[us...@httpd] Re: Caching is serving up the wrong user content to some users who log in.

2010-06-21 Thread Nicholas Sherlock
user-specific content. It's not just your caching server, there are ISPs that will cache your pages that have no caching directives too, exposing sessions to other users who use the same ISP. We saw it on our website until we added the correct directives to block caching. Cheers, Nicholas Sherlock

[us...@httpd] Re: Internet Explorer 6

2010-05-12 Thread Nicholas Sherlock
a mere 2% of our total users use IE6. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail

[us...@httpd] Re: SA punycode in apache2

2010-05-09 Thread Nicholas Sherlock
/listinfo Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org

[us...@httpd] Re: HTTPS only for login page (when apache front tomcat)

2010-04-22 Thread Nicholas Sherlock
proportion of users use the same password for everything online. You don't want a login sniffed from your site to be used to breach the user's bank account. Cheers, Nicholas Sherlock - The official User-To-User support forum

[us...@httpd] Dynamically tune MaxKeepAliveRequests?

2010-04-18 Thread Nicholas Sherlock
to stop people from monopolizing their child, and to give other people a chance to connect. So is there any Apache module or settings which dynamically tune the KeepAlive settings based on the current load situation? Cheers, Nicholas Sherlock

[us...@httpd] Re: Apache 4.3 HTTP Server Configuration

2010-04-01 Thread Nicholas Sherlock
, and spamassassin.org and myfaces.org, for historical reasons. Looks like they ripped the whole thing from Apache's site. They even reference this address: http://apache-project.webs.com/center.jpg I'm pretty sure Apache doesn't host anything on the free hosting provider Webs.com Cheers, Nicholas Sherlock

[us...@httpd] Re: Safety access to Apache web page

2010-03-22 Thread Nicholas Sherlock
say? Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org

[us...@httpd] Re: troubleshooting apache server

2010-01-30 Thread Nicholas Sherlock
through my Linksys WRTP54G router. I can ssh in to my server no problem, but I can't access the admin pages for SugarCRM or for Mailman. Server running Windows? Go into the firewall settings and add entries to allow traffic on those ports from the Internet. Cheers, Nicholas Sherlock

[us...@httpd] Re: troubleshooting apache server

2010-01-30 Thread Nicholas Sherlock
fine. I can see your SugarCRM login page at https://fyrenice.com. There's nothing listening on port 80, though. You should check your Apache error log, and double check your port-forwarding configuration. Cheers, Nicholas Sherlock

[us...@httpd] Re: Runaway Apache Process

2010-01-28 Thread Nicholas Sherlock
hit every four minutes. From the log snippet posted, it seems to be a simple mixture of blogs and forums. Hardly supercomputer stuff. A slow single-core would serve it just fine. Cheers, Nicholas Sherlock - The official User

[us...@httpd] Re: Runaway Apache Process

2010-01-26 Thread Nicholas Sherlock
to wait for the lock. Load skyrockets. Connect to MySQL when something like this happens and run SHOW FULL PROCESSLIST. Look for long-running queries. Cheers, Nicholas Sherlock - The official User-To-User support forum

[us...@httpd] Re: How to protect apache againg bench marking attack ?

2010-01-12 Thread Nicholas Sherlock
-protection-in-mod.html Sounds very promising. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e

[us...@httpd] Re: Mod rewrite

2010-01-09 Thread Nicholas Sherlock
for s1 to your server1 host definition. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail

[us...@httpd] Re: Request concurrency issue

2009-11-22 Thread Nicholas Sherlock
are you sending? Check with something like the Live HTTP Headers plugin for Firefox. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org

[us...@httpd] Re: Request concurrency issue

2009-11-22 Thread Nicholas Sherlock
Nicholas Sherlock wrote: Toomas Aas wrote: Say, I open a browser and enter request for http://mysite.com/LargeTextFile.txt The file begins to load in the browser window. While the file is loading, I open another browser tab and enter the same request there. The file in second tab doesn't

[us...@httpd] Re: PHP5

2009-09-23 Thread Nicholas Sherlock
Silvio Siefke wrote: Error: it comes a window what say The requested operation has failed. No log entry. Check the applications section of the windows Event Viewer. Startup errors can end up there in some situations. Cheers, Nicholas Sherlock

[us...@httpd] Re: Apace2 stops serving pages.

2009-09-23 Thread Nicholas Sherlock
times out and everything goes back to normal. On MySQL, this would be diagnosed with a quick SHOW PROCESSLIST, I'm not sure about PostgreSQL though. Cheers, Nicholas Sherlock - The official User-To-User support forum

[us...@httpd] Re: Apache configuration for a high load

2009-09-05 Thread Nicholas Sherlock
configuration? 1000 hits per minute is not all that much, but your hardware plays a big role in choosing a good configuration. How much memory do you have available? What CPU are you running on? Cheers, Nicholas Sherlock

[us...@httpd] Re: Map every request to a single script

2009-08-15 Thread Nicholas Sherlock
to the location of your script. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr

[us...@httpd] Re: guidance on how to track down crazy apache processes

2009-08-12 Thread Nicholas Sherlock
is the maximum number of *spare* servers, that is, servers that are not serving clients but are instead sitting there doing nothing. MaxClients is the parameter which controls the maximum number of (busy or idle) Apache processes. Cheers, Nicholas Sherlock

[us...@httpd] Re: New user/syntax error message

2009-08-12 Thread Nicholas Sherlock
. It's also missing a slash after C: (what the heck generated that broken path?) LoadModule php5_module C:/john/documents/php-5.2.10-Win32/php5apache2_2.dll Cheers, Nicholas Sherlock - The official User-To-User support

[us...@httpd] Re: restrict access to files

2009-08-10 Thread Nicholas Sherlock
for images embedded in your webpages. For instance, I think one of the popular Norton security programs does this, many visitors probably don't even know it's on their computer. So if you solve your problem, those clients will never be able to see the images on your website. Cheers, Nicholas

[us...@httpd] Re: Don't require authentication on a subfolder

2009-08-01 Thread Nicholas Sherlock
, and IS case-sensitive. In that case, /public and /PUBLIC are 2 different URLs. Ah, thanks for pointing that out! My only Windows Apache server is my development machine, but that little bit of information could be really critical at some point. Cheers, Nicholas Sherlock

[us...@httpd] Re: Low priced certificate?

2009-07-22 Thread Nicholas Sherlock
, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest

[us...@httpd] Re: Low priced certificate?

2009-07-22 Thread Nicholas Sherlock
carefully trained the user in advance to ignore all security warnings and accept the rogue certificate. What a waste of time. The only thing you're protecting against is a passive attacker. Cheers, Nicholas Sherlock

[us...@httpd] Re: High load using memcache and 9G tmpfs

2009-07-20 Thread Nicholas Sherlock
diagnosed the problem with 'iotop' - it gives per-process IO stats. This is probably not the same problem you're having, but iotop is still a useful tool to identify IO competition when you can't find the culprit based on CPU-time. Cheers, Nicholas Sherlock

[us...@httpd] Re: High load using memcache and 9G tmpfs

2009-07-20 Thread Nicholas Sherlock
making do with a slow single-core machine at the moment, with a lot of very persistent site visitors, and our load average rarely drops below 50.. :). Cheers, Nicholas Sherlock - The official User-To-User support forum

[us...@httpd] Re: Running php scripts outside of document root

2009-05-25 Thread Nicholas Sherlock
be able to find ways to exploit it more easily. Being in the document root does not imply that people will be able to read your code. If they browse to the file, they'll just see the output from the script, not the source itself. Cheers, Nicholas Sherlock

[us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Nicholas Sherlock
possibly assist in such a transaction? Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users

[us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Nicholas Sherlock
will only block this _specific_ infection, and won't patch the gaping holes in your server that are letting it through in the first place. Secure your FTP credentials and update the PHP packages you are using. Cheers, Nicholas Sherlock

[us...@httpd] Re: Remote Browsing of Other Ports than Port 80

2009-04-24 Thread Nicholas Sherlock
ports 8080 or 8085. What's your firewall and routing configuration like? Have you opened and/or forwarded those extra ports? Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project

[us...@httpd] mod_cache sending document along with 304 Not Modified!

2009-04-23 Thread Nicholas Sherlock
is not in the response. Why is this happening? You can try it out on my live server, using the same URL as I did. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http

[us...@httpd] Re: PHP script as Apache filter or callback

2009-03-14 Thread Nicholas Sherlock
in the directory you set it for is run. It will only work for documents which PHP is set to parse, of course, so it won't help out for requests for other objects like images. Cheers, Nicholas Sherlock - The official User

[us...@httpd] Re: questions on TCP connections and Sessions

2009-02-23 Thread Nicholas Sherlock
the connection, the proxy disconnects from the web server, and vice versa. The only thing that the proxy gets to see is the call to CONNECT, everything else it cannot view because it is encrypted and it does not have the key. Cheers, Nicholas Sherlock

[us...@httpd] Re: optimizing apache web server

2009-02-10 Thread Nicholas Sherlock
with low CPU usage. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr

[us...@httpd] Re: How can i monitor Apache

2009-02-04 Thread Nicholas Sherlock
this too. I could find plenty of solutions which could profile a given PHP file for me if I manually run it as a test. But I'm far more interested in the actual stats observed with real data on the live server. Cheers, Nicholas Sherlock

[us...@httpd] Re: Help - Name Server - Maybe

2009-02-03 Thread Nicholas Sherlock
much better. I have had good luck with: http://www.dyndns.com/ We've already established that his domain name is correctly resolving to his IP address. If his IP address is dynamic he may also want to look into a dynamic DNS solution. Cheers, Nicholas Sherlock

[us...@httpd] Re: Help - Name Server - Maybe

2009-02-02 Thread Nicholas Sherlock
as of now - what's the exact configuration that you have for your port forwarding? To have the domain name resolve to your local IP address on your network, you'll need to add it as an entry in your HOST file. Cheers, Nicholas Sherlock

[us...@httpd] Re: Help - Name Server - Maybe

2009-02-01 Thread Nicholas Sherlock
thing is I am not understanding the your host does this mean me as in my computer or the ISPs computer where the names server is? I was talking about your computer, the one that Apache is running on. Cheers, Nicholas Sherlock

[us...@httpd] Re: Help - Name Server - Maybe

2009-02-01 Thread Nicholas Sherlock
settings for your network adapter. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users

[us...@httpd] Re: Help - Name Server - Maybe

2009-02-01 Thread Nicholas Sherlock
computer needs to be configured to have the same subnet mask. Use the same IP address as the router, but change the last digit to something else, (like 40), so that you aren't in conflict with the router. Cheers, Nicholas Sherlock

[us...@httpd] Re: Help - Name Server - Maybe

2009-02-01 Thread Nicholas Sherlock
? No, that's the wrong tab. You want the settings in Applications and Gaming. The first page there is Single port forwarding. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See

[us...@httpd] Re: Help - Name Server - Maybe

2009-01-31 Thread Nicholas Sherlock
know which one is which by default). This is called port forwarding. Your router manual or Google will tell you more, or poke around in the administration panel for it. Cheers, Nicholas Sherlock - The official User-To-User

[us...@httpd] Re: Help - Name Server - Maybe

2009-01-31 Thread Nicholas Sherlock
Nicholas Sherlock wrote: Michael Rogers wrote: HI! For the last 6 months I have fiddled around trying to make Apache connect to the web or the web connect to Apache. It does just fine on my home network when I type in localhost! But if I type in www.michaelsrogers.com http

[us...@httpd] Re: can a proxy helps to get an IP of another coubtry ?

2009-01-28 Thread Nicholas Sherlock
how to accomplish the task with Apache. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail

[us...@httpd] Re: can a proxy helps to get an IP of another coubtry ?

2009-01-28 Thread Nicholas Sherlock
J. Bakshi wrote: Nicholas Sherlock wrote: If you were running a SOCKS proxy in Germany, you could use that successfully (I presume that the transfer happens over HTTPS). Not sure how to accomplish the task with Apache. Thanks Nicholas, I can install the proxy on my dedicated linux server

[us...@httpd] mod_headers: Don't add a header if it is already present

2009-01-10 Thread Nicholas Sherlock
if the response (from PHP) already includes a Cache-Control header? I could not work anything out with the conditional controls that the documentation mentions for the 'Header' directive, but perhaps I'm just a little dense. Cheers, Nicholas Sherlock

[us...@httpd] Re: mod_headers: Don't add a header if it is already present

2009-01-10 Thread Nicholas Sherlock
Nicholas Sherlock wrote: However, some new pages I am now developing are cache-aware, and supply their own Cache-Control headers which should not include the private modifier. Is it possible for mod_headers to not create this header if the response (from PHP) already includes a Cache-Control

[us...@httpd] Re: Apache 2.2.4 caching problem

2008-12-21 Thread Nicholas Sherlock
examine every request along with the request and response headers. Cheers, Nicholas Sherlock - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more

[EMAIL PROTECTED] Expected load

2008-12-07 Thread Nicholas Sherlock
10 MaxClients 120 MaxRequestsPerChild 0 We also have these settings enabled: KeepAlive On KeepAliveTimeout 15 MaxKeepAliveRequests 100 Timeout 300 Cheers, Nicholas Sherlock - The official User-To-User support forum

[EMAIL PROTECTED] Re: Expected load

2008-12-07 Thread Nicholas Sherlock
Nicholas Sherlock wrote: I've recently set up a 32-bit Apache 2.2 server on Ubuntu sitting on an Amazon small instance (1.7GB of memory, single core, 1.2GHz Opteron equivalent). While re-reading my post I noticed that I have no clear idea about the performance metrics that I am trying