Ss 7:30AM 0:00.37 /usr/sbin/httpd -D FOREGROUND johnson 369 0.0 0.0 2437432 892 s000 S+ 8:23AM 0:00.00 grep httpd If it isn't all you'll get is: johnson 369 0.0 0.0 2437432 892 s000 S+ 8:23AM 0:00.00 grep httpd If Apache is running do this in terminal httpd -M And you'll get a list of all loaded modules (this is the default Snow leopard list) : Loaded Modules: core_module (static) mpm_prefork_module (static) http_module (static) so_module (static) authn_file_module (shared) authn_dbm_module (shared) authn_anon_module (shared) authn_dbd_module (shared) authn_default_module (shared) authz_host_module (shared) authz_groupfile_module (shared) authz_user_module (shared) authz_dbm_module (shared) authz_owner_module (shared) authz_default_module (shared) auth_basic_module (shared) auth_digest_module (shared) cache_module (shared) disk_cache_module (shared) mem_cache_module (shared) dbd_module (shared) dumpio_module (shared) ext_filter_module (shared) include_module (shared) filter_module (shared) substitute_module (shared) deflate_module (shared) log_config_module (shared) log_forensic_module (shared) logio_module (shared) env_module (shared) mime_magic_module (shared) cern_meta_module (shared) expires_module (shared) headers_module (shared) ident_module (shared) usertrack_module (shared) setenvif_module (shared) version_module (shared) proxy_module (shared) proxy_connect_module (shared) proxy_ftp_module (shared) proxy_http_module (shared) proxy_ajp_module (shared) proxy_balancer_module (shared) ssl_module (shared) mime_module (shared) dav_module (shared) status_module (shared) autoindex_module (shared) asis_module (shared) info_module (shared) cgi_module (shared) dav_fs_module (shared) vhost_alias_module (shared) negotiation_module (shared) dir_module (shared) imagemap_module (shared) actions_module (shared) speling_module (shared) userdir_module (shared) alias_module (shared) rewrite_module (shared) bonjour_module (shared) If your friend IS running apache and does have php running, just make sure php is up-to-date. Finally... NONE of this has diddley squat to do with it being a Mac. ANY system running Apache/PHP could be affected. -- Bruce Johnson "Wherever you go, there you are" B. Banzai, PhD -- You received this message because you are a member of G-Group, a group for those using G3, G4, and G5 desktop Macs - with a particular focus on Power Macs. The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to g3-5-list@googlegroups.com For more options, visit this group at http://groups.google.com/group/g3-5-list
