Apache :: Configuring IP Blocking?
Apr 7, 2014
I've been trying to figure out some IP blocking with no success. The environment is UNIX and Apache version is 2.2.22-14.
The site is on a hosted solution and doesn't have a firewall due to the virtualization software limitations. I've tried setting something similar to the following:
Code:
<Directory /home/username/mysite.com>
#IP Blocks
Deny from 1.2.3.1/24
Deny from 1.2.4.5
etc..
but with no success. I've also tried it in the <Location> tag with no success.
The way I'm testing this is editing the conf and then bouncing the apache server.
View 4 Replies
ADVERTISEMENT
Dec 28, 2006
I'm over here trying to rebuild php with GD in WHM, I go through the entire motion of Apache Update (with GD selected as a PHP Module) and ummmm... after it's done, I check my phpinfo() and there is no GD section, let alone has the build date been changed.
View 9 Replies
View Related
Oct 28, 2008
i couldn't find a more suitable category to put this post in: I am setting up a development server local to my office here, so that we can develop projects using an SVN app, but the SVN system needs SSL for logging in. i am now going round in circles where httpd.exe cannot start as a service from the apache monitor, with the following error:
The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.84 for ServerName
in the windows event viewer.
I'm using:
Windows XP Home edition, SP3
Apache 2.2.9
full computer name is devserver
workgroup is WORKGROUP
I used openssl bundled with this version of apache to generate the SSL certificate, and they all seem to be ok. When i change the line
SSLEngine on
in the httpd-ssl.conf file, the apache service starts when the SSLEngine is off, but not when the SSLEngine is on.
i have trawled the internet but not found any answer. ive checked thru httpd.conf and httpd-ssl.conf several times but i just can't see anything wrong (although im not entirely experienced!).
View 4 Replies
View Related
Dec 10, 2013
I am really having trouble getting a virtualhost to work for an SSL certificate.. my browser just will not load the page..I have tried several different articles on how to setup a virtualhost and none of them seem to work.
My ssl.conf [URL] .....
*Note: I did purchase an SSL certificate - it is not self signed.
View 13 Replies
View Related
Aug 15, 2005
I posted this problem in the PHP forum without a response. I thought this forum might be better.
View 0 Replies
View Related
Apr 27, 2006
I'm currently trying to configure apache 2 to handle subdomains. This is on a local machine (not tied to any domain names) and I'm only doing it to research how the final structure of a site 'could' be setup.
Basically I have a single install of Apache 2 running. The outcome eventually should be to have specific sub domains that all point to the same document root as the actual domain name. So eventually I will have:
http://www.mydomain.com
http://subdomain1.mydomain.com
http://subdomain2.mydomain.com
with both subdomains showing the content at mydomain.com (there is reasoning behind this but I'm not gonna go into that).
I have apache setup as follows:
NameVirtualHost *:80
<VirtualHost *:80>
ServerName daneastley
DocumentRoot "C:/Program Files/Apache Group/Apache2/htdocs"
</VirtualHost>
<VirtualHost *:80>
ServerName subdomain1.daneastley
DocumentRoot "C:/Program Files/Apache Group/Apache2/htdocs"
</VirtualHost>
<VirtualHost *:80>
ServerName subdomain2.daneastley
DocumentRoot "C:/Program Files/Apache Group/Apache2/htdocs"
</VirtualHost>
Now on my local machine, only the top one works - the subdomains dont. if I add the following into my hosts file in windows, they all work:
127.0.0.1 daneastley
127.0.0.1 subdomain1.daneastley
127.0.0.1 subdomain2.daneastley
the problem being, that I wish to test this enviroment on the local network. How would I go about having every computer being able to access this? I'm assuming it comes down to DNS stuff.
View 0 Replies
View Related
Oct 23, 2013
have a website that sources a number of jquery plugins, when I load the site in chrome or firefox the javascript console is saying that these files were not loaded.
The server is a localhost and the files are local.
The google jquery file loads fine.
how I need to configure the apache config file to deal with javascript.
View 2 Replies
View Related
May 12, 2007
I'm running a comic site on a dedicated linux box that has weekly releases. When a new release comes out I'll typically get 4000-5000 unique hits an hour. The problems started when I set up a MySQL download logging system, that would query and display the file names when the user loads the site, and update +1 when they download a comic. Yesterday after a release, the site became very slow to access, and after about 20 seconds you'd connect and be able to browse freely at nice speeds but if you went idle you'd have to wait about 20 seconds to connect again. The other domains on the server were running fine, and I could access my whm fine as well, the server load was 0.10 or lower.
I'm assuming there's a max connection limit somewhere either on the mysql or apache side that's restricting the site from handling the load it's getting. I've poked around google and researched it a bit but couldn't really find much. I don't have an enormous amount of time to invest in this because it's just a hobby so I'd appreciate any help one of you could offer!
View 2 Replies
View Related
Nov 20, 2008
My server is getting a lot of spam robots registering as fake users into my forums (altho most emails are invalid
View 2 Replies
View Related
Apr 23, 2015
I am having a problem with blocking bots using .htaccess. I think I tried all possible syntax variants, yet all the bots that I am blocking get HTTP 200 response instead of 403 (I can verify it using access log).
I am using Apache 2.4 running on Ubuntu 14.04.2 with Plesk 12.0.18.
My AllowOverride is set to allow the use of .htaccess files, so .htaccess file gets loaded: when I make an error in .htaccess sysntax I can see the error in the error log and the webpages don't load. Besides, I have some "Deny from [IP address]" directives in the .htaccess and I see that these IPs get HTTP 403 response when access my site.
I spent hours trying different variants of .htaccess syntax (see below) and neither seems to work...
variant 0:
SetEnvIfNoCase User-Agent LivelapBot bad_bot
SetEnvIfNoCase User-Agent TurnitinBot bad_bot
Order allow,deny
Allow from all
Deny from env=bad_bot
[Code] ....
View 7 Replies
View Related
Apr 10, 2015
If I know the IP range that I want to block the best option is to block it with IPTABLES. This works well when you want to block entire countries. But what happens when you want to block specific IPs rather than ranges? Is iptables still more effective than "deny from [IP]" in .htaccess? I read that you don't want iptables to grow too big as it slows performance, but I guess it is still more effective than having big .htaccess..?
When it comes to blocking spam bots or referrers, robots.txt is just a suggestion for bots, when I looked at my traffic logs I noticed that most bots don't even look at robots.txt file. As far as I understand the only option here is to use .htaccess
1. I am currently using this in my .htaccess:
SetEnvIfNoCase User-Agent *ahrefsbot* bad_bot=yes
SetEnvIfNoCase Referer fbdownloader.com spammer=yes
...
SetEnvIfNoCase Referer social-buttons.com spammer=yes
Order allow,deny
Allow from all
Deny from env=spammer
Deny from env=bad_bot
2. Apparently, there is another approach as per below:
# Deny domain access to spammers
RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_USER_AGENT} queryseeker [OR]
RewriteCond %{HTTP_REFERER} ^(www.)?.*(-|.)?adult(-|.).*$ [OR]
...
RewriteCond %{HTTP_REFERER} ^(www.)?.*(-|.)?sex(-|.).*$
RewriteRule .* - [F,L]
Which approach is better #1 or #2? Any better alternative?
Finally, somebody suggested that you need to have both (as per example below). Is it true?
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^rogerbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^exabot [OR]
RewriteCond %{HTTP_USER_AGENT} ^MJ12bot [OR]
[Code] ....
View 7 Replies
View Related
Feb 15, 2013
I have a website on a linux-server working fine with PHP/Apache. The page loads a lot of css/js/image-stuff (total 84 requests, 220k), it takes about 4 secs to load via internet.
Now I'm testing the same page locally on a Win7-64-system (Apache 2.2, PHP 5.4). The system is not very slow (8 GB RAM, SSD, i7-CPU), but loading the same page as above takes about 50 secs.
The Q is: What might be the problem?
- I turned off firewall and anti-virus.
- I used mod_status: 150 threads, max. 11 seems to be used during the loading of the page.
- I tried php5apache2_2.dll with TS-PHP 5.4 and mod_fcgid.so with NTS-PHP 5.4, but the loading-time kept almost the same.
Looking at the "network-tab" in FF or Chrome, I found that a lot of subqueries get a timing like this:
Blocking: 11.96 s
Sending: 0
Waiting: 1 ms
Receiving: 6ms
So the loss of time seem to be in the "blocking"-section. I first thought of something like "limited number of TCP-Connections", but as said above, on the same system the page is remotly loaded fast enough almost without these "blocking"-parts.
View 3 Replies
View Related
Jan 21, 2014
I have been trying to solve a big problem for the last 2 weeks with one of our servers.
The client using our system (web based w/ apache and php) is a contact center firm. They have about 120 operators, all connect to our websever with the same IP.
We have been suffering DoS attacks from some of these operators. This are simple, browser attacks , namely 5 or 10 operators will just hold F5 key and bombard the server with requests when they shouldnt.
We did manage to produce a php protection which will recognize the multiple requests and blacklist the user, but its "too late" because the request have already been sent and processed by the webserver.
We use the user ID in the system to control who should be blacklisted, so this is all dependent on our own authentication.
Ideally, we need something EXACTLY like mod_evasive, but for rejecting single requests instead of blocking the IP. Exemplifying : if a user calls the same url, 5 times, in a 3 second spawn, we will reject every next request for 30 seconds, but only the requests by that user.
If the webserver can make any use of it, the user id is stored in a cookie.
View 4 Replies
View Related
Apr 13, 2008
I have IIS with the default site and a site i created. it appeared to be configured correctly but even from the server if i try to "browse" any of the pages i still get "internet explorer cannot display the page" from my site and "under construction" from the IIS default site.
View 7 Replies
View Related
Oct 21, 2008
I have a machine which runs on Desktop board with 1 LAN port built in.
I just bought a new USB-LAN and plug into the USB but I have question about how to configure it. I cannot see eth1 inside /etc/sysconfig/network-scripts, so where can I configure USB LAN?
View 3 Replies
View Related
Jan 22, 2007
I got dedicated server with plesk 7.8 installed on it. Can anybody tell me what to do next to add new website.
I have ip through which i can login to plesk control panel.
I want to know how can i create name servers which i will use for my domains like ns1.abc.com ns2.abc.com.
What setting i need to create by use DNS button in control panel to run my sites properly.
View 1 Replies
View Related
Mar 24, 2009
I am moving my servers this week and my new host doesn't do domain hosting. This is my first time doing it, I need help in pointing my domain to the new server. I just need the basic settings for A, CNAME and MX records.
View 13 Replies
View Related
Jul 14, 2009
how to which will help me to make a correct configuration of mail server. I want to set up a mail server with e.g three domain names and all three domain names will have few similar email addresses like info, sales, marketing and so on. I know that this can be done by using control panels but I am not big fan of control panels I want to do a pure Linux administration using the command line.
View 6 Replies
View Related
Mar 31, 2009
I've continually worked on it, but nothing seems to give.
I'll install it in the right place, but not have the config saved properly, or it's in the wrong place but saved right.
View 2 Replies
View Related
Jun 29, 2008
Is there somewhere that either has a tutorial or explains how a DR site is setup and activated when the primary site goes down? And how do you configure it to fail-over to the primary site again once it is back up and running?
I'm planning to have a certain hardware configuration in place at a primary site (load balancers/web/app/database/SAN) supporting a service that MUST remain online. Because it's mission critical, I also will need a DR (disaster recovery) configuration at a secondary site. My challenge is how to configure DNS or whatever to fail over the primary site to the secondary site if the primary experiences a failure of some sort. Then fail it back post-recovery.
I am planning to use the secondary site to burn-in development prior to go-live and when ready, migrate the changes to the primary so both sites are identical.
I am doing some investigation regarding NetScaler appliances to understand how they work. At first glance it seems they are able to direct incoming traffic to specific locations based on various criteria (geo, speed, load capacity, etc). I noticed they are also a recommended solution by Citrix for traffic management... but a DR solution is evading me. And something is telling me it's not all about some piece of hardware.
View 2 Replies
View Related
Apr 9, 2008
i got DNS and IIS installed and configued DNS completely by the book. I made 2 forward lookup zones ns1 and ns2.mydomain.net
what is this step im missing between that process and being able to tell godaddy to hit my nameserver. it just keeps telling me they are not registered nameservers so i must be missing something here.
View 9 Replies
View Related
Jan 7, 2008
I have got a WHM Reseller Account, with a Dedicated IP address and RapidSSL Certificate.
My host has setup the SSL for me, and it works fine when I access [url](where main-domain.com is the Domain associated with my WHM account).
However when I try and access https on any Account which I've made under my Reseller Account, I'm just redirected back to [url]
I was under the impression that if I accessed a Domain on an account I made that shares the same IP as my SSL Certificate, that the SSL Certificate would appear for that Domain name too, but this isn't the case.
Is there any change the my DNS records, or something I can ask my host to do to get it to work?
View 2 Replies
View Related
Aug 2, 2008
I want to configure Nagios to monitor Windows and Linux servers and their services. I have to install NSClient in Windows servers and NRPE in Linux servers to collect the data. I don't want to install any plugin in any server. Is there any guide available which describes how to enable Monitoring of servers using SNMP through Nagios?
View 2 Replies
View Related
Sep 11, 2008
is it possible for us to set up plesk sp that it monitors bandwidth usage week on week instead of month on month?
View 4 Replies
View Related
Jul 5, 2008
I saw an ad on WHT by LimeStone Networks and decided to get a server from them. My server was made within few hours. On the server, I was only able to connect to the SSH on port 22, I could not login to the DirectAdmin or anything.
So, I tried shutting down the "iptables" firewall like this:
Code:
service iptables stop
and then tried to access the directadmin like this:
[url]
and it worked. So, the problem is that, my host only configured ssh on my server and didnt configure the rest.
How do I open the rest of ports, e.g.
2222 (directadmin)
80 (web server)
21 (ftp)
443 (https)
3306 (mysql)
etc... ?
on the welcome email, this is what they said about the firewall, but I don't quite understand
Quote:
Please be advised that your server's firewall is active for your protection and will only accept connections on port 22/tcp by default.
If you modify firewall or IPTable rules on your server, please be sure to have them configured to allow inbound and outbound traffic on all ports (TCP & UDP 1-65535) from 209.130.152.0/28.
View 4 Replies
View Related
Mar 27, 2008
I'm trying to install and configure pureFTPD on my VPS which I just got.
Right, here goes one of my stupid questions:
When I try to start pure-ftpd (with the command /usr/sbin/pure-ftpd & ), this is what I get:
[1] 20271
What does [1] 20271 mean (or it may be other random number)?
And I can't see pure-ftpd as a running process (ps -ef command). So what's happening, how do I start pure-ftpd properly? It is installed as far as I understand.
Quote:
...lots of other packages...
ii pure-ftpd 1.0.21-8 Pure-FTPd FTP server
ii pure-ftpd-comm 1.0.21-8 Pure-FTPd FTP server (Common Files)
View 6 Replies
View Related
Mar 1, 2007
We check a domain under dnsreport and all seems ok
But, when we assign IP (not the main shared) to the account and check dnsreport we see this error:
Reverse DNS entries for MX records
ERROR: The IP of one or more of your mail server(s) have no reverse DNS (PTR) entries/* (if you see "Timeout" below, it may mean that your DNS servers did not respond fast enough)*/. RFC1912 2.1 says you should have a reverse DNS for all your mail servers. It is strongly urged that you have them, as many mailservers will not accept mail from mailservers with no reverse DNS entry. You can double-check using the 'Reverse DNS Lookup' tool at the DNSstuff site if you recently changed your reverse DNS entry (it contacts your servers in real time; the reverse DNS lookups in the DNS report use our local caching DNS server). The problem MX records are:
**** [No reverse DNS entry (rcode: 3 ancount: 0)
AND
Mail server host name in greeting
WARNING: One or more of your mailservers is claiming to be a host other than what it really is (the SMTP greeting should be a 3-digit code, followed by a space or a dash, then the host name). If your mailserver sends out E-mail using this domain in its EHLO or HELO, your E-mail might get blocked by anti-spam software. This is also a technical violation of RFC821 4.3 (and RFC2821 4.3.1). Note that the hostname given in the SMTP greeting should have an A record pointing back to the same server. Note that this one test may use a cached DNS record.
www.***.com claims to be host host.***.com [but that host is at **** (may be cached), not ****].
-------------------
View 2 Replies
View Related
Dec 22, 2007
Actually my DSL provide me 1024 kbps of Internet Access. I am wanna connect computers to that network and rent the pc in my own country.
Here the features of that I have:
- 2 Desktop PC ready for connect.
- 1 router with 4 lan Port.
- 1 Dynamic ip
- 1024 kbps of Internet connection.
the desktop pc will be configuring with Centos 4.x and I wanna install on it a control panel like directadmin.
Here the issues:
- How I can configure 2 statics ip for each desktop pc?
- The desktop pc will be connected every one in the same router?
- How I can know how will be the rendiment with 1024 kbps?
View 3 Replies
View Related
Jul 4, 2009
I am using lxadmin on my vps. In a mail system I need to configure pop3 account to fetch mails. I am using it on a folder "main site/folder". Please can any one tell me how to configure POP 3 account in lxadmin for the folder or any subdomain.
View 0 Replies
View Related
Sep 9, 2009
for setting up my ASA 5510? I'm assuming I'll configure it for just permit ip any any and let it do inspections. I wouldn't want to have to create a permit statement for every one of my customers'
View 8 Replies
View Related
Sep 22, 2008
I have setup php and mysql on a windows IIS 6 server. php has installed fine and works but I have 2 problems
1. When i browse to http://localhost i get a 403 error but when browsing to http://localhost/index.php it works fine. It makes me think that the server does not know what extension to default to when doing a directory listing
2. I have phpmyadmin installed and the cfg file is set to do a 'config' authentication. That works but everytime i go to submit a form to create a new database or anything i get prompted with an HTTP user/pass. I'm not sure if this is a phpmyadmin issue or a php configuration issue
View 1 Replies
View Related
