[OT] Re: Nimda worm

2001-09-19 Thread Dan Rench
On Tue, Sep 18, 2001 at 04:07:59PM -0700, Nick Tonkin wrote: > > Heh, as Nat maybe saw the worm doesn't always request ?/c+dir, so until I > can figure out a better way to identify it we'll have to go with > cmd.exe|root.exe Here's a sample Nimda hit (courtesy of 'nc -l -p 80' -- try it yourself

Re: proxying name-based virtual hosts

2000-08-10 Thread Dan Rench
On Thu, 10 Aug 2000, Roger Espel Llima wrote: > I'm trying to set up a proxy front-end server to my heavy mod_perl > backend, and I'm having some trouble with name-based virtual hosts. > > Basically, with a rule like "RewriteRule ^/(.*) http://10.36.1.10/$1 [P]", > the proxy sends an http reques

Re: ignore header_only()?

2000-08-07 Thread Dan Rench
On Fri, 4 Aug 2000, Vivek Khera wrote: > > "NT" == Nathan Torkington <[EMAIL PROTECTED]> writes: > > NT> I see some programmers don't check header_only(). Are there > NT> bad things in store if you don't? Or will Apache or the browser > NT> simply ignore the body that gets created? > > My

Re: .htacess security

2000-08-04 Thread Dan Rench
On Thu, 3 Aug 2000, Ken Williams wrote: > [EMAIL PROTECTED] (Rob Giseburt) wrote: > >Are .htaccess files secure? I don't want users to be able to use > >... sections or any other mod_perl constructs (setting scripts > >to run via the Registry, for example) in .htaccess files. However, I need >

Unexpected pnotes() behavior

2000-07-24 Thread Dan Rench
I had a situation where a pnotes() key set in one phase had a value I did not expect in a later phase. Here's a small module that I wrote as a HeaderParserHandler to illustrate: package Ii::Apache::pnotes; use Apache::Constants 'OK'; sub handler { my $r = shift; $r->push_handlers('PerlF

RE: The Eagle has landed!

2000-07-12 Thread Dan Rench
On Wed, 12 Jul 2000, Greg Leidreiter wrote: > Firstly becuase the Eagle book seems very rigorous to me, and such an > oversight as forgetting to push a path into @INC should have been picked up > well before now. I've never heard mention of this problem... mod_perl automatically adds {ServerRoot

Re: Reading config

2000-06-30 Thread Dan Rench
On Mon, 19 Jun 2000, Matt Sergeant wrote: > On Mon, 19 Jun 2000, Edwin Pratomo wrote: > > > > how to get configuration values at run-time, such as DirectoryIndex? > > I don't think you can - that configuration directive is specific to > mod_index, and only mod_index can access it, AFAIK. Yes

Re: Simple program _setting_ REMOTE_ADDR - SOLUTION

2000-06-23 Thread Dan Rench
On Fri, 23 Jun 2000, Steve van der Burg wrote: > Taking your remote_ip hint, and reading the Eagle a bit more closely, > I came up with this: > > In httpd.conf: > > > PerlAccessHandler LHSC::FakeRemoteIP > Why an Access handler? I realize it works, but a more appropriate phase would be Perl

Re: $ENV{PATH} set by mod_perl script affects mod_cgi scripts

2000-06-05 Thread Dan Rench
On Sun, 4 Jun 2000, Ben Cohen wrote: > The problem is that when a mod_perl script modifies the PATH > environment variable, this change seems to become global and > affects even plain old mod_cgi scripts. While I also wonder (as another respondent did) why a mod_perl script would need to alter

Re: Finding if SSL is enabled on backend ..

2000-01-06 Thread Dan Rench
On Thu, 6 Jan 2000, Joseph R. Junkin wrote: > Actually, I am wrong, the HTTP_REFERER is the previous referring > document, not the current URL so this does not solve my problem. Again, > if anyone knows a way to determine if SSL is activated on the backend, > please let me know. > > > > Hi all,

Re: Problems with dynamically-loaded perl modules under Solaris2.5.1

1999-12-22 Thread Dan Rench
On Tue, 21 Dec 1999, Doug MacEachern wrote: > this sounds an awful lot like the common solaris linker vs. gnu linker > problem. what does 'perl -V:ld' say your linker is? make sure it's gnu > (gcc) and that Apache is using the same. $ perl -V:ld ld='gcc'; What I don't understand is that when

Re: Problems with dynamically-loaded perl modules under Solaris2.5.1

1999-12-20 Thread Dan Rench
On Thu, 16 Dec 1999, Eugene Miretskiy wrote: > Recently I experienced similar problems on Solaris. > > I had to rebuild perl as shared libperl.so Perl library for mod_perl > to work -- see perl intall manpages. Thanks! This appears to have fixed my problem (though it may have broken CPAN.pm -

Re: Problems with dynamically-loaded perl modules under Solaris2.5.1

1999-12-16 Thread Dan Rench
On Mon, 13 Dec 1999, Doug MacEachern wrote: > are you still stuck on this? Yes. To reiterate: Solaris 2.5.1 sparc, gcc 2.95, perl 5.005_03 (configured with Solaris hints), mod_perl 1.21, apache 1.3.9, mod_fastcgi 2.2.2. Everything works fine EXCEPT when I try to "use" a dynamically loaded mod

Re: Problems with dynamically-loaded perl modules under Solaris2.5.1

1999-11-01 Thread Dan Rench
I did some experimenting with my Solaris2.5.1/mod_perl/Data::Dumper/Storable problem that I wrote about last week. A grid: | mod_perl 1.21 | 1.21-dev (19991101174047) -+---+-- perl5.004_05 | works fine| didn't try perl5.005_03 |

Re: hostname sanitation in PerlTransHandler or anywhere else

1999-10-29 Thread Dan Rench
On Fri, 29 Oct 1999, I wrote: > I can only think of a couple options: hack http_core.c to do what I want, > or write a custom LogHandler that uses the sanitized host. We've decided on another option: if you're sending a Host: header that needs "sanitation," then either 1) you're trying to run s

hostname sanitation in PerlTransHandler or anywhere else

1999-10-29 Thread Dan Rench
We use a TransHandler to (among other things) manage name-based virtual hosts (simply put, given the incoming Host: header plus URI, map to a file). We (of course) sanitize the incoming URI and Host. It works fine. I "save" the sanitized hostname like so: $r->header_in('Host',$host); $r

Re: Problems with dynamically-loaded perl modules under Solaris2.5.1

1999-10-27 Thread Dan Rench
On Wed, 27 Oct 1999, Francesc Guasch wrote: > what's the ld version you use ?, make sure you compiled perl using the > solaris hints you can find in the perl sources. I've got GNU ld 2.9.1, but the perl Configure said GNU ld won't build perl, so it used /usr/ccs/bin/ld (version 3.0). I compile

Problems with dynamically-loaded perl modules under Solaris 2.5.1

1999-10-26 Thread Dan Rench
I'm having problems with modules that use DynaLoader (Data::Dumper and Storable, specifically) under mod_perl on Solaris machines. These modules work fine in standalone scripts, or when run under mod_cgi or mod_fastcgi, but as soon as I put a "use Storable" in a mod_perl handler, I get this in m

Re: PerlTransHandler

1999-10-21 Thread Dan Rench
On Tue, 19 Oct 1999, Mark Cogan wrote: > >> On Tuesday, October 19, 1999 4:13 AM, William Deegan > [SMTP:[EMAIL PROTECTED]] wrote: > >> > How can I change the environment variables that get passed to a perl > >> > script running under Apache::Registry from a PerlTransHandler? > >> > > >> > I'm u