Re: [users@httpd] Re: How Do I Prevent Repetitive Hits

2022-08-25 Thread Paul Claridge
I use fail2ban quite successfully. It’s quite scary how many different IP’s are ending up banned. Sent from my iPhone > On 25 Aug 2022, at 20:03, Frank Gingras wrote: > > Generally speaking, it's a bit rude to hijack someone else's thread. > > To answer the new question, there are geoIP modul

Re: [users@httpd] Log to syslog?

2022-04-12 Thread Paul Claridge
Did you find the info on loggly.com? Not sure if it covers precisely your requirements. Sent from my iPhone On 12 Apr 2022, at 11:59, Marc wrote: >>> i went through this issue the hard way >> >> Urgh - thanks for the comprehensive reply. >> >>> there does not seem to be anything at all as apa

Re: [users@httpd] Implementing mpm_event with php-fpm has broken my codeigniter app

2021-11-12 Thread Paul Claridge
On 12/11/2021 20:58, Eric Covener wrote: # the following is for rewritting under FastCGI RewriteRule ^(.*)$ index.php?/$1 [L] I don't know what this is supposed to do, but it doesn't pass the request to php-fpm. There's no information about where php-fpm is listening there. I suggest a d

[users@httpd] Implementing mpm_event with php-fpm has broken my codeigniter app

2021-11-12 Thread Paul Claridge
Hi Team, My software: ubuntu 20.04, apache 2.4.41, php 7.4, codeigniter 3.1.16 I have an app which works fine with mpm_prefork and mod_php7.4. However, in anticipation of a lot of concurrent sessions I have just looked at improving performance and using memory more efficiently by changing to

Re: [users@httpd] SSL Cipher configuration issue

2021-08-27 Thread Paul Claridge
JFI The important ssl.conf options I ended up with (ie no weak ciphers)... as of 27Aug21 SSLCipherSuite DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-GCM-SHA256

Re: [users@httpd] SSL Cipher configuration issue

2021-08-27 Thread Paul Claridge
Apache fans, Delighted so report I have got to the bottom of my problem. So to share a few nuggets! My confs-enabled/ssl.conf was being overridden by a LetsEncrypt ssl-options include in the VirtualHost. Once I have commented out that, I made changes to ssl.conf which were reflected in the Q

Re: [users@httpd] SSL Cipher configuration issue

2021-08-26 Thread Paul Claridge
y and I cannot see any reference to SSL. The other tool we use is fail2ban but I am pretty sure that's not causing this either. Still slightly baffled as how to progress! Thanks, Paul On 26/08/2021 15:35, Jim Albert wrote: On 8/26/2021 6:16 AM, Paul Claridge wrote: Hi Team, I am

[users@httpd] SSL Cipher configuration issue

2021-08-26 Thread Paul Claridge
Hi Team, I am trying to configure recommendations from a pentest with regard to excluding weak ciphers. My ssl labs report shows the following: Protocols TLS 1.3 Yes TLS 1.2 Yes TLS 1.1 No TLS 1.0 No SSL 3 No SSL 2 No Cipher Suites # TLS 1.3 (suites in server-preferred

Re: [users@httpd] apache routing issue

2021-05-07 Thread Paul Claridge
On 07/05/2021 07:02, Sander Smeenk wrote: Quoting emma davis (emma.davi...@aol.com.INVALID): It is a  domain name identification issue by Apache. May be it a known issue. Apache has the concent of a 'default' virtual host. Any request to a domain not explicitly confiugred for that ip/port com

Re: [users@httpd] Trying to serve pages to localhost

2021-05-03 Thread Paul Claridge
On 03/05/2021 12:34, Eric Covener wrote: I have configured logging in both VH's but requests are appearing in my SSL log and not the (different) localhost (http) log. I think I might be missing something fundamental here about the way localhost is treated? Can you paste the output of apachect

[users@httpd] Trying to serve pages to localhost

2021-05-03 Thread Paul Claridge
Esteemed helpers, I have a Ubuntu 20.04 LAMP server running apache2 2.4.41 I have a VirtualHost on 443 with a letsencrypt certificate, and it works fine. I have constructed a page and proved it renders on this VirtualHost. The page displays a bootstrap modal. What I want to do is render that

[users@httpd] paypal/php apache2 integration problem

2017-06-09 Thread Paul Claridge
Hi Team, I have been battling this for several weeks now and am completely stumped, so I am hoping for some inspiration! We are using standard ubuntu 14.02 lamp stack, but reverted back to php5. We use backlevel Codeigniter framework (v2). My latest task is to integrate Paypal Express checko

[users@httpd] Apache fails to process a particular user-agent

2017-04-09 Thread Paul Claridge
Hi List - newbie so please be gentle! I am trying to get a LAMP server (Ubuntu 14.02/PHP5.6/Mysql/CodeIgniter2.2) installation to process a callback from "WebPurify(callback)" user-agent. I can see the callback in the access log. If I paste the callback string into my browser everything work