Hi
Recently attackers use new attack for DOS apache.for example see
http://isc.sans.org/diary.html?storyid=6601rss .
Is there any solution for prevent this DOS attack?
what solution do you suggest for limit concurrent connection?
thanks for any help or guidance
--
N.Chavoshi
Hi
I want to monitor apache status (amount of requests,ram usage,amount of
apache daemons and etc)as real time, Is there any tools that justify these
needs?
thanks for any help or guidance
--
N.Chavoshi
Hi
I have one question about Apache modules.with loading more modules on
apache, may apache responses with more delay ??
--
N.Chavoshi
Hi,
I tried a simple include with SSI.
In the root directory I added a .htaccess file with
AddType text/html .shtml
AddOutputFilter INCLUDES .html
In index-test.html i added
!--#include virtual=./footer.html --
This works fine.
Now I moved the footer.html to another directory.
!--#include
-Original Message-
From: Marc Patermann [mailto:hans.mo...@ofd-sth.niedersachsen.de]
Sent: Wednesday, July 08, 2009 9:07 AM
To: users@httpd.apache.org
Subject: [us...@httpd] SSI - file not included
Hi,
I tried a simple include with SSI.
In the root directory I added a
http://httpd.apache.org/docs/2.2/mod/mod_status.html
From: nima chavooshi [mailto:nima0...@gmail.com]
Sent: Wednesday, July 08, 2009 8:51 AM
To: users@httpd.apache.org
Subject: [us...@httpd] apache monitoring
If you just load modules but don't actually use them (ie, no directives
in config), then no.
From: nima chavooshi [mailto:nima0...@gmail.com]
Sent: Wednesday, July 08, 2009 8:59 AM
To: users@httpd.apache.org
Subject: [us...@httpd]
nima chavooshi wrote:
Hi
I have one question about Apache modules.with loading more modules on
apache, may apache responses with more delay ??
Re these recent threads :
- [us...@httpd] Apache under DOS
- [us...@httpd] apache monitoring
- [us...@httpd] apache modules
It is always a good idea,
Boyle Owen schrieb:
Can the included file not be placed in an authentictaion protected
directory ?
Apparently not... Otherwise, it would be a way to circumvent
authentication.
Check what it says in the error_log; that should tell you more than
..stops working..
If there is a 401 Unauthorized
-Original Message-
From: Marc Patermann [mailto:hans.mo...@ofd-sth.niedersachsen.de]
Sent: Wednesday, July 08, 2009 10:47 AM
To: users@httpd.apache.org
Subject: Re: [us...@httpd] SSI - file not included
Boyle Owen schrieb:
Can the included file not be placed in an
Be sure to configure it with Extended Status on to get a wealth of info.
-Tony
From: Boyle Owen [mailto:owen.bo...@six-group.com]
Sent: Wednesday, July 08, 2009 3:36 AM
To: users@httpd.apache.org
Subject: RE: [us...@httpd] apache monitoring
On Wed, 2009-07-08 at 09:57 -0400, Tony Rice (trice) wrote:
Be sure to configure it with Extended Status on to get a wealth of
info.
(Obvious self-promotion)
We have a free (as in speech) tool, which might help you get the
information out of mod_status if the server is unresponsive.
Hi,
There is a Perl program to extract information.
The program requests a page created for mod_status and write in a file
Ricardo
On Wed, Jul 8, 2009 at 12:03 PM, Morten K. Poulsen m...@fabletech.comwrote:
On Wed, 2009-07-08 at 09:57 -0400, Tony Rice (trice) wrote:
Be sure to configure it
On Wed, 2009-07-08 at 12:12 -0300, ricardo figueiredo wrote:
There is a Perl program to extract information.
The program requests a page created for mod_status and write in a file
Yes, and it's the requests a page part which can be a problem, if the
server is not responding.
Morten
--
On Wed, Jul 8, 2009 at 12:24 PM, Morten K. Poulsen m...@fabletech.comwrote:
On Wed, 2009-07-08 at 12:12 -0300, ricardo figueiredo wrote:
There is a Perl program to extract information.
The program requests a page created for mod_status and write in a file
Yes, and it's the requests a
Boyle Owen wrote:
If you just load modules but don't actually use them (ie, no directives
in config), then no.
That is not entirely true. Most register a hook provider to evaluate if
they are the candidate for providing auth, injecting filters or handling
the request.
Those hooks do cost some
Apache 2.2.11
Windows Server 2003 R2 x64
Hello all,
I've searched the archives and only found confirmation of what my problem is,
but no solutions. I am trying to configure apache httpd in such a way that
logs are rotated on a daily basis, and the server is not shut down when doing
so.
Philip J Dicke wrote:
I currently have httpd running as a windows service, logging on as a
restricted
user called webserver. That account is very restricted in the folders that
it can read/execute. In order to follow the security policy, the webserver
account needs to be configured so that
Philip J Dicke wrote:
Ok; please explain how the process initially has rights to invoke cmd.exe
and how these were subtracted after initialization?
Well it works now b/c the webserver user has access to the cmd.exe. Security
review revealed that access needs to be removed.
Ok; that's not
On Tue, Jul 7, 2009 at 11:50 PM, nima chavooshinima0...@gmail.com wrote:
Hi
Recently attackers use new attack for DOS apache.for example see
http://isc.sans.org/diary.html?storyid=6601rss .
Is there any solution for prevent this DOS attack?
what solution do you suggest for limit concurrent
This sounds like the solution until the new real pipes solution is
implemented. Thank you all.
On Wed, Jul 8, 2009 02:59 PM Sander Temme scte...@apache.org wrote:
On Jul 8, 2009, at 11:09 AM, Philip J Dicke wrote:
Windows does not seem to have the apachectl graceful command that
unix
Hi all;
I'm trying to strip out NTLM as an authentication option from response
packets (my Apache is acting as a reverse proxy). At first I did this
blindly with the Header command:
Header always unset WWW-Authenticate
Header always set WWW-Authenticate Basic realm='%{SERVER_NAME}e'
Ray Van Dolson wrote:
Hi all;
I'm trying to strip out NTLM as an authentication option from response
packets (my Apache is acting as a reverse proxy).
By curiosity, what does this achieve ?
If the origin server requires NTLM authentication for a resource, it is
unlikely to be happy with a
On Wed, Jul 08, 2009 at 03:35:58PM -0700, André Warnier wrote:
Ray Van Dolson wrote:
Hi all;
I'm trying to strip out NTLM as an authentication option from response
packets (my Apache is acting as a reverse proxy).
By curiosity, what does this achieve ?
If the origin server requires
Hi,
From your query, I observed that we can reload apache configuration file
without restarting the apache web server on Linux.
I would like to know, how can we do it?
Thanks in advance.
--Vamshi :)
-Original Message-
From: dbezerra [mailto:dbeze...@accesssoftek.com]
Sent: Tuesday,
25 matches
Mail list logo