I use fail2ban quite successfully. It’s quite scary how many different IP’s are
ending up banned.
Sent from my iPhone
> On 25 Aug 2022, at 20:03, Frank Gingras wrote:
>
> Generally speaking, it's a bit rude to hijack someone else's thread.
>
> To answer the new question, there are geoIP modul
Did you find the info on loggly.com?
Not sure if it covers precisely your requirements.
Sent from my iPhone
On 12 Apr 2022, at 11:59, Marc wrote:
>>> i went through this issue the hard way
>>
>> Urgh - thanks for the comprehensive reply.
>>
>>> there does not seem to be anything at all as apa
On 12/11/2021 20:58, Eric Covener wrote:
# the following is for rewritting under FastCGI
RewriteRule ^(.*)$ index.php?/$1 [L]
I don't know what this is supposed to do, but it doesn't pass the
request to php-fpm. There's no information about where php-fpm is
listening there. I suggest a d
Hi Team,
My software: ubuntu 20.04, apache 2.4.41, php 7.4, codeigniter 3.1.16
I have an app which works fine with mpm_prefork and mod_php7.4. However,
in anticipation of a lot of concurrent
sessions I have just looked at improving performance and using memory
more efficiently by changing to
JFI
The important ssl.conf options I ended up with (ie no weak ciphers)...
as of 27Aug21
SSLCipherSuite
DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-GCM-SHA256
Apache fans,
Delighted so report I have got to the bottom of my problem.
So to share a few nuggets!
My confs-enabled/ssl.conf was being overridden by a LetsEncrypt
ssl-options include in the VirtualHost.
Once I have commented out that, I made changes to ssl.conf which were
reflected in the Q
y and I cannot see any
reference to SSL. The other tool we use is fail2ban but I am pretty sure
that's not causing this either.
Still slightly baffled as how to progress!
Thanks, Paul
On 26/08/2021 15:35, Jim Albert wrote:
On 8/26/2021 6:16 AM, Paul Claridge wrote:
Hi Team,
I am
Hi Team,
I am trying to configure recommendations from a pentest with regard to
excluding weak ciphers.
My ssl labs report shows the following:
Protocols
TLS 1.3 Yes
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No
SSL 3 No
SSL 2 No
Cipher Suites
# TLS 1.3 (suites in server-preferred
On 07/05/2021 07:02, Sander Smeenk wrote:
Quoting emma davis (emma.davi...@aol.com.INVALID):
It is a domain name identification issue by Apache.
May be it a known issue.
Apache has the concent of a 'default' virtual host. Any request to a
domain not explicitly confiugred for that ip/port com
On 03/05/2021 12:34, Eric Covener wrote:
I have configured logging in both VH's but requests are appearing in
my
SSL log and not the (different) localhost (http) log.
I think I might be missing something fundamental here about the way
localhost is treated?
Can you paste the output of apachect
Esteemed helpers,
I have a Ubuntu 20.04 LAMP server running apache2 2.4.41
I have a VirtualHost on 443 with a letsencrypt certificate, and it works
fine. I have constructed a page and proved it renders on this
VirtualHost. The page displays a bootstrap modal.
What I want to do is render that
Hi Team, I have been battling this for several weeks now and am
completely stumped, so I am hoping for some inspiration!
We are using standard ubuntu 14.02 lamp stack, but reverted back to
php5.
We use backlevel Codeigniter framework (v2).
My latest task is to integrate Paypal Express checko
Hi List - newbie so please be gentle!
I am trying to get a LAMP server (Ubuntu
14.02/PHP5.6/Mysql/CodeIgniter2.2) installation to process a callback
from "WebPurify(callback)" user-agent.
I can see the callback in the access log.
If I paste the callback string into my browser everything work
13 matches
Mail list logo