Re: [users@httpd] Weird connection issues with mod_proxy_wstunnel

2015-04-15 Thread Yann Ylavic
Hello Marc, On Wed, Apr 15, 2015 at 10:50 AM, Marc Hörsken i...@marc-hoersken.de wrote: Now once a browser has upgraded a connection from HTTP to WebSocket traffic, all traffic is proxied to the WebSocket-server at 127.0.0.1:9001. The problem is that the browser continues to use that upgraded

Re: [users@httpd] apache 2.4 allow by IP

2015-03-19 Thread Yann Ylavic
On Thu, Mar 19, 2015 at 9:51 PM, Tim Dunphy bluethu...@gmail.com wrote: mod_status loaded? Yep! [root@uszwsls00015la apache2]# apachectl -M | grep status status_module (shared) And so are mod_authz_host: [root@uszwsls00015la apache2]# apachectl -M | grep authz_host authz_host_module

Re: [users@httpd] Location directive not working when using php-fpm (via mod_fastcgi)

2015-03-17 Thread Yann Ylavic
On Tue, Mar 17, 2015 at 11:40 AM, Theo Belder t.bel...@trends.nl wrote: Please could someone give a good regular expression that would match /Public and /php-fcgi/Public? Maybe: (/php-fcgi)?/Public Regards, Yann. - To

Re: [users@httpd] deny announce.php torrent requests

2015-03-12 Thread Yann Ylavic
On Thu, Mar 12, 2015 at 9:59 AM, Yann Ylavic ylavic@gmail.com wrote: I think you need either an action that drops the connection (deny = drop, without any response!), or a status code that implies Connection: close (deny,status=503 for example, whereas the default 403 keeps the connection

Re: [users@httpd] deny announce.php torrent requests

2015-03-12 Thread Yann Ylavic
Hi, On Thu, Mar 12, 2015 at 4:13 AM, el kalin ka...@el.net wrote: so far i have tried this: with mod_security (within modsecurity.conf): SecRule REQUEST_URI \?info_hash\= phase:2,id:'1002',t:none,rev:1,severity:2,log,deny,msg:'Torrent Announce Hit Detected' here i can see in the

Re: [users@httpd] Help with wilcards SSL certificates and virtual hosts

2015-03-12 Thread Yann Ylavic
Hi Quentin, On Thu, Mar 12, 2015 at 3:51 PM, Quentin CHARRAUT quentin.charr...@inova-software.com wrote: My question is, how can I have both *.example.com and *.rc.example.com vhost working together without any bad certificate errors ? Maybe I missed something ? or maybe it’s not possible ?

Re: [users@httpd] CustomLog fails when piped to sed

2015-03-11 Thread Yann Ylavic
On Wed, Mar 11, 2015 at 11:10 PM, Debajit Adhikary deba...@outlook.com wrote: CustomLog |/bin/sed -r s/pass/REDACTED/g /workplace/tmp/access.log common However, when I make a request to Apache, I get an error saying /bin/sed: can't read : No such file or directory How can I get this

Re: [users@httpd] CustomLog fails when piped to sed

2015-03-11 Thread Yann Ylavic
On Thu, Mar 12, 2015 at 12:03 AM, Yann Ylavic ylavic@gmail.com wrote: With Apache 2.4.x, you probably have to use : CustomLog $|/bin/sed -r s/pass/REDACTED/g /workplace/tmp/access.log common Oups, I meant |$..., with the $ *after

Re: [users@httpd] Decompress requests using mod_deflate and uset Content-Encoding header

2015-03-10 Thread Yann Ylavic
On Tue, Mar 10, 2015 at 10:25 AM, Yann Ylavic ylavic@gmail.com wrote: Hi Dennis, On Tue, Mar 10, 2015 at 10:07 AM, dennis.luna...@t-systems.com wrote: But my current problem is that I can't get the decompression of the requests working. SetInputFilter INFLATE (instead of DEFLATE

Re: [users@httpd] Decompress requests using mod_deflate and uset Content-Encoding header

2015-03-10 Thread Yann Ylavic
Hi Dennis, On Tue, Mar 10, 2015 at 10:07 AM, dennis.luna...@t-systems.com wrote: But my current problem is that I can't get the decompression of the requests working. SetInputFilter INFLATE (instead of DEFLATE)? Regards, Yann.

Re: [users@httpd] Apache 2.4 create a huge amount of shared memory segments

2014-12-19 Thread Yann Ylavic
Hi Sylvain, On Fri, Dec 19, 2014 at 11:04 AM, Sylvain Goulmy sygou...@gmail.com wrote: My configuration is currently defining 338 virtual hosts and 169 proxy balancers. The balancers are defined in the main section. Each virtual host refers only one balancer. Here what i notice : -

Re: [users@httpd] Apache 2.4 create a huge amount of shared memory segments

2014-12-18 Thread Yann Ylavic
If you can manage to recompile the APR library used by your Apache 2.4 (you probably did that already since 2.4 does not seem to be the version packaged with RHEL 6.4), you can use ./configure --enable-posix-shm ... to use another shared memory mechanism than the default one (IPC SysV) which is

Re: [users@httpd] Apache 2.4 create a huge amount of shared memory segments

2014-12-18 Thread Yann Ylavic
On Fri, Dec 19, 2014 at 12:06 AM, Yann Ylavic ylavic@gmail.com wrote: If you can manage to recompile the APR library used by your Apache 2.4 (you probably did that already since 2.4 does not seem to be the version packaged with RHEL 6.4), you can use ./configure --enable-posix-shm

Re: [users@httpd] Trouble upgrading to 2.2.29 from 2.2.8 - mod_deflate error

2014-11-01 Thread Yann Ylavic
Hello Christopher, there seem to be an old APR library ( v1.3.0) installed on your system (/usr/local/apache2/include?). What ./configure options did you use? You probably need to compile (and run) with the APR embedded in the httpd-2.2.29 archive using: ./configure --with-included-apr At

Re: [users@httpd] Trouble upgrading to 2.2.29 from 2.2.8 - mod_deflate error

2014-11-01 Thread Yann Ylavic
On Sat, Nov 1, 2014 at 10:47 PM, Yann Ylavic ylavic@gmail.com wrote: At runtime, it might also be necessary to link with this newly installed APR using something like LD_LIBRARY. I meant LD_LIBRARY_PATH=/path/to/httpd-2.2.29/lib /path/to/httpd-2.2.29/bin/httpd

Re: [users@httpd] Interrupted system call: Failed to acquire SSL session cache lock

2014-07-16 Thread Yann Ylavic
On Wed, Jul 16, 2014 at 12:49 PM, Jeff Trawick traw...@gmail.com wrote: On Jul 15, 2014 8:46 PM, Tomlinson, Stuart st0...@intl.att.com wrote: Are there any expected negative impacts from using sysvsem instead of sem (which I understand defaults to posixsem - described in the documentation as

Re: [users@httpd] Interrupted system call: Failed to acquire SSL session cache lock

2014-07-16 Thread Yann Ylavic
On Wed, Jul 16, 2014 at 1:30 PM, Jeff Trawick traw...@gmail.com wrote: I won't disagree with you at all Yann, but in the interest of promoting the idea that you don't actually have to use all the configuration httpd offers: If the poster had not made a change from the default based on some

Re: [users@httpd] 200 OK for a network error?

2014-07-15 Thread Yann Ylavic
Hello, I think this has been fixed in 2.4.8 with this changelog: *) core: Detect incomplete request and response bodies, log an error and forward it to the underlying filters. PR 55475 [Yann Ylavic] A backport is proposed for next 2.2.x release and is waiting for approvals. I will update

<    1   2   3   4   5