Re: [us...@httpd] Apache Sending Email?

2010-05-11 Thread Jason Nunnelley
> I know. Have any ideas why the email address is apa...@xxx.xxx? 
Apache exploit? Just trying to understand.


It's Apache. I'm guessing your web server runs as "apache" so that's why 
it's sending email as "apache." It doesn't mean Apache is compromised, 
but it may mean you have a publicly writable directory that has a 
script. The best thing for you to do is look at the email header and see 
what script generated the email. It may tell you. osCommerce, Wordpress, 
Drupal, etc. all have built in email scripts that sometimes get 
hijacked. Or, someone can upload a file if you have a world writable 
directory that also executes scripts.


You may want to configure all directories that are writeable so folks 
can upload files as no-exec directories in your Apache config.


Jason A. Nunnelley
+1 2562971652

http://www.google.com/profiles/imjasonn

[Member Tekany, LLC]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Internet Explorer 6

2010-05-11 Thread Sharl.Jimh.Tsin
Many in China.especially in the cyber-cafe and the home user

Best regards,
Sharl.Jimh.Tsin



2010/5/11 Jason Nunnelley :
> On 5/11/10 8:13 AM, Lester Caine wrote:
>>
>> Malka Cymbalista wrote:
>>>
>>> Does anyone have any statistics as to how many people still use Internet
>>> Explorer 6? We are trying to decide whether we can stop supporting it.
>>
>> The remaining problem is that W2k is still widely used, and so IE6 is the
>> only browsers available to those users. Perhaps it is time to convince those
>> councils that can't afford to replace hardware that Firefox IS a more
>> popular browser and more secure :)
>>
> Is Firefox compatible with a machine running Win2k? I'm not sure how
> practical that really is, if you're trying to get anything productive done
> online. Firefox is quite heavy on its own and you'd have to tweak your
> add-ons quite a bit to limit resource usage.
>
> Maybe we just have to realize that the PDLC of internet applications is
> quite a bit smaller than 10 years.
>
> --
>
> Jason A. Nunnelley
> +1 2562971652
>
> http://www.google.com/profiles/imjasonn
>
> [Member Tekany, LLC]
>
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>  "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Apache Sending Email?

2010-05-11 Thread Chris Arnold



Sent from my iPhone

On May 11, 2010, at 8:51 PM, Frank Gingras  
 wrote:





On 05/11/2010 08:11 PM, Chris Arnold wrote:
Not sure if this belongs in this mailing list or not but we keep  
seeing:


E716037FFD7B 602 Thu May 6 15:53:52 apa...@dweb57.zenutech.com
(connect to kamelot-clan.com[174.120.120.151]: Connection refused)
nywdqwzl...@kamelot-clan.com

In our email log. Clearly spam email but why apa...@dweb57.zenutech.com 
?

Apache/2.2.9 (Unix)
Any ideas?


Chris,

Apache httpd doesn't send emails. php does. Ask the php mailing list.

Frank
I know. Have any ideas why the email address is apa...@xxx.xxx? Apache  
exploit? Just trying to understand.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Apache Sending Email?

2010-05-11 Thread Frank Gingras



On 05/11/2010 08:11 PM, Chris Arnold wrote:

Not sure if this belongs in this mailing list or not but we keep seeing:

E716037FFD7B 602 Thu May 6 15:53:52 apa...@dweb57.zenutech.com
(connect to kamelot-clan.com[174.120.120.151]: Connection refused)
nywdqwzl...@kamelot-clan.com

In our email log. Clearly spam email but why apa...@dweb57.zenutech.com?
Apache/2.2.9 (Unix)
Any ideas?


Chris,

Apache httpd doesn't send emails. php does. Ask the php mailing list.

Frank

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Apache Sending Email?

2010-05-11 Thread Chris Arnold
Not sure if this belongs in this mailing list or not but we keep seeing:

E716037FFD7B  602 Thu May  6 15:53:52  apa...@dweb57.zenutech.com
(connect to kamelot-clan.com[174.120.120.151]: Connection
refused)
 nywdqwzl...@kamelot-clan.com

In our email log. Clearly spam email but why apa...@dweb57.zenutech.com?
Apache/2.2.9 (Unix)
Any ideas?


[us...@httpd] Can I do Rewrite based on who a user was authorized?

2010-05-11 Thread LeVon Smoker
I would like to set up a rewrite based on how an authenticated user met
the requirements of my 'Requires' directives.

Here's what I have so far:
--


  AuthName "site"
  AuthType Basic
  AuthBasicProvider ldap
  AuthLDAPBindDN x...@xxx.org
  AuthLDAPBindPassword xxx
  AuthLDAPUrl ldap://ldap:3268/?sAMAccountName?sub
  AuthzLDAPAuthoritative off
  Require ldap-group cn=Charts,ou=Groups,dc=xxx,dc=org
  Require valid-user


--

What I'd like to do is append a query string to the URL depending on
which Requires directive authorized the user.

Thanks.
-- 
LeVon Smoker

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Trusting another server's certificate

2010-05-11 Thread Bruno Melloni
I successfully setup Apache Web Server, mod_ssl and mod_jk so that Apache acts 
as the load balancer for a cluster of Tomcat(based) servers - using self-signed 
certificates.  This means that I created Apache's certificates with openssl and 
Tomcat's with Java's keytool.

Two of my applications communicate with each other via HTTPS, and the servers 
must trust each other.  For the Tomcat server to trust the Apache server all I 
need to do is import the Apache certificate into the keystore (and/or cacerts). 
 

How do I make Apache trust the Tomcat server so that app-to-app HTTPS calls 
work?  Or do I even need to?

Thanks

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Internet Explorer 6

2010-05-11 Thread Jason Nunnelley

On 5/11/10 8:13 AM, Lester Caine wrote:

Malka Cymbalista wrote:

Does anyone have any statistics as to how many people still use Internet
Explorer 6? We are trying to decide whether we can stop supporting it.


The remaining problem is that W2k is still widely used, and so IE6 is 
the only browsers available to those users. Perhaps it is time to 
convince those councils that can't afford to replace hardware that 
Firefox IS a more popular browser and more secure :)


Is Firefox compatible with a machine running Win2k? I'm not sure how 
practical that really is, if you're trying to get anything productive 
done online. Firefox is quite heavy on its own and you'd have to tweak 
your add-ons quite a bit to limit resource usage.


Maybe we just have to realize that the PDLC of internet applications is 
quite a bit smaller than 10 years.


--

Jason A. Nunnelley
+1 2562971652

http://www.google.com/profiles/imjasonn

[Member Tekany, LLC]


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Internet Explorer 6

2010-05-11 Thread Lester Caine

Malka Cymbalista wrote:

Does anyone have any statistics as to how many people still use Internet
Explorer 6? We are trying to decide whether we can stop supporting it.


The remaining problem is that W2k is still widely used, and so IE6 is the only 
browsers available to those users. Perhaps it is time to convince those councils 
that can't afford to replace hardware that Firefox IS a more popular browser and 
more secure :)


--
Lester Caine - G8HFL
-
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk//
Firebird - http://www.firebirdsql.org/index.php

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



RE: [us...@httpd] Internet Explorer 6

2010-05-11 Thread Voellinger, Sandy
Your user base will probably best determine what browser is most commonly used 
and in what percent's (poll your logs if possible)  but here's some general 
numbers I found:

Microsoft Internet Explorer
Roughly 62% use IE-based browsers, with the percentage dropping slowly as users 
switch to alternate browsers. About 26% use IE8, 14% IE7, and 21% IE6, with the 
IE6 and IE7 percentages dropping as users upgrade to IE8 or switch to alternate 
browsers: IE7 users are more willing to update than IE6 users. Some still use 
IE5, with the number shrinking slowly as users upgrade or switch, and with the 
numbers likely to shrink more quickly in mid-2010 when support for IE5 ends. 
Browsers older than IE5 may generally be considered extinct.
Ref: http://www.upsdell.com/BrowserNews/stat_trends.htm

From: Malka Cymbalista [mailto:malki.cymbali...@weizmann.ac.il]
Sent: Tuesday, May 11, 2010 8:32 AM
To: users@httpd.apache.org
Subject: [us...@httpd] Internet Explorer 6

Does anyone have any statistics as to how many people still use Internet 
Explorer 6?  We are trying to decide whether we can stop supporting it.
Thanks for any information

Malka Cymbalista
Webmaster, Weizmann Institute of Science
malki.cymbali...@weizmann.ac.il
08-934-3036


Re: [us...@httpd] Internet Explorer 6

2010-05-11 Thread Eric Covener
On Tue, May 11, 2010 at 8:31 AM, Malka Cymbalista
 wrote:
> Does anyone have any statistics as to how many people still use Internet
> Explorer 6?  We are trying to decide whether we can stop supporting it.
> Thanks for any information

It's best to start logging user-agents on your own systems and collect
your specific stats.

-- 
Eric Covener
cove...@gmail.com

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Internet Explorer 6

2010-05-11 Thread Jason Nunnelley

W3C Schools publishes a data sheet. I assume it's based on good collection.

http://www.w3schools.com/browsers/browsers_stats.asp

On 5/11/10 7:31 AM, Malka Cymbalista wrote:
Does anyone have any statistics as to how many people still use 
Internet Explorer 6? We are trying to decide whether we can stop 
supporting it.

Thanks for any information


--

Jason A. Nunnelley
+1 2562971652

http://www.google.com/profiles/imjasonn

[Member Tekany, LLC]



[us...@httpd] Internet Explorer 6

2010-05-11 Thread Malka Cymbalista
Does anyone have any statistics as to how many people still use Internet 
Explorer 6?  We are trying to decide whether we can stop supporting it.
Thanks for any information
 

Malka Cymbalista
Webmaster, Weizmann Institute of Science
malki.cymbali...@weizmann.ac.il 
08-934-3036



[us...@httpd] Apache strange(?) DNS problem

2010-05-11 Thread Matija Levec
Hi.
I've got working configuration with Apache 2.0.46 on RHEL3 described below.

Apache is configured as forwarding proxy and has no other unusual config. 

proxy.conf:
Listen 172.x.x.x:8080

ServerName proxy.localdomain
ProxyRequests On
ProxyVia On
...


For administrative reasons some sites that are accessed via proxy are not 
addressed by their FQDN - there are /etc/hosts entries instead. 
In /etc/nsswitch.conf there's hosts: files dns
So when client requests www.somesite.com (that has /etc/hosts entry), proxy 
retrieves the data. Apache resolves name by using hosts file an not DNS.

Problem:
I have exactly the same configuration (Apache proxy, nsswitch, hosts, 
resolv.conf) with Apache 2.0.63 (or 2.2.3) on CentOS 5.4 but result is quite 
different.
Apache seems to ignore nsswitch.conf (and consequently hosts file) when 
proxying!
When client  requests www.somesite.com (that has /etc/hosts entry), Apache 
always tries to resolve it using DNS and (of course) returns error "DNS lookup 
failure for:  www.somesite.com "
I tested resolver configuration by pinging www.somesite.com and confirmed 
address is resolved and working.

Is this expected behavior? Is there any way to force Apache to use settings in 
nsswitch.conf?

Thanks.
Matija


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] URL is replaced with IP address

2010-05-11 Thread Krist van Besien
On Tue, May 11, 2010 at 9:35 AM, Tapas Mishra  wrote:
> I am having a weird situation.If some one points to my domain www.mydomain.com
> then he does get redirected to the right server but instead of URL it
> shows the IP address.
> What should I search for or look for.

Start here:
http://catb.org/~esr/faqs/smart-questions.html

Krist


-- 
krist.vanbes...@gmail.com
kr...@vanbesien.org
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] URL is replaced with IP address

2010-05-11 Thread Tapas Mishra
I am having a weird situation.If some one points to my domain www.mydomain.com
then he does get redirected to the right server but instead of URL it
shows the IP address.
What should I search for or look for.

-- 
Tapas

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org