Trying to set a specific dhparams file after yesterday's disclosure of the logjam vulnerability I found that the VC10 apache build 2.4.12/1.0.1m does not support the SSLOpenSSLConfCmd configuration directive
AH00526: Syntax error on line 130 of conf/httpd.conf:
Invalid command 'SSLOpenSSLConfCmd', perhaps misspelled or defined by a module not included in the server configuration
After I recompiled Apache and PHP using easyapache from cPanel, we started getting all these weird errors. I'm getting a few people now complaining about not being able to enable register_globals. I believe (after searching) that having this enabled is a big security risk and shouldn't need to be used. However, some people apparently where using .haccess and php_flag to enable this. I did find on a few places that people can create their own php.ini file to emulate what was previously done with .htaccess?
After searching around..
I found out that Register Globals can become a security risk based on the scripts configuration that uses it. This feature normally can be enabled via .htaccess using the glad "php_flag register_globals On". Creating a file called php.ini inside the directory of the site with the flag "register_globals=on" I believe will also enable this option. To enable this option on a global scale, you can edit '/usr/local/cpanel/3rdparty/etc/php.ini', but its not recommended.
However.. We are unable to get the php.ini concept to work. Is there something I need to do to enable/allow users to do this for their account?
My Apache server wont start. I did not install this server.
D:WebserverApachebin>httpd.exe -e debug
[Mon Nov 18 09:35:04 2013] [debug] mod_so.c(246): loaded module actions_module
[Mon Nov 18 09:35:04 2013] [debug] mod_so.c(246): loaded module alias_module
[Mon Nov 18 09:35:04 2013] [debug] mod_so.c(246): loaded module asis_module
[Mon Nov 18 09:35:04 2013] [debug] mod_so.c(246): loaded module auth_basic_module
[Mon Nov 18 09:35:04 2013] [debug] mod_so.c(246): loaded module authn_default_module
[code]...
Invalid command 'AuthDigestProvider', perhaps misspelled or defined by a module not included in the server configuration..No port is using port 80 or 8080.
.htaccess: Invalid command 'php_value', perhaps misspelled or defined by a module not included in the server configuration
Domain causing 500 error
Server is cpanel/centos on php 4.4.8 with mod suphp, apache 2.2
.htaccess file shows
php_value allow_url_fopen 0
[PHP Modules]
bcmath
calendar
ctype
curl
domxml
eAccelerator
exif
ftp
gd
imap
ionCube Loader
mbstring
mcrypt
mhash
mysql
openssl
overload
pcre
pdf
pgsql
posix
pspell
session
sockets
standard
tokenizer
xml
xmlrpc
Zend Optimizer
zlib
[Zend Modules]
Zend Extension Manager
Zend Optimizer
the ionCube PHP Loader
I just went to log on to my site and noticed that I have an "Internal Server Error". I checked the cpanel error log and found:
/home/foo/public_html/.htaccess: Invalid command 'php_value', perhaps misspelled or defined by a module not included in the server configuration,
Last night, one of my admins updated php to use suPHP...I guess it broke this.
I compiled php 4 with apache 2.2 and fastcgi (phpsuexec enabled too). I have one site getting a 500 internal error now.
Domlogs shows no errors
xxxxx - - [09/Mar/2008:23:32:39 -0500] "GET / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12"
However, apache logs shows this
[Sun Mar 09 23:36:22 2008] [alert] [client xxxxx] /home/user/public_html/.htaccess: Invalid command 'SecFilterEngine', perhaps misspelled or defined by a module not included in the server configuration
I've been trying to set up a "console host" in addition to my main "site front" so that I can easily manage MySQL without needing the use of the Workbench (i.e. phpmyadmin). But even when I add the "mod_authz_host" module file to my configuration and correctly referencing it with LoadModule, it says:
Quote:
Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration
This is what is in my configuration file as of now:
Code:
AddDefaultCharset utf-8
ErrorLog data/http.log
Listen 80
PidFile data/http.log
ServerSignature Off
ServerTokens Prod
[Code] ....
I have tried using this as an alternative, but it caused my PHP interpreter to malfunction:
Quote:
Require ip 127.0.0.1
Prior to me try to implement these host control directives, my Apache setup has had no errors whatsoever.
in my apache server error logs:
[Sun Jun 15 20:26:18 2008] [error] [client xx.xx.xx.xx] Invalid URI in request ntity, trailers
[Sun Jun 15 20:42:44 2008] [error] [client xx.xx.xx.xx] request failed: erroneous characters after protocol string: gzip, $
[Sun Jun 15 22:34:05 2008] [error] [client xx.xx.xx.xx] client sent HTTP/1.1 request without hostname (see RFC2616 section$
[ Jun 14 11:27:23 2008] [error] [client xx.xxx.xx.xx] Invalid URI in request rset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
[Fri Jun 13 12:15:12 2008] [error] [client xx.xx.xx.xx] request failed: error reading the headers
httpd server configuring.I share my files only from local disks but some of my resources are located on truecrypt secure volume.When I want to start my server now I have to mount my all drives first to have all path active. Otherwise httpd doesn't start with 'invalid path' error.My question is, how to force httpd starting without path or drive exists checking?
Platform Windows7 x64
Apache version 2.4.3
Package Xampp
if there is a command which will tail or grep Apache logs for xx lines in depth and return results in sort of most IP to least IPs like IP 1 xx connection IP2 x and so on ?
View 1 Replies View RelatedI have installed Apache 2.2.22 in Windows Server 2008 R2 Operating System. I want to upload a file using HTTP put command to "uploadtest" folder of the server
1. I have configured "uploattest" folder to accept file without any authentication (Anonymous_NoUserID On)
<IfModule alias_module>
Alias uploadtest G:DataImportSvcUploadTest
</IfModule>
<Directory "G:DataImportSvcUploadTest">
<FilesMatch ".(enc|xml|zip)$">
[Code] ....
We are using .enc files so I allowed that file type
2. "uploadtest" folder has right permission to everybody.
3. We are using WindowsCE client to send file using HTTP put command . Use HttpOpenRequest to send files with lpszVerb = PUT
HINTERNET WINAPI HttpOpenRequest(
HINTERNET hConnect,
LPCTSTR lpszVerb,
LPCTSTR lpszObjectName,
LPCTSTR lpszVersion,
LPCTSTR lpszReferrer,
LPCTSTR* lplpszAcceptTypes,
DWORD dwFlags,
DWORD dwContext
);
4. We are getting error as "Method Not Allowed"
TTP/1.1 405 Method Not Allowed
Date: Thu, 18 Apr 2013 07:26:25 GMT
Server: Apache/2.2.22 (Win32) DAV/2
Allow: GET,HEAD,POST,OPTIONS,TRACE
Content-Length: 241
Content-Type: text/html; charset=iso-8859-1
5. I tried enable WebDav in Apache and tried with BitKinex WebDav client and still gives the same error
I just wondering PUT may be barred by any other allowed module. Please find the modules allowed.
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_basic_module modules/mod_auth_basic.so
[Code] .....
Is there a command i can type into the ssh console to stop a current transfer that i started wit the wget command?
the file im wgeting always stuffs up at 51% but then the server just retries and starts again, its done it 3 times so far and i just want to completely cancle the process if possible....
I compiled apache 2.2 with php 4 (+ phpsuexec) last night. Seems all is well, only one domain facing an issue and the apache error log states this
Invalid mimetype: should contain a slash
I've never seen such an error to be honest. Any help appreciated.
This is a cpanel box with php 4, apache 2.2, phpsuexec
My server is fedora core 4
in whm :
Invalid Hostname. (This account is currently not available.). Hostnames must be
fully qualified domain names and not contain any spaces or tabs.
litespeed - Invalid Credentials
I always got a Invalid Credentials error when I tried to login to admin panel
Is there any way to I can fix it or how can I change litespeed username/password via ssh
[Wed May 14 18:15:17 2008] [error] [client 66.228.119.67]
Invalid URI in request entersomenicedatastringshereidontthinkthisislongenoughsoiwilladdmoreheherr669760763646r
In my logs:
[Tue Jul 22 01:01:35 2008] [error] [client x.x.x.x] Invalid URI in request GET . HTTP/1.0
(yes, that is it for this entry/line)
This showed up in logwatch as:
Requests with error response codes
400 Bad Request
.: 4 Time(s)
...what was this guy trying to do?
The offending IP was banned in APF last night, if his IP is still showing up in my logs, is he using aproxy?
After adding his ip to:
/etc/apf/deny_hosts.rules
I ran:
apf -r
i am getting error when i trying to send mail out to external email address like gmail, hotmail, msn, yahoo
The error says 550 invalid recipent : user@domain.com
so to make sure that the mail server is working i tried sending mail to local address
which is local@nameoftheserver.com it works but when i try to send mail to external address it get error listed above.
so i added my email sales@domainname.com to gmail to test whether the mail server is working correctly from gmail i can send email from sales@domainname.com and recieve both but when i try that from my server it doesnot work
my server is offshore and i am using enom mail server to send email?
Feel free to use the following iptable commands below to drop INVALID SYN packets that sometimes are also used to flood the server..
/sbin/iptables -A INPUT -i eth0 -p tcp --tcp-flags ALL ACK,RST,SYN,FIN -j DROP
/sbin/iptables -A INPUT -i eth0 -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
/sbin/iptables -A INPUT -i eth0 -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
This is the error i'm getting after i installed my cert.
i did the installation in plesk 9 and it asked for three files:
1. private key
2. certificate
3. CA bundle
for the CA bundle i used the: intermediary_certificate1.cst, intermediary_certificate2.cst, & root_certificate.cst files and in that order.
What could have went wrong? and how can i get rid of this error?
Server Detail : Ceontos / Cpanel
i have installed RKhunter several days ago , after installation i`m receving below email everynight
subjectDaily Rkhunter Scan Report
Invalid option specified: -cronjob
On a RHE 5.1 + cPanel server I got this error usually from apache logs and from php -v output:
[root@server.roo393.com:~]php -v
shmget() failed: Invalid argument
Failed to start up concurrent users module!
PHP 5.2.5 (cli) (built: May 1 2008 22:00:18)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
with Zend Extension Manager v1.2.2, Copyright (c) 2003-2007, by Zend Technologies
with Zend Optimizer v3.3.3, Copyright (c) 1998-2007, by Zend Technologies
[root@server.roo393.com:~]
Tried recompiling latest php 5.2.x and it is always happening while using Zend Optimizer. As you should know, optimizer is need for most web apps today... so it's a must.
I seem to be having a problem with domain forwarding in cPanel.
I have 3 cPanel accounts:
1) foobar.com.np with a POP3 account and forwarders for info@foobar.com.np. Works fine.
2) foobar.com with domain forwarding to foobar.com.np. Works fine too when I send an email to info@foobar.com.
3) foo.com.np with domain forwarding to foobar.com.np. Doesn't work! When I send a message to info@foo.com.np I get the following message in my Exim log:
Code:
2007-11-29 04:11:32 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1IxgMm-0007DW-0m
2007-11-29 04:11:32 1IxgMm-0007DW-0m ** info@foo.com.np R=lookuphost T=remote_smtp: SMTP error from remote mail server after MAIL FROM:<noreply@********.com> SIZE=2059: host foo.com.np [74.86.*.*]: 554 5.7.1 Helo invalid(forged)
2007-11-29 04:11:32 cwd=/var/spool/exim 7 args: /usr/sbin/exim -t -oem -oi -f <> -E1IxgMm-0007DW-0m
2007-11-29 04:11:32 1IxgMm-0007Da-Bd <= <> R=1IxgMm-0007DW-0m U=mailnull P=local S=2006 T="Mail delivery failed: returning message to sender"
2007-11-29 04:11:32 1IxgMm-0007DW-0m Completed
...
As you can see, this domain forwarder is not functioning like the other one (foobar.com) since the domain forwarder for foobar.com DOES actually work:
Code:
2007-11-29 03:58:21 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1IxgA0-0002Gs-Vb
2007-11-29 03:58:21 1IxgA0-0002Gs-Vb => info <info@foobar.com> R=virtual_user T=virtual_userdelivery
2007-11-29 03:58:22 1IxgA0-0002Gs-Vb => *******@gmail.com <info@foobar.com> R=lookuphost T=remote_smtp H=gmail-smtp-in.l.google.com [209.85.133.27]
2007-11-29 03:58:22 1IxgA0-0002Gs-Vb -> *******@gmail.com <info@foobar.com> R=lookuphost T=remote_smtp H=gmail-smtp-in.l.google.com [209.85.133.27]
2007-11-29 03:58:22 1IxgA0-0002Gs-Vb Completed
It looks like Exim doesn't know that emails sent to info@foo.com.np should be a local delivery. I checked the file "/etc/vdomainaliases/foo.com.np" and it says:
Code:
foo.com.np: foobar.com.np
So that should be correct...
I have a Virtuozzo VPS running Debian Sarge. I installed apf. My /etc/apf/conf.apf looks like:
IFACE_IN="venet0"
IFACE_OUT="venet0"
SET_MONOKERN="1"
IG_TCP_CPORTS="21,22,53,80,443,25,465,110,995,143,993,137,139,445,10000,3306"
IG_UDP_CPORTS="53"
Am am getting several "iptables: Invalid arguments" message. I traced this to these iptables calls from within /etc/apf/firewall. Each of these iptables calls gives "iptables: Invalid arguments":
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ALL NONE -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags SYN,FIN SYN,FIN -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags SYN,RST SYN,RST -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags FIN,RST FIN,RST -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ACK,FIN FIN -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ACK,URG URG -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ACK,PSH PSH -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ALL FIN,URG,PSH -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ALL ALL -j IN_SANITY
/sbin/iptables -A INPUT -i venet0 -p tcp --tcp-flags ALL FIN -j IN_SANITY
Any thoughts? According to my ISP, I have these iptables modules:
iptable_filter
iptable_mangle
ipt_limit
ipt_multiport
ipt_tos
ipt_TOS
ipt_REJECT
ipt_TCPMSS
ipt_tcpmss
ipt_ttl
ipt_LOG
ipt_length
ip_conntrack
ip_conntrack_ftp
ip_conntrack_irc
ipt_conntrack
ipt_state
ipt_helper
iptable_nat
ip_nat_ftp
ip_nat_irc
I have just installed WHMCS on a dedicated Windows 2003 Server box with Plesk 8.2. I am getting the above error when I try to go to the billing subdirectory (www.mydomain.com/billing), if I don't input a correct username/password. Inputing a username/pass does work, and I did so to install it, but obviously this is not a long term solution.
IUSR has read/execute/list rights to the parent httpdocs directory and inheritable permissions is checked. I have checked the child directories and files, and everything seems to have inherited the correct permissions.
I am able to otherwise access my website, as well as TCadmin.
Changed my server hostname and no I can't get into WHM/cPanel as its telling me the cPanel license is invalid.
View 6 Replies View Related
