Re: [us...@httpd] Validating HTTP requests

2009-03-09 Thread Ivars Strazdiņš
Florent Georges wrote: Ivars Strazdiņš wrote: Ivars, mod_security ? http://www.modsecurity.org/ Thank you. But if I am right, this allows one to plug its own validation rules in Apache (or use built-in rules from ModSecurity but those are oriented to the application scope

Re: [us...@httpd] Validating HTTP requests

2009-03-09 Thread Ivars Strazdiņš
Florent Georges wrote: I am looking for an HTTPD module. I've made a few searches within the repository but didn't find anything. So just in case I missed something... ... mod_security ? http://www.modsecurity.org/ Ivars -

Re: [us...@httpd] mod_proxy_ajp: (120010)APR does not understand this error code: proxy: AJP: request failed to (null) (*)

2009-03-05 Thread Ivars Strazdiņš
Could this help you? http://www.jboss.org/community/docs/DOC-12529 Ivars Going over the 8K AJP headers limits: The default size of a AJP package is 8K as the http headers are sent only in the first packet it could be needed to overcome the limit. To reach this you need to add packetSiz

[us...@httpd] lost headers in reply from server - possible mod_balancer problem?

2009-02-28 Thread Ivars Strazdiņš
Hello all, I use apache reverse proxy connected to two tomcat servers via ajp protocol and mod_proxy_balancer . All connections to apache are ssl only. In a very brief diagram: [client] <-- ssl --> [apache reverse proxy] <-- (balancer, ajp protocol) --> [tomcat1 or tomcat2] The problem app