[EMAIL PROTECTED] Filter at vrtual server level

2008-03-30 Thread Vinay Purohit

 Hi,

I have designed a apache filter which redirects request to our custom
application. I have varrious virtual server running (both IP based and
name based . Is it possible if I want to run this filter at virtual
server level not at global level so that start and stop of one virtual
server does not affect other virtual server.
Please also specify the behavior in case virtual servers are configured
as IP based single daemon as well as multiple daemon.

\Vinay

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Name-based virtual hosting with SSL

2008-03-30 Thread Vinay Purohit

Hi,

Why Name-based virtual hosting cannot be used with SSL secure servers ?

\Vinay

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] How to FilesMatch files within a certain domain

2008-03-30 Thread thomas Armstrong
Hi.

I want to cache multimedia files by using mod_expires and created
this rule within my .htaccess file:
---
ExpiresActive On
FilesMatch \.(flv|ico|pdf|avi|mov|ppt|doc|mp3|wmv|wav|swf)$
ExpiresDefault A29030400
/FilesMatch


However, this .htaccess file is shared by five VirtualHosts, and I
would like to determine which VirtualHost must cache multimedia files.
I mean:
- static.foo.com must cache files
- www.foo.com must not

I tried with SERVER_NAME variable, but it won't work. I'd be grateful
if somebody could give me a hint to build the rule.

Thank you very much.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Name-based virtual hosting with SSL

2008-03-30 Thread John Almberg
It can be, but you have to use a non-standard port if you have more  
than one domain on the IP address. I do this for internal use, but as  
someone recently pointed out, some corporate firewalls block non- 
standard ports, so you can't depend on this technique for commercial  
sites that must reach a wide audience.


-- John

On Mar 30, 2008, at 3:36 AM, Vinay Purohit wrote:



Hi,

Why Name-based virtual hosting cannot be used with SSL secure  
servers ?


\Vinay

-
The official User-To-User support forum of the Apache HTTP Server  
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Websites for On-line Collectible Dealers

Identry, LLC
John Almberg
(631) 546-5079
[EMAIL PROTECTED]
www.identry.com




-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Loadbalancing/stickysession/Source_IP

2008-03-30 Thread Tamer Embaby
Yavor,

I'm not quite sure about how to setup proxy_load_balancer to stick
by source IP, but I guess you can install 2 frontend Apaches infront of your 
backends
webclients to be sure that those Apaches will always send beackend specific 
Cookie
header for your load balancer.  May be that would help.

Tamer


From: Yavor Trapkov [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 29, 2008 10:30 AM
To: users@httpd.apache.org
Subject: [EMAIL PROTECTED] Loadbalancing/stickysession/Source_IP

Hello,

I'm using mod_proxy balancer, and I need to redirect all requests coming from a 
user to the same backend server.
Our application does not setup cookies and in this sense does not rely on 
sessions in order to work with requests sent from webclients that reject 
cookies.
I set up my own session variable which I use for stickysession=SrvID, and 
roite=srv1,2,.. it seems to work, but I still need to cover cases if/when the 
webclient
does not use cookies.
My question is, how can I configure mod_proxy balancer to also use the source 
IP address to stick to a particular backend server, without using cookies.

Many thanks




[EMAIL PROTECTED] mod_negotiate and source qualities by type, charset, language, and encoding

2008-03-30 Thread Daniel Aleksandersen
On 2008-03-27, Joshua Slive wrote:
 On Thu, Mar 27, 2008 at 12:11 PM, Daniel Aleksandersen

 [EMAIL PROTECTED] wrote:
  On 2008-03-27, Joshua Slive wrote:
As far as I know, there is no way to set source quality in apache
other than through type maps.
 
   Is there a way to set global type maps?

 No, I don't believe so.

I have tried to include a var map using an asterisk in various 
combinations, but that did not work.

I think it is strange that there is no way to tell Apache that one format 
is preferred over other formats in all cases where that format is 
supported.
-- 
Daniel Aleksandersen

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] How to FilesMatch files within a certain domain

2008-03-30 Thread Joshua Slive
On Sun, Mar 30, 2008 at 5:05 AM, thomas Armstrong [EMAIL PROTECTED] wrote:
 Hi.

  I want to cache multimedia files by using mod_expires and created
  this rule within my .htaccess file:
  ---
  ExpiresActive On
  FilesMatch \.(flv|ico|pdf|avi|mov|ppt|doc|mp3|wmv|wav|swf)$
  ExpiresDefault A29030400
  /FilesMatch
  

  However, this .htaccess file is shared by five VirtualHosts, and I
  would like to determine which VirtualHost must cache multimedia files.
  I mean:
  - static.foo.com must cache files
  - www.foo.com must not

  I tried with SERVER_NAME variable, but it won't work. I'd be grateful
  if somebody could give me a hint to build the rule.

Do it in httpd.conf inside the VirtualHost section, not in .htaccess.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Name-based virtual hosting with SSL

2008-03-30 Thread Joshua Slive
On Sun, Mar 30, 2008 at 3:36 AM, Vinay Purohit [EMAIL PROTECTED] wrote:

  Hi,

  Why Name-based virtual hosting cannot be used with SSL secure servers ?

Because in order to choose the correct certificate to negotiate the
secure connection, the server must know what name to use. But the name
in the request is only available after the secure connection has been
negotiated.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Grant Peel
Hi all,

As mentioned in previous emails, I am trying to deny access via SetEnvIf 
statements in my httpd.conf (to block smap bots / email harvesters etc.

I have two questions:

1. My server has several hundred VirtualHost directives. When the SetEnvIf 
statements are just placed in the main server config, will the block those 
referrers from the VirtualHosts as well?

2. How can I set logging to see if SetEnvIf statements are doing what I 
intended them to do?

-Grant

Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Joshua Slive
On Sun, Mar 30, 2008 at 12:15 PM, Grant Peel [EMAIL PROTECTED] wrote:


 Hi all,

 As mentioned in previous emails, I am trying to deny access via SetEnvIf
 statements in my httpd.conf (to block smap bots / email harvesters etc.

 I have two questions:

 1. My server has several hundred VirtualHost directives. When the SetEnvIf
 statements are just placed in the main server config, will the block those
 referrers from the VirtualHosts as well?

Yes, if placed in a Directory or Location section that is not
overridden inside the VirtualHosts. See:
http://httpd.apache.org/docs/2.2/sections.html#mergin


 2. How can I set logging to see if SetEnvIf statements are doing what I
 intended them to do?

For your access log, use a log format that reports the user agent
(such as the combined log format). Then you can just make sure the
response code is 403 for the appropriate user agents.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Grant Peel

Thanks Joshua,

So, If I am reading that docs correctly, the bit I have to deny certain USer 
Agents should go near the top of my httpd.conf?


SetEnvIfNoCase User-Agent ^IDBot block_bad_bots
SetEnvIfNoCase User-Agent ^$ block_bad_bots
SetEnvIfNoCase User-Agent Java/1.4.1_04 block_bad_bots

Directory /
 Order Allow,Deny
 Allow from all
 Deny from env=block_bad_bots
/Directory

-Grant

- Original Message - 
From: Joshua Slive [EMAIL PROTECTED]

To: users@httpd.apache.org; Grant Peel [EMAIL PROTECTED]
Sent: Sunday, March 30, 2008 12:53 PM
Subject: Re: [EMAIL PROTECTED] Logging Denied Referrers



On Sun, Mar 30, 2008 at 12:15 PM, Grant Peel [EMAIL PROTECTED] wrote:



Hi all,

As mentioned in previous emails, I am trying to deny access via SetEnvIf
statements in my httpd.conf (to block smap bots / email harvesters etc.

I have two questions:

1. My server has several hundred VirtualHost directives. When the 
SetEnvIf
statements are just placed in the main server config, will the block 
those

referrers from the VirtualHosts as well?


Yes, if placed in a Directory or Location section that is not
overridden inside the VirtualHosts. See:
http://httpd.apache.org/docs/2.2/sections.html#mergin



2. How can I set logging to see if SetEnvIf statements are doing what I
intended them to do?


For your access log, use a log format that reports the user agent
(such as the combined log format). Then you can just make sure the
response code is 403 for the appropriate user agents.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Joshua Slive
On Sun, Mar 30, 2008 at 3:32 PM, Grant Peel [EMAIL PROTECTED] wrote:
 Thanks Joshua,

  So, If I am reading that docs correctly, the bit I have to deny certain USer
  Agents should go near the top of my httpd.conf?

  SetEnvIfNoCase User-Agent ^IDBot block_bad_bots
  SetEnvIfNoCase User-Agent ^$ block_bad_bots
  SetEnvIfNoCase User-Agent Java/1.4.1_04 block_bad_bots

  Directory /
   Order Allow,Deny
   Allow from all
   Deny from env=block_bad_bots
  /Directory

It doesn't matter where in httpd.conf that it goes. But this will only
work if you have NO OTHER Order/Allow/Deny statements in httpd.conf.
Since Directory / is essentially the first thing evaluated
(regardless of its location) it will get overridden by any other
access control directives. This isn't a problem unless you have some
generic
Directory /var/web
Order Allow,Deny
Allow from all
/Directory
sections which will turn off your anti-robot rules.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Logging Denied Referrers

2008-03-30 Thread Grant Peel

Joshua,

So, cand these be combined into one container somehow?

Directory /
 Order Allow,Deny
 Allow from all
 Deny from env=block_bad_bots
/Directory

Directory /home/*/www
   Options Indexes Includes FollowSymLinks
   # FollowSymLinks MultiViews
   AllowOverride Options All
   Order allow,deny
   Allow from all
/Directory

-Grant


- Original Message - 
From: Joshua Slive [EMAIL PROTECTED]

To: users@httpd.apache.org; Grant Peel [EMAIL PROTECTED]
Sent: Sunday, March 30, 2008 5:43 PM
Subject: Re: [EMAIL PROTECTED] Logging Denied Referrers



On Sun, Mar 30, 2008 at 3:32 PM, Grant Peel [EMAIL PROTECTED] wrote:

Thanks Joshua,

 So, If I am reading that docs correctly, the bit I have to deny certain 
USer

 Agents should go near the top of my httpd.conf?

 SetEnvIfNoCase User-Agent ^IDBot block_bad_bots
 SetEnvIfNoCase User-Agent ^$ block_bad_bots
 SetEnvIfNoCase User-Agent Java/1.4.1_04 block_bad_bots

 Directory /
  Order Allow,Deny
  Allow from all
  Deny from env=block_bad_bots
 /Directory


It doesn't matter where in httpd.conf that it goes. But this will only
work if you have NO OTHER Order/Allow/Deny statements in httpd.conf.
Since Directory / is essentially the first thing evaluated
(regardless of its location) it will get overridden by any other
access control directives. This isn't a problem unless you have some
generic
Directory /var/web
Order Allow,Deny
Allow from all
/Directory
sections which will turn off your anti-robot rules.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]