[us...@httpd] Apache under DOS

2009-07-08 Thread nima chavooshi
Hi Recently attackers use new attack for DOS apache.for example see http://isc.sans.org/diary.html?storyid=6601rss . Is there any solution for prevent this DOS attack? what solution do you suggest for limit concurrent connection? thanks for any help or guidance -- N.Chavoshi

[us...@httpd] apache monitoring

2009-07-08 Thread nima chavooshi
Hi I want to monitor apache status (amount of requests,ram usage,amount of apache daemons and etc)as real time, Is there any tools that justify these needs? thanks for any help or guidance -- N.Chavoshi

[us...@httpd] apache modules

2009-07-08 Thread nima chavooshi
Hi I have one question about Apache modules.with loading more modules on apache, may apache responses with more delay ?? -- N.Chavoshi

[us...@httpd] SSI - file not included

2009-07-08 Thread Marc Patermann
Hi, I tried a simple include with SSI. In the root directory I added a .htaccess file with AddType text/html .shtml AddOutputFilter INCLUDES .html In index-test.html i added !--#include virtual=./footer.html -- This works fine. Now I moved the footer.html to another directory. !--#include

RE: [us...@httpd] SSI - file not included

2009-07-08 Thread Boyle Owen
-Original Message- From: Marc Patermann [mailto:hans.mo...@ofd-sth.niedersachsen.de] Sent: Wednesday, July 08, 2009 9:07 AM To: users@httpd.apache.org Subject: [us...@httpd] SSI - file not included Hi, I tried a simple include with SSI. In the root directory I added a

RE: [us...@httpd] apache monitoring

2009-07-08 Thread Boyle Owen
http://httpd.apache.org/docs/2.2/mod/mod_status.html From: nima chavooshi [mailto:nima0...@gmail.com] Sent: Wednesday, July 08, 2009 8:51 AM To: users@httpd.apache.org Subject: [us...@httpd] apache monitoring

RE: [us...@httpd] apache modules

2009-07-08 Thread Boyle Owen
If you just load modules but don't actually use them (ie, no directives in config), then no. From: nima chavooshi [mailto:nima0...@gmail.com] Sent: Wednesday, July 08, 2009 8:59 AM To: users@httpd.apache.org Subject: [us...@httpd]

Re: [us...@httpd] apache modules

2009-07-08 Thread André Warnier
nima chavooshi wrote: Hi I have one question about Apache modules.with loading more modules on apache, may apache responses with more delay ?? Re these recent threads : - [us...@httpd] Apache under DOS - [us...@httpd] apache monitoring - [us...@httpd] apache modules It is always a good idea,

Re: [us...@httpd] SSI - file not included

2009-07-08 Thread Marc Patermann
Boyle Owen schrieb: Can the included file not be placed in an authentictaion protected directory ? Apparently not... Otherwise, it would be a way to circumvent authentication. Check what it says in the error_log; that should tell you more than ..stops working.. If there is a 401 Unauthorized

RE: [us...@httpd] SSI - file not included

2009-07-08 Thread Boyle Owen
-Original Message- From: Marc Patermann [mailto:hans.mo...@ofd-sth.niedersachsen.de] Sent: Wednesday, July 08, 2009 10:47 AM To: users@httpd.apache.org Subject: Re: [us...@httpd] SSI - file not included Boyle Owen schrieb: Can the included file not be placed in an

RE: [us...@httpd] apache monitoring

2009-07-08 Thread Tony Rice (trice)
Be sure to configure it with Extended Status on to get a wealth of info. -Tony From: Boyle Owen [mailto:owen.bo...@six-group.com] Sent: Wednesday, July 08, 2009 3:36 AM To: users@httpd.apache.org Subject: RE: [us...@httpd] apache monitoring

RE: [us...@httpd] apache monitoring

2009-07-08 Thread Morten K. Poulsen
On Wed, 2009-07-08 at 09:57 -0400, Tony Rice (trice) wrote: Be sure to configure it with Extended Status on to get a wealth of info. (Obvious self-promotion) We have a free (as in speech) tool, which might help you get the information out of mod_status if the server is unresponsive.

Re: [us...@httpd] apache monitoring

2009-07-08 Thread ricardo figueiredo
Hi, There is a Perl program to extract information. The program requests a page created for mod_status and write in a file Ricardo On Wed, Jul 8, 2009 at 12:03 PM, Morten K. Poulsen m...@fabletech.comwrote: On Wed, 2009-07-08 at 09:57 -0400, Tony Rice (trice) wrote: Be sure to configure it

Re: [us...@httpd] apache monitoring

2009-07-08 Thread Morten K. Poulsen
On Wed, 2009-07-08 at 12:12 -0300, ricardo figueiredo wrote: There is a Perl program to extract information. The program requests a page created for mod_status and write in a file Yes, and it's the requests a page part which can be a problem, if the server is not responding. Morten --

Re: [us...@httpd] apache monitoring

2009-07-08 Thread ricardo figueiredo
On Wed, Jul 8, 2009 at 12:24 PM, Morten K. Poulsen m...@fabletech.comwrote: On Wed, 2009-07-08 at 12:12 -0300, ricardo figueiredo wrote: There is a Perl program to extract information. The program requests a page created for mod_status and write in a file Yes, and it's the requests a

Re: [us...@httpd] apache modules

2009-07-08 Thread William A. Rowe, Jr.
Boyle Owen wrote: If you just load modules but don't actually use them (ie, no directives in config), then no. That is not entirely true. Most register a hook provider to evaluate if they are the candidate for providing auth, injecting filters or handling the request. Those hooks do cost some

[us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread Philip J Dicke
Apache 2.2.11 Windows Server 2003 R2 x64 Hello all, I've searched the archives and only found confirmation of what my problem is, but no solutions. I am trying to configure apache httpd in such a way that logs are rotated on a daily basis, and the server is not shut down when doing so.

Re: [us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread William A. Rowe, Jr.
Philip J Dicke wrote: I currently have httpd running as a windows service, logging on as a restricted user called webserver. That account is very restricted in the folders that it can read/execute. In order to follow the security policy, the webserver account needs to be configured so that

Re: [us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread William A. Rowe, Jr.
Philip J Dicke wrote: Ok; please explain how the process initially has rights to invoke cmd.exe and how these were subtracted after initialization? Well it works now b/c the webserver user has access to the cmd.exe. Security review revealed that access needs to be removed. Ok; that's not

Re: [us...@httpd] Apache under DOS

2009-07-08 Thread Jonathan Zuckerman
On Tue, Jul 7, 2009 at 11:50 PM, nima chavooshinima0...@gmail.com wrote: Hi Recently attackers use new attack for DOS apache.for example see http://isc.sans.org/diary.html?storyid=6601rss . Is there any solution for prevent this DOS attack? what solution do you suggest for limit concurrent

Re: [us...@httpd] Windows rotatelogs, cmd.exe permission

2009-07-08 Thread Philip J Dicke
This sounds like the solution until the new real pipes solution is implemented. Thank you all. On Wed, Jul 8, 2009 02:59 PM Sander Temme scte...@apache.org wrote: On Jul 8, 2009, at 11:09 AM, Philip J Dicke wrote: Windows does not seem to have the apachectl graceful command that unix

[us...@httpd] Using SetEnvIf on response headers

2009-07-08 Thread Ray Van Dolson
Hi all; I'm trying to strip out NTLM as an authentication option from response packets (my Apache is acting as a reverse proxy). At first I did this blindly with the Header command: Header always unset WWW-Authenticate Header always set WWW-Authenticate Basic realm='%{SERVER_NAME}e'

Re: [us...@httpd] Using SetEnvIf on response headers

2009-07-08 Thread André Warnier
Ray Van Dolson wrote: Hi all; I'm trying to strip out NTLM as an authentication option from response packets (my Apache is acting as a reverse proxy). By curiosity, what does this achieve ? If the origin server requires NTLM authentication for a resource, it is unlikely to be happy with a

Re: [us...@httpd] Using SetEnvIf on response headers

2009-07-08 Thread Ray Van Dolson
On Wed, Jul 08, 2009 at 03:35:58PM -0700, André Warnier wrote: Ray Van Dolson wrote: Hi all; I'm trying to strip out NTLM as an authentication option from response packets (my Apache is acting as a reverse proxy). By curiosity, what does this achieve ? If the origin server requires

RE: [us...@httpd] Reload httpd.conf on Windows

2009-07-08 Thread Vamshikrishna T
Hi, From your query, I observed that we can reload apache configuration file without restarting the apache web server on Linux. I would like to know, how can we do it? Thanks in advance. --Vamshi :) -Original Message- From: dbezerra [mailto:dbeze...@accesssoftek.com] Sent: Tuesday,