Re: [us...@httpd] Apache Sending Email?
> I know. Have any ideas why the email address is apa...@xxx.xxx? Apache exploit? Just trying to understand. It's Apache. I'm guessing your web server runs as "apache" so that's why it's sending email as "apache." It doesn't mean Apache is compromised, but it may mean you have a publicly writable directory that has a script. The best thing for you to do is look at the email header and see what script generated the email. It may tell you. osCommerce, Wordpress, Drupal, etc. all have built in email scripts that sometimes get hijacked. Or, someone can upload a file if you have a world writable directory that also executes scripts. You may want to configure all directories that are writeable so folks can upload files as no-exec directories in your Apache config. Jason A. Nunnelley +1 2562971652 http://www.google.com/profiles/imjasonn [Member Tekany, LLC] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Internet Explorer 6
Many in China.especially in the cyber-cafe and the home user Best regards, Sharl.Jimh.Tsin 2010/5/11 Jason Nunnelley : > On 5/11/10 8:13 AM, Lester Caine wrote: >> >> Malka Cymbalista wrote: >>> >>> Does anyone have any statistics as to how many people still use Internet >>> Explorer 6? We are trying to decide whether we can stop supporting it. >> >> The remaining problem is that W2k is still widely used, and so IE6 is the >> only browsers available to those users. Perhaps it is time to convince those >> councils that can't afford to replace hardware that Firefox IS a more >> popular browser and more secure :) >> > Is Firefox compatible with a machine running Win2k? I'm not sure how > practical that really is, if you're trying to get anything productive done > online. Firefox is quite heavy on its own and you'd have to tweak your > add-ons quite a bit to limit resource usage. > > Maybe we just have to realize that the PDLC of internet applications is > quite a bit smaller than 10 years. > > -- > > Jason A. Nunnelley > +1 2562971652 > > http://www.google.com/profiles/imjasonn > > [Member Tekany, LLC] > > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache Sending Email?
Sent from my iPhone On May 11, 2010, at 8:51 PM, Frank Gingras wrote: On 05/11/2010 08:11 PM, Chris Arnold wrote: Not sure if this belongs in this mailing list or not but we keep seeing: E716037FFD7B 602 Thu May 6 15:53:52 apa...@dweb57.zenutech.com (connect to kamelot-clan.com[174.120.120.151]: Connection refused) nywdqwzl...@kamelot-clan.com In our email log. Clearly spam email but why apa...@dweb57.zenutech.com ? Apache/2.2.9 (Unix) Any ideas? Chris, Apache httpd doesn't send emails. php does. Ask the php mailing list. Frank I know. Have any ideas why the email address is apa...@xxx.xxx? Apache exploit? Just trying to understand. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache Sending Email?
On 05/11/2010 08:11 PM, Chris Arnold wrote: Not sure if this belongs in this mailing list or not but we keep seeing: E716037FFD7B 602 Thu May 6 15:53:52 apa...@dweb57.zenutech.com (connect to kamelot-clan.com[174.120.120.151]: Connection refused) nywdqwzl...@kamelot-clan.com In our email log. Clearly spam email but why apa...@dweb57.zenutech.com? Apache/2.2.9 (Unix) Any ideas? Chris, Apache httpd doesn't send emails. php does. Ask the php mailing list. Frank - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Apache Sending Email?
Not sure if this belongs in this mailing list or not but we keep seeing: E716037FFD7B 602 Thu May 6 15:53:52 apa...@dweb57.zenutech.com (connect to kamelot-clan.com[174.120.120.151]: Connection refused) nywdqwzl...@kamelot-clan.com In our email log. Clearly spam email but why apa...@dweb57.zenutech.com? Apache/2.2.9 (Unix) Any ideas?
[us...@httpd] Can I do Rewrite based on who a user was authorized?
I would like to set up a rewrite based on how an authenticated user met the requirements of my 'Requires' directives. Here's what I have so far: -- AuthName "site" AuthType Basic AuthBasicProvider ldap AuthLDAPBindDN x...@xxx.org AuthLDAPBindPassword xxx AuthLDAPUrl ldap://ldap:3268/?sAMAccountName?sub AuthzLDAPAuthoritative off Require ldap-group cn=Charts,ou=Groups,dc=xxx,dc=org Require valid-user -- What I'd like to do is append a query string to the URL depending on which Requires directive authorized the user. Thanks. -- LeVon Smoker - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Trusting another server's certificate
I successfully setup Apache Web Server, mod_ssl and mod_jk so that Apache acts as the load balancer for a cluster of Tomcat(based) servers - using self-signed certificates. This means that I created Apache's certificates with openssl and Tomcat's with Java's keytool. Two of my applications communicate with each other via HTTPS, and the servers must trust each other. For the Tomcat server to trust the Apache server all I need to do is import the Apache certificate into the keystore (and/or cacerts). How do I make Apache trust the Tomcat server so that app-to-app HTTPS calls work? Or do I even need to? Thanks - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Internet Explorer 6
On 5/11/10 8:13 AM, Lester Caine wrote: Malka Cymbalista wrote: Does anyone have any statistics as to how many people still use Internet Explorer 6? We are trying to decide whether we can stop supporting it. The remaining problem is that W2k is still widely used, and so IE6 is the only browsers available to those users. Perhaps it is time to convince those councils that can't afford to replace hardware that Firefox IS a more popular browser and more secure :) Is Firefox compatible with a machine running Win2k? I'm not sure how practical that really is, if you're trying to get anything productive done online. Firefox is quite heavy on its own and you'd have to tweak your add-ons quite a bit to limit resource usage. Maybe we just have to realize that the PDLC of internet applications is quite a bit smaller than 10 years. -- Jason A. Nunnelley +1 2562971652 http://www.google.com/profiles/imjasonn [Member Tekany, LLC] - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Internet Explorer 6
Malka Cymbalista wrote: Does anyone have any statistics as to how many people still use Internet Explorer 6? We are trying to decide whether we can stop supporting it. The remaining problem is that W2k is still widely used, and so IE6 is the only browsers available to those users. Perhaps it is time to convince those councils that can't afford to replace hardware that Firefox IS a more popular browser and more secure :) -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http://enquirysolve.com/ Model Engineers Digital Workshop - http://medw.co.uk// Firebird - http://www.firebirdsql.org/index.php - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
RE: [us...@httpd] Internet Explorer 6
Your user base will probably best determine what browser is most commonly used and in what percent's (poll your logs if possible) but here's some general numbers I found: Microsoft Internet Explorer Roughly 62% use IE-based browsers, with the percentage dropping slowly as users switch to alternate browsers. About 26% use IE8, 14% IE7, and 21% IE6, with the IE6 and IE7 percentages dropping as users upgrade to IE8 or switch to alternate browsers: IE7 users are more willing to update than IE6 users. Some still use IE5, with the number shrinking slowly as users upgrade or switch, and with the numbers likely to shrink more quickly in mid-2010 when support for IE5 ends. Browsers older than IE5 may generally be considered extinct. Ref: http://www.upsdell.com/BrowserNews/stat_trends.htm From: Malka Cymbalista [mailto:malki.cymbali...@weizmann.ac.il] Sent: Tuesday, May 11, 2010 8:32 AM To: users@httpd.apache.org Subject: [us...@httpd] Internet Explorer 6 Does anyone have any statistics as to how many people still use Internet Explorer 6? We are trying to decide whether we can stop supporting it. Thanks for any information Malka Cymbalista Webmaster, Weizmann Institute of Science malki.cymbali...@weizmann.ac.il 08-934-3036
Re: [us...@httpd] Internet Explorer 6
On Tue, May 11, 2010 at 8:31 AM, Malka Cymbalista wrote: > Does anyone have any statistics as to how many people still use Internet > Explorer 6? We are trying to decide whether we can stop supporting it. > Thanks for any information It's best to start logging user-agents on your own systems and collect your specific stats. -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Internet Explorer 6
W3C Schools publishes a data sheet. I assume it's based on good collection. http://www.w3schools.com/browsers/browsers_stats.asp On 5/11/10 7:31 AM, Malka Cymbalista wrote: Does anyone have any statistics as to how many people still use Internet Explorer 6? We are trying to decide whether we can stop supporting it. Thanks for any information -- Jason A. Nunnelley +1 2562971652 http://www.google.com/profiles/imjasonn [Member Tekany, LLC]
[us...@httpd] Internet Explorer 6
Does anyone have any statistics as to how many people still use Internet Explorer 6? We are trying to decide whether we can stop supporting it. Thanks for any information Malka Cymbalista Webmaster, Weizmann Institute of Science malki.cymbali...@weizmann.ac.il 08-934-3036
[us...@httpd] Apache strange(?) DNS problem
Hi. I've got working configuration with Apache 2.0.46 on RHEL3 described below. Apache is configured as forwarding proxy and has no other unusual config. proxy.conf: Listen 172.x.x.x:8080 ServerName proxy.localdomain ProxyRequests On ProxyVia On ... For administrative reasons some sites that are accessed via proxy are not addressed by their FQDN - there are /etc/hosts entries instead. In /etc/nsswitch.conf there's hosts: files dns So when client requests www.somesite.com (that has /etc/hosts entry), proxy retrieves the data. Apache resolves name by using hosts file an not DNS. Problem: I have exactly the same configuration (Apache proxy, nsswitch, hosts, resolv.conf) with Apache 2.0.63 (or 2.2.3) on CentOS 5.4 but result is quite different. Apache seems to ignore nsswitch.conf (and consequently hosts file) when proxying! When client requests www.somesite.com (that has /etc/hosts entry), Apache always tries to resolve it using DNS and (of course) returns error "DNS lookup failure for: www.somesite.com " I tested resolver configuration by pinging www.somesite.com and confirmed address is resolved and working. Is this expected behavior? Is there any way to force Apache to use settings in nsswitch.conf? Thanks. Matija - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] URL is replaced with IP address
On Tue, May 11, 2010 at 9:35 AM, Tapas Mishra wrote: > I am having a weird situation.If some one points to my domain www.mydomain.com > then he does get redirected to the right server but instead of URL it > shows the IP address. > What should I search for or look for. Start here: http://catb.org/~esr/faqs/smart-questions.html Krist -- krist.vanbes...@gmail.com kr...@vanbesien.org Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] URL is replaced with IP address
I am having a weird situation.If some one points to my domain www.mydomain.com then he does get redirected to the right server but instead of URL it shows the IP address. What should I search for or look for. -- Tapas - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org