Re: [us...@httpd] Multi-level virtualhost inherit
I want to stay on a universal Apache config. Now I know it's impossible without enabling a specific module. I'll deal with this restriction anyway. Thank you Jorge. Le 05/12/2010 14:11, Jorge Schrauwen a écrit : You may want to look at mod_macro, or mod_perl if you want really complex setups. ~Jorge On Sun, Dec 5, 2010 at 12:28 PM, Nicolas Froidure froidure_nico...@yahoo.fr wrote: Hello! Are there a way to make mutlti-level virtualhosts ? I've many virtualhosts on my httpd.conf file. There are 3 classes of virtual hosts (static content, dynamic content with rewrite rules, others). I would like to be able to define more than one base virtualhost for reuse them in my other virtualhosts. Is it possible ? Thank you. --- nfroidure - The official User-To-User support forum of the Apache HTTP Server Project. SeeURL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Cordialement, Nicolas Froidure, gérant, Elitwork SARL. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Multi-level virtualhost inherit
You can also do what you want outside of Apache HTTP Server: write a script that generates httpd.conf from one or more input files, and run this script (manually or automatically) before starting httpd. You can use M4, CPP, Perl, or many other tools to generate the configuration file, depending on your needs. This way you do not need to load any special module; but you should pick a tool that other people will also have who want to use your configuration. -- Mark Montague m...@catseye.org On December 6, 2010 3:37 , FROIDURE Nicolas froidure_nico...@yahoo.fr wrote: I want to stay on a universal Apache config. Now I know it's impossible without enabling a specific module. I'll deal with this restriction anyway. Thank you Jorge. Le 05/12/2010 14:11, Jorge Schrauwen a écrit : You may want to look at mod_macro, or mod_perl if you want really complex setups. ~Jorge On Sun, Dec 5, 2010 at 12:28 PM, Nicolas Froidure froidure_nico...@yahoo.fr wrote: Hello! Are there a way to make mutlti-level virtualhosts ? I've many virtualhosts on my httpd.conf file. There are 3 classes of virtual hosts (static content, dynamic content with rewrite rules, others). I would like to be able to define more than one base virtualhost for reuse them in my other virtualhosts. Is it possible ? Thank you. --- nfroidure - The official User-To-User support forum of the Apache HTTP Server Project. SeeURL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Multi-level virtualhost inherit
Hi, Thanks for the tip. It seems to be a better solution for me : In Debian it seems that each virtualhosts are confined on a single file and included with the Include directive (with a path having a wildcard) on the main configuration file. In my first dedicated server, each virtualhost were directly included in the main configuration files. Do you think that the difference in terms of performances at startup or whatever is important ? Thanks. Le 06/12/2010 09:43, Mark Montague a écrit : You can also do what you want outside of Apache HTTP Server: write a script that generates httpd.conf from one or more input files, and run this script (manually or automatically) before starting httpd. You can use M4, CPP, Perl, or many other tools to generate the configuration file, depending on your needs. This way you do not need to load any special module; but you should pick a tool that other people will also have who want to use your configuration. -- Mark Montague m...@catseye.org On December 6, 2010 3:37 , FROIDURE Nicolas froidure_nico...@yahoo.fr wrote: I want to stay on a universal Apache config. Now I know it's impossible without enabling a specific module. I'll deal with this restriction anyway. Thank you Jorge. Le 05/12/2010 14:11, Jorge Schrauwen a écrit : You may want to look at mod_macro, or mod_perl if you want really complex setups. ~Jorge On Sun, Dec 5, 2010 at 12:28 PM, Nicolas Froidure froidure_nico...@yahoo.fr wrote: Hello! Are there a way to make mutlti-level virtualhosts ? I've many virtualhosts on my httpd.conf file. There are 3 classes of virtual hosts (static content, dynamic content with rewrite rules, others). I would like to be able to define more than one base virtualhost for reuse them in my other virtualhosts. Is it possible ? Thank you. --- nfroidure - The official User-To-User support forum of the Apache HTTP Server Project. SeeURL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Cordialement, Nicolas Froidure, gérant, Elitwork SARL. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] How can I Serve all pages with frameset?
Hello. I don't know if this is the right place to ask about this issue, if is not then, please apologize. I have a small WISP in my town and I would like to offer free internet service at coffee shops, restaurant, and other public places but, this free service will have its limitations: All pages would have an advertisement or promotion on top just like NetZero used to do in the past. I think this is done with frameset but, don't know how to force this for all the pages. I would like to do this with php/mysql and if the user tries to remove the frame then maybe redirect them to pay per hour/day etc service. I have a linux gateway that runs squid and would like certain ip addresses (free ones) to view pages with this promo on top or even have pop ups from time to time whichever is easier. Maybe this can be done on apache server. Can this be done? If so, can you please provide any suggestions? Thanks in advanced for your help. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] HTTP header fields
Recently I had a note from a user of the apache site on my server that said in part, the title bar in my browser shows the software package, O/S and version you run on your server. Have you thought about changing that? Well, I hadn't, but it seems as if from a security point of view it might not be a bad idea. Is there any history or discussion on that? or perhaps a reference I can read up on? Dave - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] HTTP header fields
On Mon, Dec 6, 2010 at 1:42 PM, Dave Stevens g...@uniserve.com wrote: Recently I had a note from a user of the apache site on my server that said in part, the title bar in my browser shows the software package, O/S and version you run on your server. Have you thought about changing that? Well, I hadn't, but it seems as if from a security point of view it might not be a bad idea. Is there any history or discussion on that? or perhaps a reference I can read up on? http://httpd.apache.org/docs/current/mod/core.html#servertokens There hasn't been much discussion that the info should be hidden by default. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] HTTP header fields
Eric Covener wrote: On Mon, Dec 6, 2010 at 1:42 PM, Dave Stevens g...@uniserve.com wrote: Well, I hadn't, but it seems as if from a security point of view it might not be a bad idea. Is there any history or discussion on that? or perhaps a reference I can read up on? http://httpd.apache.org/docs/current/mod/core.html#servertokens There hasn't been much discussion that the info should be hidden by default. Well, under the theory that letting a hacker know anything about the platform they may be trying to infiltrate gives them useful information they could abuse, I usually run my servers with ServerTokens Prod. I really wish there was a ServerTokens Custom (let me specify the string I want to return in the ServerSignature) or ServerTokens Stealth (don't supply any information in the ServerSignature). Personally, I run my Firefox browsers with the ServerSpy addon -- so I always can see what the ServerSignature reads coming from the server. Usually I use that as a clue when the server I'm visiting does something I consider to be lame -- Oh, that's the stupid server they're running, no wonder they have problems. But somebody with more malicious intent could interpret and abuse based on what they see. -- J.Lance Wilkinson (Lance) InterNet: lance.wilkin...@psu.edu Systems Design Specialist - LeadPhone: (814) 865-4870 Digital Library TechnologiesFAX: (814) 863-3560 E3 Paterno Library Penn State University University Park, PA 16802 - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] HTTP header fields
But somebody with more malicious intent could interpret and abuse based on what they see. Perhaps, but my web server logs shows a very large number of hits attacking vulnerabilities across multiple OS and web server types which have no bearing on the server I am running. The fact is they do not care what you are running, they will just hit you with every attack they can find for every web server known and hope for a hit. I'm sure a hacker wanting in will not look at a server signature and say Oh, apache on Linux, guess I won't even bother trying this IIS on Windows hack. -- Jeffrey Burgoyne Chief Technology Officer KCSI Keenuh Consulting Services Inc www.keenuh.com burgo...@keenuh.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] HTTP header fields
On Mon, Dec 6, 2010 at 1:56 PM, J.Lance Wilkinson jl...@psulias.psu.edu wrote: Eric Covener wrote: On Mon, Dec 6, 2010 at 1:42 PM, Dave Stevens g...@uniserve.com wrote: Well, I hadn't, but it seems as if from a security point of view it might not be a bad idea. Is there any history or discussion on that? or perhaps a reference I can read up on? http://httpd.apache.org/docs/current/mod/core.html#servertokens There hasn't been much discussion that the info should be hidden by default. Well, under the theory that letting a hacker know anything about the platform they may be trying to infiltrate gives them useful information Sorry, I meant discussion beyond this obvious implication of the default value. -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] PHP Issue...
- Marcin 'Rambo' Roguski ra...@id.uw.edu.pl wrote: Anyway the real question is: Is there a way to have short tags turned on for one web site and turned off for another? Yes, either by php_admin_flag short_open_tags on in vhost. Or in a directory of that vhost, should it be only valid for a certain part of the application. i - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Filters not applied with ErrorDocument pages?
- Dennis Jacobfeuerborn denni...@conversis.de wrote: I just noticed that when I use ErrorDocument to server custom 404 pages the output filter I defined is not getting used anymore. Is there some special configuration required to make the filters also work on custom error pages? I've noticed that myself. But I think it's actually quite good it doesn't. Most HTTP clients have a hard time dealing with HTTP as is. Confusing them with Transfer-Encoding and similar things, while confusing them with Errors -- that just might be too much. Now, this is my experience (and speculation) using mod_filter+mod_deflate. What's your use-case? What's your config? And why do you think you need filters applied on Errors as well? Finally, if someone of the Devs is spying, can you explain the reason behind this reasoning? Regards, Dennis i - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Multi-level virtualhost inherit
- FROIDURE Nicolas froidure_nico...@yahoo.fr wrote: Hi, Thanks for the tip. It seems to be a better solution for me : In Debian it seems that each virtualhosts are confined on a single file and included with the Include directive (with a path having a wildcard) on the main configuration file. That's just the way Debian does it. And many folks aren't quite happy with that solution. You see, your run-of-the-mill vhost looks like VirtualHost *:80 ServerName some.example.com DocumentRoot /srv/web/some.example.com/htdocs /VirtualHost Putting that in one file? Does it make sense? I don't know.. Lets see how this works out with mod_macro: Macro STDVHost $sname VirtualHost *:80 ServerName sname DocumentRoot /srv/web/sname/htdocs /VirtualHost /Macro And then you have one line you can put in a file: Use STDVhost some.example.com In my first dedicated server, each virtualhost were directly included in the main configuration files. Do you think that the difference in terms of performances at startup or whatever is important ? How many vhosts are we talking about? 10k? 150k? 480M? If it's below 10k or even 1k, it shouldn't really matter. Thanks. i -- Igor Galić Tel: +43 (0) 664 886 22 883 Mail: i.ga...@brainsware.org URL: http://brainsware.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Filters not applied with ErrorDocument pages?
On 12/06/2010 08:40 PM, Igor Galić wrote: - Dennis Jacobfeuerborndenni...@conversis.de wrote: I just noticed that when I use ErrorDocument to server custom 404 pages the output filter I defined is not getting used anymore. Is there some special configuration required to make the filters also work on custom error pages? I've noticed that myself. But I think it's actually quite good it doesn't. Most HTTP clients have a hard time dealing with HTTP as is. Confusing them with Transfer-Encoding and similar things, while confusing them with Errors -- that just might be too much. If the filter mangles the output so that the client is unable to deal with the response that's arguably a problem with the filter. A custom 404 page is just that a standard html page with a 404 status code and I would expect that since I configured my filter for the vhost that all delivered pages are run through that filter. The fact that this isn't true for ErrorDocument should at least be documented. Perhaps a flag would be nice to be able to turn that behavior on and off on demand. Now, this is my experience (and speculation) using mod_filter+mod_deflate. What's your use-case? What's your config? And why do you think you need filters applied on Errors as well? Because the error pages are supposed to look like all other pages. The filter trivially adds a header and footer to every page and the error pages are supposed to show these as well. One possibility would be to hard-code both directly into the error documents but that's just a hack and I would have to resort to a copypaste every time the header needs to be changed. A more flexible approach would have been to filter all pages and add the ability to not only match the filters according to headers but also to status codes. That way you could run ErrorDocuments through filters or you could just apply them to pages with a 200 status code. Finally, if someone of the Devs is spying, can you explain the reason behind this reasoning? Maybe there is a way to get ErrorDocuments filtered too but it's not documented? Any help would be appreciated. Regards, Dennis - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Filters not applied with ErrorDocument pages?
Maybe there is a way to get ErrorDocuments filtered too but it's not documented? Any help would be appreciated. I can fix that at least ;) But yeah, I'm still waiting for an official answer (haven't had time to look into the code myself yet) from a developer. Regards, Dennis i -- Igor Galić Tel: +43 (0) 664 886 22 883 Mail: i.ga...@brainsware.org URL: http://brainsware.org/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Apache reverse proxy - intermittent problem loading Javascript
Hello, We have setup an Apache reverse proxy in front of our Jboss server. We are experiencing an intermittent issue in the web application where a Javascript file does not fully load and other times it does. We can see that when the file is requested the number of bytes transferred is reduced when the problem occurs. In the httpd.conf file we have the following: BrowserMatch Mozilla/2 nokeepalive BrowserMatch ^Mozilla/4 gzip-only-text/html BrowserMatch ^Mozilla/4\.0[678] no-gzip #BrowserMatch MSIE 4\.0b2; nokeepalive downgrade-1.0 force-response-1.0 BrowserMatch \bMSIE !no-gzip !gzip-only-text/html BrowserMatch RealPlayer 4\.0 force-response-1.0 BrowserMatch Java/1\.0 force-response-1.0 BrowserMatch JDK/1\.0 force-response-1.0 # # The following directive disables redirects on non-GET requests for # a directory that does not include the trailing slash. This fixes a # problem with Microsoft WebFolders which does not appropriately handle # redirects for folders with DAV methods. # Same deal with Apple's DAV filesystem and Gnome VFS support for DAV. # BrowserMatch Microsoft Data Access Internet Publishing Provider redirect-carefully BrowserMatch MS FrontPage redirect-carefully BrowserMatch ^WebDrive redirect-carefully BrowserMatch ^WebDAVFS/1.[0123] redirect-carefully BrowserMatch ^gnome-vfs/1.0 redirect-carefully BrowserMatch ^XML Spy redirect-carefully BrowserMatch ^Dreamweaver-WebDAV-SCM1 redirect-carefully Platform: CentOS for both the proxy and JBoss. Has anyone encountered this issue? Any directions is much appreciated. Thanks, Richard - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache reverse proxy - intermittent problem loading Javascript
On Mon, Dec 06, 2010 at 01:36:44PM -0800, Richard Dedeyan wrote: Hello, We have setup an Apache reverse proxy in front of our Jboss server. We are experiencing an intermittent issue in the web application where a Javascript file does not fully load and other times it does. We can see that when the file is requested the number of bytes transferred is reduced when the problem occurs. In the httpd.conf file we have the following: BrowserMatch Mozilla/2 nokeepalive BrowserMatch ^Mozilla/4 gzip-only-text/html BrowserMatch ^Mozilla/4\.0[678] no-gzip #BrowserMatch MSIE 4\.0b2; nokeepalive downgrade-1.0 force-response-1.0 BrowserMatch \bMSIE !no-gzip !gzip-only-text/html BrowserMatch RealPlayer 4\.0 force-response-1.0 BrowserMatch Java/1\.0 force-response-1.0 BrowserMatch JDK/1\.0 force-response-1.0 # # The following directive disables redirects on non-GET requests for # a directory that does not include the trailing slash. This fixes a # problem with Microsoft WebFolders which does not appropriately handle # redirects for folders with DAV methods. # Same deal with Apple's DAV filesystem and Gnome VFS support for DAV. # BrowserMatch Microsoft Data Access Internet Publishing Provider redirect-carefully BrowserMatch MS FrontPage redirect-carefully BrowserMatch ^WebDrive redirect-carefully BrowserMatch ^WebDAVFS/1.[0123] redirect-carefully BrowserMatch ^gnome-vfs/1.0 redirect-carefully BrowserMatch ^XML Spy redirect-carefully BrowserMatch ^Dreamweaver-WebDAV-SCM1 redirect-carefully Platform: CentOS for both the proxy and JBoss. Has anyone encountered this issue? Any directions is much appreciated. Thanks, Richard What about your actualy ProxyPass directives and other associated options? Do only certain browsers trigger the problem (trying to figure out why you shared the above)? Are you running mod_security or some other Layer 7 security tool? Is the issue reproducible enough that you'd be able to capture a pcap dump of a broken request? Has the problem always existed? If not, when did it start? Ray - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache reverse proxy - intermittent problem loading Javascript
What about your actualy ProxyPass directives and other associated options? Ans: Just regular configurations... all of them like this: ProxyPass /path https://server.internal.net/path Do only certain browsers trigger the problem (trying to figure out why you shared the above)? Ans: No, all of them do. Are you running mod_security or some other Layer 7 security tool? Ans: No Is the issue reproducible enough that you'd be able to capture a pcap dump of a broken request? Ans: Yes, we got a pcap but it's SSL on both directions (from Internet to proxy and from proxy to internal server.) Has the problem always existed? If not, when did it start? Ans: This is the first time we are trying it in our test environment. Thanks again for your help. Sincerely, Richard - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org