Re: [users@httpd] Questionable URL being sent to our server

On 11/1/22, 12:25 PM, "Eric Covener" wrote: On Tue, Nov 1, 2022 at 10:26 AM Darryl Philip Baker wrote: > > We are getting a poorly formed URL being requested from our servers. Apache is returning a 400 error but I am wondering if someone is try to exploit

Re: [users@httpd] Questionable URL being sent to our server

g. If those log entries bother you, firewall their IP range(s). On Tue, 1 Nov 2022 at 11:13, Darryl Philip Baker mailto:darryl.ba...@northwestern.edu>> wrote: They are mostly using GET but there were a couple of HEAD requests. The requests are coming from cloud accounts on Google and

Re: [users@httpd] Questionable URL being sent to our server

On Tue, 1 Nov 2022 at 10:27, Darryl Philip Baker mailto:darryl.ba...@northwestern.edu>> wrote: We are getting a poorly formed URL being requested from our servers. Apache is returning a 400 error but I am wondering if someone is try to exploit an issue with some version of some we

[users@httpd] Questionable URL being sent to our server

We are getting a poorly formed URL being requested from our servers. Apache is returning a 400 error but I am wondering if someone is try to exploit an issue with some version of some web server out there. Maybe a Dos attack or worse. Anyone have a clue what is being attempted? Sketchy URL:

Re: [users@httpd] I need help with a rewrite request

Baker Northwestern University From: Darryl Philip Baker Reply-To: Apache httpd Users Date: Wednesday, September 28, 2022 at 11:47 AM To: Apache httpd Users Subject: Re: [users@httpd] I need help with a rewrite request Thank you Frank. That does look like it will do exactly what I want it to do

Re: [users@httpd] I need help with a rewrite request

kjWTBQKhk!XJEQEVfbwTZi7stzNLfRrLVQHZI0mBENrfdmWohd3iAb69WIu4jZtlaCNJXxkE91crpJBeVzx9NOMlK0bvX7NarK$> On Wed, 28 Sept 2022 at 09:18, Darryl Philip Baker mailto:darryl.ba...@northwestern.edu>> wrote: I have just received a request to rewrite everything http://school.northwestern.edu/facu

[users@httpd] I need help with a rewrite request

I have just received a request to rewrite everything http://school.northwestern.edu/faculty/name/ to http://school.northwestern.edu/faculty/name.html I believe I can bury this rule in a directory declaration for the faculty directory but I am having problems writing the exact rules to make the

[users@httpd] Auth LDAP and self signed certificates on Red Hat Linux

I have a non-production Apache HTTPD server that needs to authenticate with a non-production LDAP server that is using a self-signed certificate. We are using self-signed certificate so we can have long expiration times on them. I want to know where I can put the self-signed certificate so

Re: [users@httpd] mod_evasive [OT?]

...@northwestern.edu<mailto:darryl.ba...@northwestern.edu> (847) 467-6674 From: Darryl Philip Baker Reply-To: Apache httpd Users Date: Thursday, March 10, 2022 at 9:34 AM To: Apache httpd Users Subject: [users@httpd] mod_evasive [OT?] I am trying to upgrade our webservers from RHEL7 to

[users@httpd] mod_evasive [OT?]

I am trying to upgrade our webservers from RHEL7 to RHEL8. One third party module we use is mod_evasive. Searching for information I find that in 2020 it was in the EPEL repository for RHEL8/CentOS8 but it is no longer there. I have no problem building it from source if necessary. Where can I

Re: [users@httpd] Re: Redirects and rewrites and performance

I have some virtual hosts with well over 100 redirects and I have not seen a user perceptible performance difference. I am sure there will be a machine measurable different between the time it takes for the first redirect versus the last but it doesn't affect the user experience. Darryl Baker,

Re: [users@httpd] Four subdomain, fourth redirects to first

I have ~200 virtualhosts on my Apache HTTPD server and all use the declaration “” with not port specification. Just a “Listen 80” directive. Do you specify the port on the VirtualHost directive because you don’t want to accept traffic on all the ports there are Listen directives for? Darryl

Re: [users@httpd] Using .htaccess to turn off "Header Always append X-Frame-Options SAMEORIGIN"

Reply postponed due to vacation. I have that in my .htaccess file, I just transcribed it wrong. Darryl Baker, GSEC (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 1800 Sherman Ave. Suite 6-600 – Box #39 Evanston, IL 60201-3715

[users@httpd] Using .htaccess to turn off "Header Always append X-Frame-Options SAMEORIGIN"

I have a request for a user where they want an iframe from elsewhere. I have “Header always append X-Frame-Options SAMEORIGIN” set globally. I have tried “Header unset Always unset X-Frame-Options” in the .htaccess file but I get a 500 error. I’ve tried various other ideas of values in

Re: [users@httpd] Apache and nextcloud - insecure ? [EXT]

When you think about It NextCloud is running as part of the web server so in your case www-data. You are going to want NextCloud to be able to write to the disk therefore www-data needs to write to the disk. If you have data other than the stuff you are giving NextCloud access to I would have a

[users@httpd] [SOLVED] [users@httpd] LDAP query translation from 2.2 to 2.4

(847) 467-6674 On 8/26/20, 2:24 PM, "Darryl Philip Baker" wrote: I have been experimenting and I can get the AuthLDAPURL line to work if I have only one host:port listed. 2 or more fails. Has anyone gotten multiple host:port entries in the AuthLDAPURL argument list? Th

Re: [users@httpd] LDAP query translation from 2.2 to 2.4

, "Darryl Philip Baker" wrote: All I get is: AH00526: Syntax error on line 131 of /opt/rh/httpd24/root/etc/httpd/conf.d/ldapdir.conf: Bad LDAP URL while parsing. Darryl Baker, GSEC (he/him/his) Sr. System Administrator Distributed Application Platfor

Re: [users@httpd] LDAP query translation from 2.2 to 2.4

Evanston, IL 60201-3715 darryl.ba...@northwestern.edu (847) 467-6674 On 8/26/20, 10:36 AM, "Eric Covener" wrote: On Wed, Aug 26, 2020 at 11:34 AM Darryl Philip Baker wrote: > > I am trying to port a configuration from Apache 2.2 to Apache 2.4 that i

[users@httpd] LDAP query translation from 2.2 to 2.4

I am trying to port a configuration from Apache 2.2 to Apache 2.4 that is used for LDAP authentication, but I have little knowledge of LDAP. I can translate “Order deny,allow” and “Deny from All” I have found that “AuthzLDAPAuthoritative off” has been removed from Apache 2.4. I am getting a

[users@httpd] File structure for nearly identical sites

I am getting a set of over 50 sites moved over to my server from elsewhere and the content manager want to duplicate each of these in a dev subdomain. An example eatatjoes.example.com and eatatjoes.dev.example.com. I am thinking that I can include the same configuration file twice if I replace

[users@httpd] Negative Look Ahead

I need a rewrite or redirect rule to *.html requests except index.html to index.html. I have used a blanket negative lookahead before: RedirectMatch permanent ^/foo/bar/(?!index.html$) http://www.example.com/foo/bar/index.html But I can’t find how to correctly modify the pattern to limit the

Re: [users@httpd] How can I simplify this URL to just the hostname with rewrite rules?

I agree that those are the stumbling blocks. If you haven’t already try escaping them both or use the ASCII equivilents 1. Redirect permanent “/q3/app\?service\=external/EmployerPages:DudeLogin” “https://test.thing.seabass.com” 2. Redirect permanent

Re: [users@httpd] How can I simplify this URL to just the hostname with rewrite rules?

<mailto:darryl.ba...@northwestern.edu> (847) 467-6674 From: Darryl Philip Baker Reply-To: "users@httpd.apache.org" Date: Tuesday, August 13, 2019 at 2:07 PM To: "users@httpd.apache.org" Subject: Re: [users@httpd] How can I simplify this URL to just the hostname wit

Re: [users@httpd] How can I simplify this URL to just the hostname with rewrite rules?

Have you tried “Redirect permanent “/q3/app\?service=external/EmployerPages:DudeLogin” “https://test.thing.seabass.com” Darryl Baker (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 1800 Sherman Ave. Suite 6-600 – Box #39 Evanston, IL

Re: [users@httpd] Compiling Apache with Non-System OpenSSL

On 7/31/19, 4:29 AM, "Rainer Canavan" wrote: On Wed, Jul 31, 2019 at 1:39 AM Nigel B. Peck wrote: >> >> Thanks for the answers, great to have more insight on this. >> >> Is this a bug? Shouldn't it set up the linking correctly itself when >> the library has been

Re: [users@httpd] Re: Apache web server devouring resources

he.org Subject: Re: [users@httpd] Re: Apache web server devouring resources I don't think the TCP buffer would be clear if there was a continuing flow of http requests during that time, whether the web server software was down, or maxed out But maybe I am wrong. __________

Re: [users@httpd] Re: Apache web server devouring resources

w of http requests during that time, whether the web server software was down, or maxed out But maybe I am wrong. ____________ From: Darryl Philip Baker Sent: Thursday, March 28, 2019 1:22:59 PM To: users@httpd.apache.org Subject: Re: [users@httpd] Re: Apache web

Re: [users@httpd] Re: Apache web server devouring resources

do you use "static" "dynamic" or "ondemand"? From: Darryl Philip Baker mailto:darryl.ba...@northwestern.edu>> Sent: Thursday, March 28, 2019 12:11:27 PM To: users@httpd.apache.org<mailto:users@httpd.apache.org> Subject: [users@htt

Re: [users@httpd] Re: Apache web server devouring resources

why you have to reboot I am guessing. Do you utilize PHP? PHP-FPM? Do you use TCP or Unix Domain sockets? Are there a preponderance of http connections or PHP-FPM processes, or both? If PHP-FPM do you use "static" "dynamic" or "ondemand"? __

[users@httpd] Apache web server devouring resources

Gentlefolk, I had an incident yesterday where the Apache web server host had a load average of over 170 and was performing very slowly. Stopping the web server did fix the issue but when I restarted the daemons the load started to increase very quickly. I ended up having to reboot the system to

Re: [users@httpd] Need a conditional rewrite/redirect rule

60201-3715 darryl.ba...@northwestern.edu (847) 467-6674 On 2/7/19, 4:06 PM, "Eric Covener" wrote: On Thu, Feb 7, 2019 at 4:25 PM Darryl Philip Baker wrote: > > I don't write conditional rewrite rules often but this is a case where I need one. My customer

[users@httpd] Need a conditional rewrite/redirect rule

I don't write conditional rewrite rules often but this is a case where I need one. My customer wants the affect of: RedirectMatch permanent ^/foo/bar/(.*)$ http://www.example.com/foo/bar/file.html Which

Re: [users@httpd] Can apache http server handle millions of static pages or pictures ?

I'm not absolutely sure about millions but I have a few hundred thousand pages. The two issues that might be a problem is the filesystem speed of your implementation and the path name length. Not Apache limitations but that of your file server's OS. Darryl Baker (he/him/his) Sr. System

Re: [users@httpd] Apache/php: Max number of open files

...@northwestern.edu (847) 467-6674 On 8/21/18, 3:46 PM, "Darryl Philip Baker" wrote: Systemd stores the scripts in /lib/systemd/system and /etc/systemd/system. Darryl Baker (he/him/his) Sr. System Administrator Distributed Application Platform Services No

Re: [users@httpd] Apache/php: Max number of open files

-6674 On 8/21/18, 3:23 PM, "Jørn" wrote: On Tuesday, August 21, 2018 21:52:34 Darryl Philip Baker wrote: > Have you tried adding a ulimit command to raise the number of open files in > the apache start script or systemd service file? If I only knew w

Re: [users@httpd] Apache/php: Max number of open files

Have you tried adding a ulimit command to raise the number of open files in the apache start script or systemd service file? Darryl Baker (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 1800 Sherman Ave. Suite 6-600 – Box #39 Evanston, IL

[users@httpd] Vim Syntax Highlighter File

I use the vim feature to highlight the syntax in the Apache configuration files. I am on RHEL 7 and there are many key words that are not getting highlighted. I noticed that a significant number of them are the new keywords in 2.4. Anyone have and updated apache.vim or apachestyle.vim filethey

Re: [users@httpd] SFTP JAIL

Yes that may be true but that is an issue for the OpenSSH list since it is the SSH/SFTP client not for the Apache list. Darryl Baker Sr. System Administrator Distributed Application Platform Services Northwestern University 1800 Sherman Ave. Suite 6-600 – Box #39 Evanston, IL 60201-3715

[users@httpd] Validating Redirect Targets

Posting email list is dedicated to the use and usually the syntax of Apache configurations so my question may be off topic. If so please direct me to the correct place. I have inherited an Apache configuration that has grown organically over more than a decade. I know there are redirects and

RE: [users@httpd] Only first Redirect recipe works

I guess I am missing why you are structure your redirect like that at all. My way would be: ServerName FuMP.mydomain.com RewriteEngine On LogLevel debug rewrite:trace3 Redirect /foo

RE: [users@httpd] Subdomain of a virtual host ?

, 2017 12:32 PM, "Darryl Philip Baker" <darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>> wrote: Thanks Yehuda, Any affect from the order of the definitions? Darryl Baker Sr. System Administrator Distributed Application Platform Services North

RE: [users@httpd] Subdomain of a virtual host ?

tz.net] Sent: July 17, 2017 11:28 AM To: users@httpd.apache.org Subject: Re: [users@httpd] Subdomain of a virtual host ? You can create it exactly the same way as any other virtual host. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On Jul 17, 2017 12:10 PM, "Da

[users@httpd] Subdomain of a virtual host ?

I have a virtual host configured for george.example.com complete with directory definitions and redirects. I now have a request for washington.george.example.com and they would like the same abilities for the subdomain. I’m unsure as to how to make this work or if this is even possible. I am

RE: [users@httpd] Apache (2.4.26) changing permissions on passed file?

Is the file owned by the user running Apache? Darryl Baker NIT - CI - PIPS - DAPS X76674 -Original Message- From: Kevin Miles [mailto:ke...@delgaldo.co.uk] Sent: July 11, 2017 10:54 AM To: users@httpd.apache.org Subject: [users@httpd] Apache (2.4.26) changing permissions on passwd

RE: [users@httpd] TLS1.2

Turn off SSLv3 and TLS 1.0. Borrowed config: SSLEngine on SSLCertificateFile "/etc/httpd/certs/facultyrecruitingqa_northwestern_edu_cert.cer" SSLCertificateKeyFile "/etc/httpd/certs/key.pem" # "Modern" configuration, defined by the Mozilla Foundation's SSL

[users@httpd] Trouble Securing a directory correctly

I have a directory defined inside a virtual host I want to only be accessible from inside our networks. What is happening is that the rules don't seem to be working as I expect browser that do not match the criteria are getting access. One complexity is that the parent path is secured by our

RE: [users@httpd] Unable to fork new process

Thanks Michele. I was going to investigate Apache HTTPD 2.4 for this issue since we use “systemctl reload httpd” every time we modify our configuration. I’m not sure if we will ever get to 10^6 reload before the system is rebooted for a new kernel or a new version of systemd. We are using

RE: [users@httpd] problem compiling apache httpd server 2.4.25 with openssl 1.1.0c version on oel 6.8

I haven't built Apache 2.4, I'm using vendor's binaries, but my question is after all the time OpenSSL 1.1.0x has been available why is there still an incompatibility? Darryl Baker NIT - CI -DAPS X76674 From: Stéphane Laurencelle [mailto:stephane.laurence...@momentum-tech.ca] Sent: January 26,

RE: [users@httpd] Unable to fork new process

reloads 100 virtualhosts = 1000 reloads Tomorrow I 'll try to test httpd 2.4.x. Other better ideas? Regards On Wed, Jan 25, 2017 at 4:42 PM, Darryl Philip Baker <darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>> wrote: The Red Hat software collection are Red Hat rpms th

RE: [users@httpd] Unable to fork new process

Unable to fork new process On Wed, Jan 25, 2017 at 3:39 PM, Darryl Philip Baker <darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>> wrote: e Due to redhat subscription, we must use redhat's rpms. Now I'm trying the php loop against another web server. Then I will try

RE: [users@httpd] Unable to fork new process

My first suggestion remains, is it possible for you upgrade to the Apache httpd 2.4 from the Red Hat Software Collections? It means adding a new repo to your yum configuration but you would still have Red Hat support as with the default httpd installation. They even put the whole tree in

RE: [users@httpd] Unable to fork new process

First I am assuming you are using the Red Hat distributed version. Is upgrading to Apache httpd 2.4 from the Red Hat Software Collection an option? I can think of several options to detect and automate the restart as a remediation. One would be to script a memory watcher using the free command

RE: [users@httpd] apache 2.4 handling of subdomains with unallowed characters

DNS doesn’t allow underscore in host and domain names so how a URL with an underscore would have ever worked is beyond me. Darryl Baker Sr. System Administrator Northwestern | Information Technology www.it.northwestern.edu

RE: [users@httpd] RE: Thread ratios

6ws=tdje61_VHSXp608oLofeaJnnzo2Sr9_Cdcp70bBEtQ8=cLLrer5gRV9xBw4zdLTCLXxbsRwKnHR6IdcvZa7b7l4=QqmpvHzYyKb4YVUA8E_MvsXbVsQ1mwVV3wHGPmTrwJM=> From: Darryl Philip Baker <darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>> Reply-To: "users@httpd.apache.org<mailto:users@

[users@httpd] RE: Thread ratios

I forgot to mention, just in case this has any effect on the numbers, the OS is RHEL7 using the distributed version of Apache HTTPD. Darryl Baker PMOET -DAPS X76674 From: Darryl Philip Baker Sent: November 18, 2016 9:12 AM To: users@httpd.apache.org Subject: [users@httpd] Thread ratios I am

[users@httpd] Thread ratios

I am converting an older system Apache 2.2 using mpm_prefork to Apache 2.4. I think we would have better performance with mpm_worker or possibly mpm_event. My problem is trying to figure out what is the best ratio of threads per process, the correct way to set that value, and the best value

RE: [users@httpd] Install and Configure Apache on Windows Server

Mea maxima culpa. (Latin for “my bad”) I sent the reply to the wrong message to the list. My apologies to all. Darryl Baker PMOET -DAPS X76674 From: Darryl Philip Baker Sent: November 14, 2016 10:16 AM To: users@httpd.apache.org Subject: RE: [users@httpd] Install and Configure Apache on Windows

RE: [users@httpd] Install and Configure Apache on Windows Server

I have followed the recommendations for Redhat on how to install mod_ssl and restarted Apache. Please let me know if things are working for you now. If not I can look at how I need to change from the Redhat recommendation. Darryl Baker PMOET -DAPS X76674 From: Eric Covener

[users@httpd] Syntax checking an alternate configuration file

I want to syntax check an alternate configuration file in Apache 2.4 but I have hit a snag, "apachectl -t -f {full path name}" and "apachectl -f {full path name} configtest" give me an extra message which I don't need and don't want to see. I looked at the shell script that is apachectl and it

[users@httpd] RE: Apache default page shows up periodically

Is this a single host or some kind of cluster? Darryl Baker From: Rose, John B [mailto:jbr...@utk.edu] Sent: June 30, 2016 1:14 PM To: users@httpd.apache.org Subject: [users@httpd] Apache default page shows up periodically We have a group that has the default Red Hat Apache page show up

RE: [users@httpd] RE: RedirectMatch and spaces

and spaces On Mon, Jun 20, 2016, 12:49 PM Darryl Philip Baker <darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>> wrote: For each place there is a space in the original file name I am using the pattern “[\ |+|%2520%252B]” Is that the correct regular expression for

[users@httpd] RE: RedirectMatch and spaces

For each place there is a space in the original file name I am using the pattern "[\ |+|%2520%252B]" Is that the correct regular expression for what I want to accomplish? Darryl Baker

[users@httpd] ReddirectMatch and spaces

I have been requested to redirect a set of URLs that contain spaces to alternate URLs. I know that URLs with spaces are a "really bad idea (tm)" but the person who sent these out didn't think of asking me first. I have come up with patterns that work using RewriteRule but only for Chrome and

RE: [users@httpd] Rookie Question on Define and Testing the value

on Define and Testing the > value > > On Tue, May 31, 2016 at 3:32 PM, Darryl Philip Baker > <darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>> wrote: > > I’m trying to do some conditional configuration settings. I know > > that I can

[users@httpd] Rookie Question on Define and Testing the value

I'm trying to do some conditional configuration settings. I know that I can use "Define variable value" to set up a variable. I know that "" can be used to test to see if a variable is set or not. I looked at "" as a possibility but since what I am setting are really configuration change and

[users@httpd] Server replication

I the system administrator for HTTP servers in a higher volume environment. We have three Linux hosts serving the many virtual hosts that make up our sites. The only HTTPD configuration difference between the three servers is the local machine's host name and IP address. I would like to have