[EMAIL PROTECTED] Filter at vrtual server level
Hi, I have designed a apache filter which redirects request to our custom application. I have varrious virtual server running (both IP based and name based . Is it possible if I want to run this filter at virtual server level not at global level so that start and stop of one virtual server does not affect other virtual server. Please also specify the behavior in case virtual servers are configured as IP based single daemon as well as multiple daemon. \Vinay - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Name-based virtual hosting with SSL
Hi, Why Name-based virtual hosting cannot be used with SSL secure servers ? \Vinay - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] How to FilesMatch files within a certain domain
Hi. I want to cache multimedia files by using mod_expires and created this rule within my .htaccess file: --- ExpiresActive On FilesMatch \.(flv|ico|pdf|avi|mov|ppt|doc|mp3|wmv|wav|swf)$ ExpiresDefault A29030400 /FilesMatch However, this .htaccess file is shared by five VirtualHosts, and I would like to determine which VirtualHost must cache multimedia files. I mean: - static.foo.com must cache files - www.foo.com must not I tried with SERVER_NAME variable, but it won't work. I'd be grateful if somebody could give me a hint to build the rule. Thank you very much. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Name-based virtual hosting with SSL
It can be, but you have to use a non-standard port if you have more than one domain on the IP address. I do this for internal use, but as someone recently pointed out, some corporate firewalls block non- standard ports, so you can't depend on this technique for commercial sites that must reach a wide audience. -- John On Mar 30, 2008, at 3:36 AM, Vinay Purohit wrote: Hi, Why Name-based virtual hosting cannot be used with SSL secure servers ? \Vinay - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Websites for On-line Collectible Dealers Identry, LLC John Almberg (631) 546-5079 [EMAIL PROTECTED] www.identry.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [EMAIL PROTECTED] Loadbalancing/stickysession/Source_IP
Yavor, I'm not quite sure about how to setup proxy_load_balancer to stick by source IP, but I guess you can install 2 frontend Apaches infront of your backends webclients to be sure that those Apaches will always send beackend specific Cookie header for your load balancer. May be that would help. Tamer From: Yavor Trapkov [mailto:[EMAIL PROTECTED] Sent: Saturday, March 29, 2008 10:30 AM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Loadbalancing/stickysession/Source_IP Hello, I'm using mod_proxy balancer, and I need to redirect all requests coming from a user to the same backend server. Our application does not setup cookies and in this sense does not rely on sessions in order to work with requests sent from webclients that reject cookies. I set up my own session variable which I use for stickysession=SrvID, and roite=srv1,2,.. it seems to work, but I still need to cover cases if/when the webclient does not use cookies. My question is, how can I configure mod_proxy balancer to also use the source IP address to stick to a particular backend server, without using cookies. Many thanks
[EMAIL PROTECTED] mod_negotiate and source qualities by type, charset, language, and encoding
On 2008-03-27, Joshua Slive wrote: On Thu, Mar 27, 2008 at 12:11 PM, Daniel Aleksandersen [EMAIL PROTECTED] wrote: On 2008-03-27, Joshua Slive wrote: As far as I know, there is no way to set source quality in apache other than through type maps. Is there a way to set global type maps? No, I don't believe so. I have tried to include a var map using an asterisk in various combinations, but that did not work. I think it is strange that there is no way to tell Apache that one format is preferred over other formats in all cases where that format is supported. -- Daniel Aleksandersen - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] How to FilesMatch files within a certain domain
On Sun, Mar 30, 2008 at 5:05 AM, thomas Armstrong [EMAIL PROTECTED] wrote: Hi. I want to cache multimedia files by using mod_expires and created this rule within my .htaccess file: --- ExpiresActive On FilesMatch \.(flv|ico|pdf|avi|mov|ppt|doc|mp3|wmv|wav|swf)$ ExpiresDefault A29030400 /FilesMatch However, this .htaccess file is shared by five VirtualHosts, and I would like to determine which VirtualHost must cache multimedia files. I mean: - static.foo.com must cache files - www.foo.com must not I tried with SERVER_NAME variable, but it won't work. I'd be grateful if somebody could give me a hint to build the rule. Do it in httpd.conf inside the VirtualHost section, not in .htaccess. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Name-based virtual hosting with SSL
On Sun, Mar 30, 2008 at 3:36 AM, Vinay Purohit [EMAIL PROTECTED] wrote: Hi, Why Name-based virtual hosting cannot be used with SSL secure servers ? Because in order to choose the correct certificate to negotiate the secure connection, the server must know what name to use. But the name in the request is only available after the secure connection has been negotiated. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED] Logging Denied Referrers
Hi all, As mentioned in previous emails, I am trying to deny access via SetEnvIf statements in my httpd.conf (to block smap bots / email harvesters etc. I have two questions: 1. My server has several hundred VirtualHost directives. When the SetEnvIf statements are just placed in the main server config, will the block those referrers from the VirtualHosts as well? 2. How can I set logging to see if SetEnvIf statements are doing what I intended them to do? -Grant
Re: [EMAIL PROTECTED] Logging Denied Referrers
On Sun, Mar 30, 2008 at 12:15 PM, Grant Peel [EMAIL PROTECTED] wrote: Hi all, As mentioned in previous emails, I am trying to deny access via SetEnvIf statements in my httpd.conf (to block smap bots / email harvesters etc. I have two questions: 1. My server has several hundred VirtualHost directives. When the SetEnvIf statements are just placed in the main server config, will the block those referrers from the VirtualHosts as well? Yes, if placed in a Directory or Location section that is not overridden inside the VirtualHosts. See: http://httpd.apache.org/docs/2.2/sections.html#mergin 2. How can I set logging to see if SetEnvIf statements are doing what I intended them to do? For your access log, use a log format that reports the user agent (such as the combined log format). Then you can just make sure the response code is 403 for the appropriate user agents. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Logging Denied Referrers
Thanks Joshua, So, If I am reading that docs correctly, the bit I have to deny certain USer Agents should go near the top of my httpd.conf? SetEnvIfNoCase User-Agent ^IDBot block_bad_bots SetEnvIfNoCase User-Agent ^$ block_bad_bots SetEnvIfNoCase User-Agent Java/1.4.1_04 block_bad_bots Directory / Order Allow,Deny Allow from all Deny from env=block_bad_bots /Directory -Grant - Original Message - From: Joshua Slive [EMAIL PROTECTED] To: users@httpd.apache.org; Grant Peel [EMAIL PROTECTED] Sent: Sunday, March 30, 2008 12:53 PM Subject: Re: [EMAIL PROTECTED] Logging Denied Referrers On Sun, Mar 30, 2008 at 12:15 PM, Grant Peel [EMAIL PROTECTED] wrote: Hi all, As mentioned in previous emails, I am trying to deny access via SetEnvIf statements in my httpd.conf (to block smap bots / email harvesters etc. I have two questions: 1. My server has several hundred VirtualHost directives. When the SetEnvIf statements are just placed in the main server config, will the block those referrers from the VirtualHosts as well? Yes, if placed in a Directory or Location section that is not overridden inside the VirtualHosts. See: http://httpd.apache.org/docs/2.2/sections.html#mergin 2. How can I set logging to see if SetEnvIf statements are doing what I intended them to do? For your access log, use a log format that reports the user agent (such as the combined log format). Then you can just make sure the response code is 403 for the appropriate user agents. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Logging Denied Referrers
On Sun, Mar 30, 2008 at 3:32 PM, Grant Peel [EMAIL PROTECTED] wrote: Thanks Joshua, So, If I am reading that docs correctly, the bit I have to deny certain USer Agents should go near the top of my httpd.conf? SetEnvIfNoCase User-Agent ^IDBot block_bad_bots SetEnvIfNoCase User-Agent ^$ block_bad_bots SetEnvIfNoCase User-Agent Java/1.4.1_04 block_bad_bots Directory / Order Allow,Deny Allow from all Deny from env=block_bad_bots /Directory It doesn't matter where in httpd.conf that it goes. But this will only work if you have NO OTHER Order/Allow/Deny statements in httpd.conf. Since Directory / is essentially the first thing evaluated (regardless of its location) it will get overridden by any other access control directives. This isn't a problem unless you have some generic Directory /var/web Order Allow,Deny Allow from all /Directory sections which will turn off your anti-robot rules. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [EMAIL PROTECTED] Logging Denied Referrers
Joshua, So, cand these be combined into one container somehow? Directory / Order Allow,Deny Allow from all Deny from env=block_bad_bots /Directory Directory /home/*/www Options Indexes Includes FollowSymLinks # FollowSymLinks MultiViews AllowOverride Options All Order allow,deny Allow from all /Directory -Grant - Original Message - From: Joshua Slive [EMAIL PROTECTED] To: users@httpd.apache.org; Grant Peel [EMAIL PROTECTED] Sent: Sunday, March 30, 2008 5:43 PM Subject: Re: [EMAIL PROTECTED] Logging Denied Referrers On Sun, Mar 30, 2008 at 3:32 PM, Grant Peel [EMAIL PROTECTED] wrote: Thanks Joshua, So, If I am reading that docs correctly, the bit I have to deny certain USer Agents should go near the top of my httpd.conf? SetEnvIfNoCase User-Agent ^IDBot block_bad_bots SetEnvIfNoCase User-Agent ^$ block_bad_bots SetEnvIfNoCase User-Agent Java/1.4.1_04 block_bad_bots Directory / Order Allow,Deny Allow from all Deny from env=block_bad_bots /Directory It doesn't matter where in httpd.conf that it goes. But this will only work if you have NO OTHER Order/Allow/Deny statements in httpd.conf. Since Directory / is essentially the first thing evaluated (regardless of its location) it will get overridden by any other access control directives. This isn't a problem unless you have some generic Directory /var/web Order Allow,Deny Allow from all /Directory sections which will turn off your anti-robot rules. Joshua. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]