[EMAIL PROTECTED] DNS

2006-02-06 Thread info . raa

Greetings List!

Can anyone give me a hint about DNS?
Or tell where can i find documentation or the how to?

Thanks.

Kbl


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Virtual host

2006-02-02 Thread info . raa
Once more list, there is anybody there could help me? or tell me where can i find these answer?

Thanks.

Kbl

Begin forwarded message:

From: info.raa [EMAIL PROTECTED]>
Date: 01 de February de 2006 10:30:55 AM GMT-02:00
To: Apache List users@httpd.apache.org>
Subject: Virtual host

Hi guys!

I have no clue about BIND, so the easy way to start was relying on IP to rise my first site.
I have used my own ip/adpter, now i need to build another site within my apache 2.0.52 on the same machine.

i have tried another IP but the result you can imagine...

How do i do it?

Do i have to edit BIND? and use names instead? like  www.mysite1.com, www.mysite2.com and so on?

I'm on an OSX 10.3

I would really apreciate for the help.

Thanks,

Kbl



[EMAIL PROTECTED] Virtual host

2006-02-01 Thread info . raa

Hi guys!

I have no clue about BIND, so the easy way to start was relying on IP 
to rise my first site.
I have used my own ip/adpter, now i need to build another site within 
my apache 2.0.52 on the same machine.


i have tried another IP but the result you can imagine...

How do i do it?

Do i have to edit BIND? and use names instead? like  www.mysite1.com, 
www.mysite2.com and so on?


I'm on an OSX 10.3

I would really apreciate for the help.

Thanks,

Kbl


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] path

2006-01-25 Thread info . raa

Mr. Owen,

Hello.
I really thank you for your time writing this important point of view.
I'm fresh to all that stuff but working hard to accomplish and 
undertanding how this fine software works.
Now it is time for me to research as i need a log in system for my 
aplication writen in php.
I know that both of you are right and i have already choosen a diferent 
aproach for this matter.


Kind regards,

Kbl_master


On 25 de Jan de 2006, at 5:56 AM, Boyle Owen wrote:


-Original Message-
From: info.raa [mailto:[EMAIL PROTECTED]
Sent: Dienstag, 24. Januar 2006 19:30
To: Apache List
Subject: [EMAIL PROTECTED] path

Hi everyone!

Is anybody know how i limit the path, shown in the browser, to always
show the adress or ip of the server but never the directory or files
that was used to show the html?


Joshua has already explained why this is a bad idea from the point of
view of your clients.

But I might add that it does nothing to help your security either. 
The
simple fact is that browser *has* to have a unique URL for each 
resource

(image, page, CSS, etc.) on your site. Whether this URL is printed in
the browser location bar is irrelevant from a security point-of-view,
since it is certainly available in plain-text in the HTML source.

Put it another way, if an attacker is so stupid that he doesn't know
about [right-click] - View Source, then he is never going to be able
to hack you anyway.

In any case, trivial details about your filesystem are useless to a
hacker. Unless he has an exploit that can open a shell on the server,
knowing the odd directory name is no use (and if he does get in, he
immediately knows everything about the filesystem anyway). So keep your
system secure - up-to-date server software and OS.

I guess your real concern is that you feel uneasy about putting paths 
to

cgi and SQL arguments on the query-string (eg,
/cgi/my_db_query.pl?name=Fredage=35shoe=44). You shouldn't - 
obviously

your CGI script is written in such a way that it carefully parses user
input (tainting, removing suspicious characters etc.) Isn't it? Well, 
it

should be...

But, if you really want to decouple the URL-space from the real
filesystem, consider using mod_rewrite, or if you really want to go to
town, install Cocoon.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.



I'm using apache 2.0.52

Thanks a bunch!

kbl_Master


-
The official User-To-User support forum of the Apache HTTP
Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





This message is for the named person's use only. It may contain 
confidential, proprietary or legally privileged information. No 
confidentiality or privilege is waived or lost by any mistransmission. 
If you receive this message in error, please notify the sender 
urgently and then immediately delete the message and any copies of it 
from your system. Please also immediately destroy any hardcopies of 
the message. You must not, directly or indirectly, use, disclose, 
distribute, print, or copy any part of this message if you are not the 
intended recipient. The sender's company reserves the right to monitor 
all e-mail communications through their networks. Any views expressed 
in this message are those of the individual sender, except where the 
message states otherwise and the sender is authorised to state them to 
be the views of the sender's company.


-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] path

2006-01-24 Thread info . raa

Hi everyone!

Is anybody know how i limit the path, shown in the browser, to always 
show the adress or ip of the server but never the directory or files 
that was used to show the html?


I'm using apache 2.0.52

Thanks a bunch!

kbl_Master


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] path

2006-01-24 Thread info . raa

Thanks for the reply.
It is really a security measure, since i'm developing an erp with mysql.
Do you know how it is done? I dont want to bookmark any pages or so.
Your last solution works right away. Thanks.

Can i ask some other thing?
Is there anyway to prevent the same user/password to be accepted by the 
server. Or one setup of user/password can be use like for 10 people or 
so?


UR the man!

On 24 de Jan de 2006, at 4:35 PM, Joshua Slive wrote:


On 1/24/06, info. raa [EMAIL PROTECTED] wrote:

Hi everyone!

Is anybody know how i limit the path, shown in the browser, to always
show the adress or ip of the server but never the directory or files
that was used to show the html?


That's a really bad idea.  It destroys one of the most fundementally
useful parts of the web: the URL that references a resource.  In so
doing, it makes it impossible to bookmark pages, send links, properly
index your site for search engines, and many other things.

You can't do this directly with apache, since apache only cares about
translating urls into resources.  People who want to do it usually use
a simple html frameset with invisible frames.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Uninstalling Apache on OS X

2006-01-23 Thread info . raa
It will work. never mind removing the instalation of apache that comes 
with the osx.


On 23 de Jan de 2006, at 2:52 PM, Eliah Kagan wrote:


On 1/23/06, java_nutt wrote:

Greetings to all!  My name is James and I am new to this list.
I'm working on learning Apache, HTTP, and all that jazz.  I have
an Apple Powerbook running OS X 10.4.4, and I would like to
know if it is safe and/or possible to uninstall Apache.


James--

Have you considered leaving the onboard installation of Apache
(located in /usr) as it is, but turned off, and building and
installing your very own Apache elsewhere (say, /usr/local)?

-Eliah

-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] httpd.conf

2006-01-19 Thread info . raa

Hi evetybody!

Greetings.
I have just starded learning apache.
I'm using os x and apache 2.0.52.
The server is running and i already undertand how virtual host works.
From any computer of my lan i can see my intranet site.

Here is my question:

Can anyone send me an httpd.conf file with the configurations necessary 
to run a member's only site?
I have tried the following code inside a directory container, have 
created a passwd folder and the proper user/password file, but had no 
sucess.


# Controls who can get stuff from this server.
Order allow, deny
Allow from 192.168
Deny from all

# Security measures
AuthType Basic
AuthName Restricted Files
AuthUserFile /Library/Apache2/passwd/passwords
Require valid-user

Thanks!

Best regards,

Kbl_Master


-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] httpd.conf

2006-01-19 Thread info . raa

Joshua, Tks for the reply. I'll try it.

On 19 de Jan de 2006, at 12:25 PM, Joshua Slive wrote:


On 1/19/06, info. raa [EMAIL PROTECTED] wrote:
Can anyone send me an httpd.conf file with the configurations 
necessary

to run a member's only site?
I have tried the following code inside a directory container, have
created a passwd folder and the proper user/password file, but had no
sucess.


had no success is not very descriptive.  Exactly what happened?
Exactly what was in the error and access logs?



# Controls who can get stuff from this server.
Order allow, deny


No space between allow, and deny please.


Allow from 192.168
Deny from all


The deny is evaluated last according to the allow statement and
therefore denies all access.  I think you want Order deny,allow.
Iff what you want is to allow from 192.168 OR if the person has a
password, then you also need to add Satisfy Any.



# Security measures
AuthType Basic
AuthName Restricted Files
AuthUserFile /Library/Apache2/passwd/passwords
Require valid-user


This looks basically fine.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server 
Project.

See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
 from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]