Re: [us...@httpd] Is UDP possible?

2009-01-27 Thread Issac Goldstand
Short answer: No. Long answer: There are patches in the works (none of them really going anywhere AFAIK, and don't expect anything until a major version bump, but they're there) but even if they ever make it in, you'd still need to explicitly listen with UDP. Issac Brian Mearns wrote: Does

[us...@httpd] strange cookies issue and rewrite

2009-01-27 Thread Norman Khine
Hello, I have a very strange issue when adding the google analytics code to my site. If you go to http://uk.expert.travel and click on a section and then click back to the main home page, I get a 502 proxy error. and in my error log i get this entry: (104)Connection reset by peer: proxy: error

Re: [us...@httpd] Running Apache reverse proxy on different https port

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 1:48 AM, ananth desh ananth.d...@gmail.com wrote: Hello All, Thanks for all your tips , Now when i run on port 2443 instead of 443 i get an error on the browser as below Description: You have made a request for a secure SSL connection to a forbidden port number

Re: [us...@httpd] strange cookies issue and rewrite

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 4:44 AM, Norman Khine nor...@khine.net wrote: Hello, I have a very strange issue when adding the google analytics code to my site. If you go to http://uk.expert.travel and click on a section and then click back to the main home page, I get a 502 proxy error. and in

Re: [us...@httpd] Is UDP possible?

2009-01-27 Thread Brian Mearns
On Tue, Jan 27, 2009 at 3:26 AM, Issac Goldstand mar...@beamartyr.net wrote: Short answer: No. Long answer: There are patches in the works (none of them really going anywhere AFAIK, and don't expect anything until a major version bump, but they're there) but even if they ever make it in,

[us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Brian Mearns
Sorry, this isn't strictly apache related, but this seems like a good place to find HTTP expertise and insight. I'm just wondering if ip-address-spoofing is of concern with HTTP in general? Specifically, I'm using server side sessions and authenticating them against IP address. By this I mean I'm

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Nick Kew
On Tue, 27 Jan 2009 08:26:12 -0500 Brian Mearns bmea...@ieee.org wrote: Sorry, this isn't strictly apache related, but this seems like a good place to find HTTP expertise and insight. I'm just wondering if ip-address-spoofing is of concern with HTTP in general? Specifically, I'm using server

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Brian Mearns
On Tue, Jan 27, 2009 at 9:52 AM, Nick Kew n...@webthing.com wrote: On Tue, 27 Jan 2009 08:26:12 -0500 Brian Mearns bmea...@ieee.org wrote: By this I mean I'm just verifying each time the session id is sent by the client (in the query string or in a cookie) that it's from the same

[us...@httpd] Question on ProxyPass and 503 and sizes of file

2009-01-27 Thread Charles Payne (Travel Channel)
Hi, I am having an issue. I have a webserver that is running Apache 2.2 with proxy_pass that talks to an app server running JBOSS. The issue I am having is that any time we upload a file, on the apache side we are getting 503 if the file is over 17mb. We are running Proxy Balancer and our

[us...@httpd] help: mdb files downloading forbidden

2009-01-27 Thread cumm
hi, my configuration: apache: v2.2.8 os: suse linux 10 website: http://www.yanghuamao.cn plz go to the site - the jpg file can be downloaded fully, but the mdb file can only be downloaded at about 21k bytes! plz help! -- martin c...@tom.com

Re: [us...@httpd] strange cookies issue and rewrite

2009-01-27 Thread Norman Khine
Eric Covener wrote: On Tue, Jan 27, 2009 at 4:44 AM, Norman Khine nor...@khine.net wrote: Hello, I have a very strange issue when adding the google analytics code to my site. If you go to http://uk.expert.travel and click on a section and then click back to the main home page, I get a 502

[us...@httpd] localhost vs ip address in url on windows 2003.

2009-01-27 Thread suresh.makala
Hello All, I have implemented apache web server 2.2 with SSL and local security policy using htpasswd. Everything looks fine, and when I use https://localhost it works, but when I use IP address of the machine like https://12.13.14.10 it fails, any idea how to resolve this. I have added in

Re: [us...@httpd] localhost vs ip address in url on windows 2003.

2009-01-27 Thread Evan Platt
Is your machine behind a NAT gateway? If so, is port 80 correctly forwarded from your public IP address to the private IP address you're likely on? At 10:02 AM 1/27/2009, you wrote: Hello All, I have implemented apache web server 2.2 with SSL and local security policy using htpasswd.

RE: [us...@httpd] localhost vs ip address in url on windows 2003.

2009-01-27 Thread suresh.makala
Yes Evan, it is behind NAT gateway, but Iam on the server itself and trying it out with IP address, yes the port 80 and 443 both are open, when I do a telnet test with IP address, both the ports work. Somehow it takes localhost but not the server IP in the url. Suresh. -Original

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Nick Kew
On Tue, 27 Jan 2009 10:02:58 -0500 Brian Mearns mearn...@gmail.com wrote: . So basically what I'm coming to is that session's aren't completely insecure unless over HTTPS? Well, you can send a session token. With HTTP Digest Authentication, it's secure. -- Nick Kew Application Development

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Matt McCutchen
On Tue, 2009-01-27 at 18:35 +, Nick Kew wrote: On Tue, 27 Jan 2009 10:02:58 -0500 Brian Mearns mearn...@gmail.com wrote: . So basically what I'm coming to is that session's aren't completely insecure unless over HTTPS? Well, you can send a session token. With HTTP Digest

RE: [us...@httpd] localhost vs ip address in url on windows 2003.

2009-01-27 Thread Bennett, Tony
What about your httpd.conf ... How do you have your LISTEN directive formated...??? http://httpd.apache.org/docs/2.2/mod/mpm_common.html#listen We had a case that was the opposite from yours... ...we could access one of our sites via an IP address, but not via localhost... ...the problem was

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Brian Mearns
On Tue, Jan 27, 2009 at 1:49 PM, Matt McCutchen m...@mattmccutchen.net wrote: On Tue, 2009-01-27 at 18:35 +, Nick Kew wrote: On Tue, 27 Jan 2009 10:02:58 -0500 Brian Mearns mearn...@gmail.com wrote: . So basically what I'm coming to is that session's aren't completely insecure unless

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Nick Kew
On Tue, 27 Jan 2009 14:16:55 -0500 Brian Mearns mearn...@gmail.com wrote: I'm not concerned right now with security of content, I'm concerned with someone highjacking another person's session. Then Digest Authentication is exactly what you want. -- Nick Kew Application Development with

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Brian Mearns
On Tue, Jan 27, 2009 at 2:35 PM, Nick Kew n...@webthing.com wrote: On Tue, 27 Jan 2009 14:16:55 -0500 Brian Mearns mearn...@gmail.com wrote: I'm not concerned right now with security of content, I'm concerned with someone highjacking another person's session. Then Digest Authentication is

[us...@httpd] apache caching not working

2009-01-27 Thread dd123
I have a webserver servicing the images and url for that webserver looks like this: http://backend-server.abc.com/mcs-stream-war/asset/streamAsset?id=e98a887b-2eb1-456d-ba18-d21a1b0b06cc The above URL is basically an image. Now, I want to front this webserver with a reverse proxy caching

Re: [us...@httpd] apache caching not working

2009-01-27 Thread Alexandru Constantinescu
dd123 wrote: I have a webserver servicing the images and url for that webserver looks like this: http://backend-server.abc.com/mcs-stream-war/asset/streamAsset?id=e98a887b-2eb1-456d-ba18-d21a1b0b06cc The above URL is basically an image. Now, I want to front this webserver with a reverse proxy

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Matt McCutchen
On Tue, 2009-01-27 at 14:16 -0500, Brian Mearns wrote: I'm not concerned right now with security of content, I'm concerned with someone highjacking another person's session. I send a session token, and the client sends it back, either in cookie data or in the URL. Either way, it's plain text

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread André Warnier
Brian Mearns wrote: On Tue, Jan 27, 2009 at 2:35 PM, Nick Kew n...@webthing.com wrote: On Tue, 27 Jan 2009 14:16:55 -0500 Brian Mearns mearn...@gmail.com wrote: I'm not concerned right now with security of content, I'm concerned with someone highjacking another person's session. Then Digest

Re: [us...@httpd] Firewall causing ProxyPass to fail

2009-01-27 Thread Raj Jay
Sorry for resending this. Just wondering if ProxyRemote works when using SSL between Apache and the remote server (specified using ProxyPass)? If not, any alternate solutions will be greatly appreciated. Thanks! -Raj. On Sat, Jan 24, 2009 at 3:55 PM, Raj Jay deep2...@gmail.com wrote: Thanks

Re: [us...@httpd] Firewall causing ProxyPass to fail

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 4:05 PM, Raj Jay deep2...@gmail.com wrote: Sorry for resending this. Just wondering if ProxyRemote works when using SSL between Apache and the remote server (specified using ProxyPass)? If not, any alternate solutions will be greatly appreciated. Thanks! -Raj. The

Re: [us...@httpd] help: mdb files downloading forbidden

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 12:19 PM, cumm c...@tom.com wrote: hi, my configuration: apache: v2.2.8 os: suse linux 10 website: http://www.yanghuamao.cn plz go to the site - the jpg file can be downloaded fully, but the mdb file can only be downloaded at about 21k bytes! EnableSendfile off?

[us...@httpd] question on apache rewrite

2009-01-27 Thread Charles Li
I have setup my rewrite with the following: RewriteCond %{HTTP_HOST} ^.*serverINTG.*$ [NC] When I type in http://serverINTG.com/index, it get translated back to the real servername. But if I type in http://serverINTG.com/index/, with a slash, it stay with the alias. How do I make it stay

Re: [us...@httpd] apache caching not working

2009-01-27 Thread dd123
You are right. My apache switched to different runtime user though it started as root. I changed the dir permission and atleast I can see some contents in the cache dir But now, I have hit another roadblock: Basically, I want the images to be served via cache and my images are distinguishable

Re: [us...@httpd] question on apache rewrite

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 4:47 PM, Charles Li cli...@yahoo.com wrote: I have setup my rewrite with the following: RewriteCond %{HTTP_HOST} ^.*serverINTG.*$ [NC] When I type in http://serverINTG.com/index, it get translated back to the real servername. But if I type in

Re: [us...@httpd] apache caching not working

2009-01-27 Thread Alexandru Constantinescu
dd123 wrote: You are right. My apache switched to different runtime user though it started as root. I changed the dir permission and atleast I can see some contents in the cache dir But now, I have hit another roadblock: Basically, I want the images to be served via cache and my images are

Re: [us...@httpd] IP-address spoofing a concern?

2009-01-27 Thread Brian Mearns
Like I said, it's not clear to me how this [HTTP Digest Authentication] would solve my [Session Hijacking] problem. Can you elaborate a little? Wow, well thanks both of you for the great information. I didn't realize that a new nonce was generated for each request, so I didn't see how it was

Re: [us...@httpd] apache caching not working

2009-01-27 Thread dd123
Thanks I got it working. I had to use CacheIgnoreQueryString On because backend webserver was not sending expiration time and cache module in apache won't cache the resource if it has query strings and it has no expiration module. I resolved this by turning off CacheIgnoreQueryString on apache

[us...@httpd] SSL session/key caching on reverse mod_proxy - does Apache (as client) cache the origin server's key?

2009-01-27 Thread Jeff Ambrosino
I'm using Apache as a reverse proxy to a back-end (origin) web server, handling SSL traffic. I have SSLSessionCache enabled, which lets the Apache server cache the client's public key to prevent the need to renegotiate subsequent connections. But my question is whether this also helps when

Re: [us...@httpd] SSL session/key caching on reverse mod_proxy - does Apache (as client) cache the origin server's key?

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 6:43 PM, Jeff Ambrosino jbambros...@gmail.com wrote: I'm using Apache as a reverse proxy to a back-end (origin) web server, handling SSL traffic. I have SSLSessionCache enabled, which lets the Apache server cache the client's public key to prevent the need to

[us...@httpd] Re: UserDir + SetHandler cgi-script broken? (Apache 2.0.52)

2009-01-27 Thread Buck Golemon
Buck Golemon buck.golemon at amd.com writes: Matt McCutchen matt at mattmccutchen.net writes: On Sat, 2009-01-24 at 09:17 -0500, Brian Mearns wrote: On Fri, Jan 23, 2009 at 6:44 PM, Buck Golemon buck.golemon at amd.com wrote: Thanks for the reply, but if I remove the SetHandler

[us...@httpd] install ques

2009-01-27 Thread Marty Enright
I have downloaded and installed the new version of apache for windows xp first time user I can reach my server internally but not externally Spoke with smc for router support and turned on port 80 for port forwarding smc says that the other ports that need to be setup for port forwarding come

Re: [us...@httpd] install ques

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 9:24 PM, Marty Enright ma...@hghtk.com wrote: I have downloaded and installed the new version of apache for windows xp first time user I can reach my server internally but not externally Spoke with smc for router support and turned on port 80 for port forwarding smc

Re: [us...@httpd] Firewall causing ProxyPass to fail

2009-01-27 Thread William A. Rowe, Jr.
Eric Covener wrote: On Tue, Jan 27, 2009 at 4:05 PM, Raj Jay deep2...@gmail.com wrote: Sorry for resending this. Just wondering if ProxyRemote works when using SSL between Apache and the remote server (specified using ProxyPass)? If not, any alternate solutions will be greatly appreciated.

Re: [us...@httpd] Firewall causing ProxyPass to fail

2009-01-27 Thread Eric Covener
On Tue, Jan 27, 2009 at 10:54 PM, William A. Rowe, Jr. wr...@rowe-clan.net wrote: Eric Covener wrote: On Tue, Jan 27, 2009 at 4:05 PM, Raj Jay deep2...@gmail.com wrote: Sorry for resending this. Just wondering if ProxyRemote works when using SSL between Apache and the remote server (specified