Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-23 Thread Joshua Slive
On Nov 23, 2007 4:48 AM, Sam Testuser [EMAIL PROTECTED] wrote: This attack has many special traits. One of the more annoying ones is sudden and total death. I'm not sure how that is a special trait of this attack. My point is quite simple: this particular attack (and most other similar ones)

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Nick Kew
On Thu, 22 Nov 2007 22:30:25 +0100 Samuel Vogel [EMAIL PROTECTED] wrote: Hey guys, I have a question about mod_filter. I would like to run an output filter only if the content is not compressed and it's type is text/html. I have tried the following: FilterDeclare addcomment

Re: [EMAIL PROTECTED] Redirecting to internal server

2007-11-23 Thread Davide Bianchi
Paul Cocker wrote: Such a setup already exists (though it's Linux to Linux) so I thought this would be relatively easy to do, just copy the existing setup. People currently connect to http://www.domain.co.uk/folder/login.html and all is well. Searching the httpd.conf file I can find only one

Re: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Brian A. Seklecki
Radware has some nice header rewriting features in its SSL accelerator package. ~BAS On Fri, 23 Nov 2007, Eric Covener wrote: Date: Fri, 23 Nov 2007 20:25:30 -0500 From: Eric Covener [EMAIL PROTECTED] Reply-To: users@httpd.apache.org To: users@httpd.apache.org Subject: Re: [EMAIL

RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
Thanks for the reply. The redirect loops the requested page never comes up. The log prints the same thing over and over. Matt -Original Message- From: Krist van Besien [mailto:[EMAIL PROTECTED] Sent: Friday, November 23, 2007 4:40 PM To: users@httpd.apache.org Subject: Re: [EMAIL

RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
Eric, That definitely seems like the reason the redirect keeps looping. Every example I have seen has involved {SERVER_PORT} (is or isn't) 443 as a RewriteCond, but I haven't found a way to let apache know if the current session between the client and the load balancer is being encrypted or not.

[EMAIL PROTECTED] Win32 Apache 2.2.6 Allow from env= issue

2007-11-23 Thread Keith Sawmiller
I'm trying to restrict access to only instances where an environment variable is present (eventually to be set via PHP) This simple case (from httpd.conf) denies access: SetEnv TEST_VAR Directory Z:/Web Root Options FollowSymLinks AllowOverride None Order allow,deny

RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Brian A. Seklecki
You could use a wildcard SSL cert and redirect to https://secure.*.tld:/patcha/patchb/file then make your determination based on the hostname. The extra $100 cert is a lot less expensive than Radware AppXcel for sure. On Fri, 23 Nov 2007, Matt Bullock wrote: Date: Fri, 23 Nov 2007

[EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
I was hoping someone could help me with a redirect problem. We are using a load balancer in front of our apache22 servers that also provides SSL offloading. Apache only runs on port 80, and doesn't know anything about 443. When a client asks for a specific page, I want to redirect them to the

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Nick Kew
On Fri, 23 Nov 2007 21:51:50 +0100 Samuel Vogel [EMAIL PROTECTED] wrote: The bad news (speaking from memory) is, I don't think that's fully implemented as of now (did you try it?). I don't think I recollect seeing anyone ask for it before you did This unfortunately does not work. OK, my

Re: [EMAIL PROTECTED] Need help with enabling index.cgi on CentOS

2007-11-23 Thread Vincent Bray
On 23 Nov 2007, at 17:57, Scott Ehrlich wrote: I have a new install of CentOS 5 32-bit, and installed bugzilla and phpmyadmin from their respective source web pages, performing a yum install for everything else. I am now unable to get bugzilla's index.cgi page to appear correctly. After

[EMAIL PROTECTED] Serving a file while it is being created

2007-11-23 Thread Nick Birren
Hi I'm trying to serve a video file with Apache while it is still being created (I have a separate server-side application that generates videos, the process takes a few minutes per video and I would like my users to be able to start downloading right away and not wait for the video to be

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Samuel Vogel
Is it really not possible to connect 2 mod_filter matches? Isn't there some kind of workarround? Regards, Samy Samuel Vogel schrieb: Hey guys, I have a question about mod_filter. I would like to run an output filter only if the content is not compressed and it's type is text/html. I have

[EMAIL PROTECTED] Need help with enabling index.cgi on CentOS

2007-11-23 Thread Scott Ehrlich
I have a new install of CentOS 5 32-bit, and installed bugzilla and phpmyadmin from their respective source web pages, performing a yum install for everything else. I am now unable to get bugzilla's index.cgi page to appear correctly. After fighting to get the mysql database for bugzilla

[EMAIL PROTECTED] Re: mod_proxy problem with phpmyadmin

2007-11-23 Thread Til Obes
Krist van Besien schrieb: This looks like a problem with PHPMyAdmin, not with apache. When you log in to phpmyadmin it sends you a redirect. (Get the LiveHTTPHeaders plugin for Firefox, this is a great help to debug such issues). The redirect is what makes your browser's address bar change.

Re: [EMAIL PROTECTED] Creating a DSO module using apxs

2007-11-23 Thread C.F-Win in China F
apxs -g -n test 2007/11/21, Jan van den Berg [EMAIL PROTECTED]: Really no one knows? No clues, directions, tips on where I should go from here? This is really important to me. Cheers, Jan -Oorspronkelijk bericht- Van: Jan van den Berg [mailto:[EMAIL PROTECTED] Verzonden:

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-23 Thread Sam Testuser
Joshua Slive [EMAIL PROTECTED] wrote: Ok. I see the issue better now. But what really is the point in trying to eliminate the client who dribbles out data in order to get around the TimeOut? If you are performing a DDoS, you can easily behave just like an ordinary client (requesting real

RE: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Matt Bullock
I was hoping there would be a way to let apache know the url being requested was https://...;. Here is a log when I navigate to a https page: 75.83.2.48 - - [23/Nov/2007:21:47:51 --0800] [www.domain.com/sid#557f2f90][rid#55a1c188/initial] (2) explicitly forcing redirect with

Re: [EMAIL PROTECTED] Content-Encoding never matches -bug in mod_filter?

2007-11-23 Thread Samuel Vogel
Ok, i found what was the cause of the issue. The documentation states that the ! must be the first character of the match. But this is not true. My filter only works like this: FilterProvider addcomment LAYOUT resp=Content-Encoding $!gzip Specifically the documentations says

[EMAIL PROTECTED] Redirecting to internal server

2007-11-23 Thread Paul Cocker
Hi all, first time on the apache list so have mercy ;) I have been tasked with setting up a system whereby a Linux server running apache 2.0.59 in the DMZ takes requests on port 80 and then passes them through to an internal Windows server running IIS which actually hosts the HTML. Such a setup

[EMAIL PROTECTED] Content-Encoding never matches -bug in mod_filter?

2007-11-23 Thread Samuel Vogel
While playing around with mod_filter i tried to do the following to add a filter to every page that is not gzipped: FilterProvider addcomment LAYOUT resp=Content-Encoding !$gzip But that did never apply the filter. On the other hand, applying by Content-Type works perfectly well:

Re: [EMAIL PROTECTED] mod_filter: and conjunction between two filters

2007-11-23 Thread Samuel Vogel
How it should work: FilterProvider foo LAYOUT resp=Content-Encoding !$gzip FilterProvider addcomment foo resp=Content-Type $text/html i.e. once you've declared foo, you can chain it by using it as a provider for your new filter. The bad news (speaking from memory) is, I don't think that's

Re: [EMAIL PROTECTED] Serving a file while it is being created

2007-11-23 Thread Vincent Bray
On 23 Nov 2007, at 19:14, Nick Birren wrote: Hi I'm trying to serve a video file with Apache while it is still being created (I have a separate server-side application that generates videos, the process takes a few minutes per video and I would like my users to be able to start

Re: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Krist van Besien
On Nov 24, 2007 1:17 AM, Matt Bullock [EMAIL PROTECTED] wrote: Any help would be greatly appreciated. Could you tell us what your problem is? According to the rewritelog excerpt you gave us that server is doing exactly what you told it to do, redirecting clients requesting /dir1/dir2/file.php to

Re: [EMAIL PROTECTED] Redirect to HTTPS using Load Balancer/SSL Offload

2007-11-23 Thread Eric Covener
On Nov 23, 2007 7:59 PM, Matt Bullock [EMAIL PROTECTED] wrote: Thanks for the reply. The redirect loops the requested page never comes up. The log prints the same thing over and over. You said the LB does SSL offload. You haven't given apache any way to distinguish when someone hits the LB