Re: [users@httpd] Re: spam

2015-04-16 Thread Yann Ylavic
Still the wrong list :) On Thu, Apr 16, 2015 at 1:20 PM, Kevin A. McGrail wrote: > Sorry, it is not our job to provide support for GetResponse.com Their > answer is wrong and as best I can tell they have old rules and need to look > at running sa-update. Telling you to "consult" with us is co

Re: [users@httpd] Fwd: Re: effectiveness of DCC checks?

2015-04-16 Thread Yann Ylavic
Probably the wrong mailing list ;) Regards, Yann. On Thu, Apr 16, 2015 at 12:54 PM, Kevin A. McGrail wrote: >> Vernon, do you have a recommended score for the implementation of DCC >> with SA? There are concerns that bulk mail from good senders has been >> hit by DCC which is completely by desig

Re: [users@httpd] Weird connection issues with mod_proxy_wstunnel

2015-04-15 Thread Yann Ylavic
Hello Marc, On Wed, Apr 15, 2015 at 10:50 AM, Marc Hörsken wrote: > > Now once a browser has upgraded a connection from HTTP to WebSocket traffic, > all traffic is proxied to the WebSocket-server at 127.0.0.1:9001. The > problem is that the browser continues to use that upgraded > WebSocket-conne

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Yann Ylavic
On Thu, Mar 19, 2015 at 9:51 PM, Tim Dunphy wrote: >> mod_status loaded? > > > Yep! > > [root@uszwsls00015la apache2]# apachectl -M | grep status > status_module (shared) > > And so are mod_authz_host: > > [root@uszwsls00015la apache2]# apachectl -M | grep authz_host > authz_host_module (shared)

Re: [users@httpd] Location directive not working when using php-fpm (via mod_fastcgi)

2015-03-17 Thread Yann Ylavic
On Tue, Mar 17, 2015 at 11:40 AM, Theo Belder wrote: > > Please could someone give a good regular expression that would match > /Public and /php-fcgi/Public? Maybe: (/php-fcgi)?/Public Regards, Yann. - To unsubscribe, e-mail: u

Re: [users@httpd] Help with wilcards SSL certificates and virtual hosts

2015-03-12 Thread Yann Ylavic
Hi Quentin, On Thu, Mar 12, 2015 at 3:51 PM, Quentin CHARRAUT wrote: > > My question is, how can I have both *.example.com and *.rc.example.com vhost > working together without any bad certificate errors ? > > Maybe I missed something ? or maybe it’s not possible ? I think you missed ServerAlias

Re: [users@httpd] deny announce.php torrent requests

2015-03-12 Thread Yann Ylavic
On Thu, Mar 12, 2015 at 9:59 AM, Yann Ylavic wrote: > I think you need either an action that drops the connection (deny => > drop, without any response!), or a status code that implies > "Connection: close" (deny,status=503 for example, whereas the default > 403 k

Re: [users@httpd] deny announce.php torrent requests

2015-03-12 Thread Yann Ylavic
Hi, On Thu, Mar 12, 2015 at 4:13 AM, el kalin wrote: > > so far i have tried this: > > with mod_security (within modsecurity.conf): > > SecRule REQUEST_URI "\?info_hash\=" > "phase:2,id:'1002',t:none,rev:1,severity:2,log,deny,msg:'Torrent Announce > Hit Detected'" > > here i can see in the

Re: [users@httpd] CustomLog fails when piped to sed

2015-03-11 Thread Yann Ylavic
On Thu, Mar 12, 2015 at 12:03 AM, Yann Ylavic wrote: > > With Apache 2.4.x, you probably have to use : > > CustomLog "$|/bin/sed -r s/pass/REDACTED/g >> /workplace/tmp/access.log" > common Oups, I meant

Re: [users@httpd] CustomLog fails when piped to sed

2015-03-11 Thread Yann Ylavic
On Wed, Mar 11, 2015 at 11:10 PM, Debajit Adhikary wrote: > > CustomLog "|/bin/sed -r s/pass/REDACTED/g >> /workplace/tmp/access.log" common > > However, when I make a request to Apache, I get an error saying > > /bin/sed: can't read >>: No such file or directory > > How can I get this working? (I

Re: [users@httpd] Decompress requests using mod_deflate and uset Content-Encoding header

2015-03-10 Thread Yann Ylavic
On Tue, Mar 10, 2015 at 10:25 AM, Yann Ylavic wrote: > Hi Dennis, > > On Tue, Mar 10, 2015 at 10:07 AM, wrote: >> >> But my current problem is that I can't get the decompression of the requests >> working. > > SetInputFilter INFLATE (instead of DEFLATE)

Re: [users@httpd] Decompress requests using mod_deflate and uset Content-Encoding header

2015-03-10 Thread Yann Ylavic
Hi Dennis, On Tue, Mar 10, 2015 at 10:07 AM, wrote: > > But my current problem is that I can't get the decompression of the requests > working. SetInputFilter INFLATE (instead of DEFLATE)? Regards, Yann. - To unsubscribe, e-

Re: [users@httpd] Prevent caching of 404 responses

2015-02-26 Thread Yann Ylavic
On Thu, Feb 26, 2015 at 1:00 PM, Yann Ylavic wrote: > On Thu, Feb 26, 2015 at 10:21 AM, Paul Beckett > wrote: >> Is there any way to restrict what HTTP response codes are cached by Apache, >> ideally I would like to only cache 200,301,302 responses. > > It is not

Re: [users@httpd] Prevent caching of 404 responses

2015-02-26 Thread Yann Ylavic
On Thu, Feb 26, 2015 at 10:21 AM, Paul Beckett wrote: > Is there any way to restrict what HTTP response codes are cached by Apache, > ideally I would like to only cache 200,301,302 responses. It is not possible to specify some particular status mod_cache would or not cache, it is solely controlle

Re: [users@httpd] Redirection via HTTPS

2015-02-08 Thread Yann Ylavic
On Sun, Feb 8, 2015 at 9:03 PM, Yann Ylavic wrote: > On Sun, Feb 8, 2015 at 7:36 AM, YUSUI T wrote: >> >> root@hostname:~# tail -n 6 /etc/apache2/mods-available/ssl.conf >> >> ServerName www.mydomain.com >> Redirect / https://www.mydomain.

Re: [users@httpd] Redirection via HTTPS

2015-02-08 Thread Yann Ylavic
On Sun, Feb 8, 2015 at 7:36 AM, YUSUI T wrote: > > root@hostname:~# tail -n 6 /etc/apache2/mods-available/ssl.conf > > ServerName www.mydomain.com > Redirect / https://www.mydomain.com/ > You probably want to redirect to https when the request is plain http, hence : above. -

Re: [users@httpd] Proxy pass

2015-01-22 Thread Yann Ylavic
Hi, On Wed, Jan 21, 2015 at 7:25 PM, Chris Arnold wrote: [...] > > [Wed Jan 21 12:50:06.641654 2015] [ssl:info] [pid 3229] [remote > 192.168.123.200:8443] AH02003: SSL Proxy connect failed > [Wed Jan 21 12:50:06.641719 2015] [ssl:info] [pid 3229] SSL Library Error: > error:100AE081:elliptic cur

Re: [users@httpd] Apache 2.4 create a huge amount of shared memory segments

2014-12-19 Thread Yann Ylavic
Hi Sylvain, On Fri, Dec 19, 2014 at 11:04 AM, Sylvain Goulmy wrote: > > My configuration is currently defining 338 virtual hosts and 169 proxy > balancers. > > The balancers are defined in the main section. Each virtual host refers only > one balancer. > > Here what i notice : > - Apache creates

Re: [users@httpd] Apache 2.4 create a huge amount of shared memory segments

2014-12-18 Thread Yann Ylavic
On Fri, Dec 19, 2014 at 12:06 AM, Yann Ylavic wrote: > If you can manage to recompile the APR library used by your Apache 2.4 > (you probably did that already since 2.4 does not seem to be the > version packaged with RHEL 6.4), you can use "./configure > --enable-posix-shm ..

Re: [users@httpd] Apache 2.4 create a huge amount of shared memory segments

2014-12-18 Thread Yann Ylavic
If you can manage to recompile the APR library used by your Apache 2.4 (you probably did that already since 2.4 does not seem to be the version packaged with RHEL 6.4), you can use "./configure --enable-posix-shm ..." to use another shared memory mechanism than the default one (IPC SysV) which is l

Re: [users@httpd] Trouble upgrading to 2.2.29 from 2.2.8 - mod_deflate error

2014-11-01 Thread Yann Ylavic
On Sat, Nov 1, 2014 at 10:47 PM, Yann Ylavic wrote: > At runtime, it might also be necessary to link with this newly > installed APR using something like LD_LIBRARY. I meant "LD_LIBRARY_PATH=/path/to/httpd-2.2.29/lib /path/to/httpd-2.2.2

Re: [users@httpd] Trouble upgrading to 2.2.29 from 2.2.8 - mod_deflate error

2014-11-01 Thread Yann Ylavic
Hello Christopher, there seem to be an old APR library (< v1.3.0) installed on your system (/usr/local/apache2/include?). What ./configure options did you use? You probably need to compile (and run) with the APR embedded in the httpd-2.2.29 archive using: ./configure --with-included-apr At r

Re: [users@httpd] Interrupted system call: Failed to acquire SSL session cache lock

2014-07-16 Thread Yann Ylavic
On Wed, Jul 16, 2014 at 1:30 PM, Jeff Trawick wrote: > I won't disagree with you at all Yann, but in the interest of promoting the > idea that you don't actually have to use all the configuration httpd offers: > > If the poster had not made a change from the default based on some > developer's sil

Re: [users@httpd] Interrupted system call: Failed to acquire SSL session cache lock

2014-07-16 Thread Yann Ylavic
On Wed, Jul 16, 2014 at 12:49 PM, Jeff Trawick wrote: > On Jul 15, 2014 8:46 PM, "Tomlinson, Stuart" wrote: >> >> Are there any expected negative impacts from using "sysvsem" instead of >> "sem" (which I understand defaults to "posixsem" - described in the >> documentation as "elegant", whereas "

Re: [users@httpd] 200 OK for a network error?

2014-07-15 Thread Yann Ylavic
Hello, I think this has been fixed in 2.4.8 with this changelog: *) core: Detect incomplete request and response bodies, log an error and forward it to the underlying filters. PR 55475 [Yann Ylavic] A backport is proposed for next 2.2.x release and is waiting for approvals. I will update

<    1   2   3   4   5