I'm looking for how to deny an IP access to my server. Not just a particular site. I have several sites on my server. Do I need to put that denial in each and every .htaccess file? Is there some way I can specify an IP denial to everything anywhere on my server?
I looked at my cPanel error log and it was full of entries like this:
[client 126.96.36.199] File does not exist: /home/xxxxxx/public_html/lar.com.br/data-recovery.html
This client seems to be accessing my site specifying file names that are valid pages on my site, but with some random garbage (lar.com.br/ in this example) that appears to be part of another web address inserted in front of it, creating an invalid address.
I have blocked this IP address from accessing the site. Has anyone else seen this kind of thing? Is it a broken piece of software, or an attempt to hack into my site or cause denial of service?
This is no way a statement of the quality of service provided by Robert N. Augustine (Skiplink/SouthEastWeb). I turned down his offer of hosting, so I can not make a statement on it. However everything mentioned here can be verified by logs of mine, and logs provided by my upstream. If an administrator would like proof, I will gladly provide it unless law enforcement instructs me not to. In that case, public court records will be availible.
I just don't know where to start. I would never imagine an incident happening like this. ....
I recently installed Apache/2.0.64(win32)on my Windows 7 machine and am having a problem with external access. The installation appears to be good as it shows all services running and I can access a basic index.html file through 127.0.0.1
I have ruled out any router or firewall issues and am fairly sure the problem is with the httpd config. But the only changes I've made are to the NameServer and Listen directives, so I'm lost for an answer to the problem.
The NameServer is set to my actual IP address while the Listen one is set to my servers internal IP address, but I have tried switching them around with no success.
The other thing I don't know is if I need to have SQL and myPHP installed just to check basic functionality.
I have a local network with modem, router, and several computers either Cat5 to router or via wireless. Router is Cisco Linksys E4200. The internal IP for this router would be 192.168.1.1.One of the computers has Ubuntu Server 14.04 (32-bit) and Apache 2 installed, and this is hardwired (Cat5) to the router. This computer also has a STATIC IP address that we will call 192.168.1.100. my Windows 7 Ultimate computer, I can open a browser and type "192.168.1.100" and the Apache 2 Ubuntu Default Page will pop up telling me that "It works!".
I have the Apache server working since I can access from within my LAN.My problem is to get it to show me the same "It Works!" when I try to access from the Internet.I got my 'external IP' address by simply going to whatismyip.com, and I can also see it from within my router settings.
The next thing I did was to setup Port Forwarding inside the router, to point say 50505 to 192.168.1.100. I've tried lots of port numbers.I cannot see my Apache 2 Default page by typing in my browser "188.8.131.52:50505", for example. This assumes 184.108.40.206 is my external IP and 50505 is the port I am forwarding.
I've tried disabling the IP4 firewall within the router, and even the "anonymous" filter request setting.I can find my web-server via browser in-house, but I cannot access from my external IP as if I were at a different location.
I am running wordpress for ecommerce using httpd-2.4.12 on my Ubuntu Server 12.04.5. The problem I have is some unknown clients received the message that reads "You don't have permission to access the product on this server" when they were trying to access to the Product page to make a purchase.
When I tested on all of my devices, I did not have any issue with accessing to the page. I know that the page is a secure page with https.I've looked into the apache logs file and found nothing that's related to 404 or 403 errors there.what I have configured for my httpd.conf.
I am having a peculiar problem, when ever I attempt to access my server globally I get the dreaded 'No Data Received' error.
The machine is running Ubuntu 13.10 and is a dedicated server (I do not have GUI or physical access to the machine). All ports are open, iptables disabled, yet nothing works (running on port 80). I loaded the files onto a different computer at home and it works nicely, but not on the dedicated server.
Also, when the Apache server is off it says it can not connect in my browser, and when the server is on it says 'No Data Received' ...
I have recently switched from Ubuntu to Mint because I would like to enjoy out of the box functionality. I installed Apache, PHP and Mysql. When I go to localhost, the page displays correctly indicating that the server is functioning. In /var/www/html I created devPages. In devPages I created a symlink to a directory in my home directory where I keep all of my html/php files.
When I point my browser to http://localhost/devPages/1/ I get "You don't have permission to access /devPages/1/ on this server". This appears to be a permissions/ownership issue. I don't want to change the permissions for the directory or files in the home directory because they are set to work properly on my production server. Is there a way to get apache to accept files in my home directory?
I have set owner and group for devPages and the symlink to www-data. Set permissions to 755 for devPages.
By the way, under Ubuntu, I have always used a symlink and it always worked without any issues.
I m newbie to apache server. I have created a web site using apache server with theURL... tutorial. I m able to access my web site on my ip address bt unable to access it using other ip of linux system. I m CentOS user. I can ping that ip with my ip. I have edited files as described in the tutorial.
I can't reach my website, I get a "corrupted content" error message in the browser.Looking into apache (version 2.4.7), I get
Code: ~$ apachectl -S AH00526: Syntax error on line 22 of /etc/apache2/sites-enabled/000-default.conf: SSLCertificateKeyFile: file '/etc/ssl/private/owncloud.key' does not exist or is empty Action '-S' failed.
However, I double checked that the file is in the appropriate location and does contain the key, so maybe apache has no permission. afaik, it doesn't run as root all the time - or only for a short time?
permissions for the key file are as follows:
Code: ~$ sudo ls -l /etc/ssl/private/owncloud.key -rw-r--r-- 1 root ben 1704 Sep 28 04:01 /etc/ssl/private/owncloud.key
, where ben is my normal user.
It was suggested to me on the httpd IRC channel that maybe apparmor was doing something wrong, but I don't know how to investigate that.
I have installed Apache 2.4.3, and PHP 5.4.5 64-bit, and I have installed PostgreSQL 9.2 64-bits under my new system windows 7 64 bits. Apache and PHP could work nicely, and PostgreSQL run fine too. However, PHP couldn't access the PostgreSQL. pg_connect(), and followed by echo select version(), didn't give any error. When PostgreSQL module was not loaded (because my php dir was d:php, but inside httpd.conf i type D:/PHP), I got message saying something like "undefined pg_connect()." I fixed it, but select version() or any other echo after pg_connect() didn't give any output.
i signed up for vps from vps.me and i got ssh credential i logged in ssh using token2shell but when i put my server ip "10.223.1.157" in google chorome but then it says unable to find even i am not able to access ftp through filezilla also
I have XAMPP server which works fine. When I wanted to load webpages through my lan network it said I need to edit httpd-xampp.conf. When I try to load from internet there is no connection at all. I changed httpd-xampp.conf from this
<LocationMatch "^/(?i:(?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))"> Order deny,allow Deny from all Allow from 127.0.0.0/8 ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var </LocationMatch>
When a user enters the whole url to a file on the webserver he/she can view this file. I want to prevent this and only allow access to the files from within the application (under apache). How can I do that? I already tried:
<Directory /var/www/html/folder/files> order deny,allow allow from localhost </Directory>
This works BUT the file also isn't viewable from within the application anymore.
I have a lamp server setup with a couple of vhosts. Investigating the log files for a situation I found that it seems to be missing some entries. The access log contains a long list of files (images and css) requested by the client regarding a request to a page (having a specific url as referer), but the actual request is missing. The url called is an automatically generated url that should only be available as an unsubscribe link in emails send to a specific user, thus the use of it in the logs is limited
At the same time I can find log entries in our database that I am 99.9% sure can only originate from this specific URL being requested (never say never). These log entries are stamped just before all the auxiliary requests having the url as referer, but again the actual request is not to be found.
I have an ubuntu Server install running the latest Apache. This is all running on a Virtualbox VM.
I have 3 sites configured. 2 of them are set-up with DNS point from the outside world and are working just fine.
When I go to domain1.com and domain2.com the right pages are displayed. The 3rd host is the default host and when I go to the local ip address 192.168.0.x of the server the correct folder is being displayed.
So all being well I wanted to run MediaWiki on that local default host. limiting access to people who are on the local subnet. Seems easy enough I will change the "allow from all" statement for that virtual to allow from 220.127.116.11/255.255.255.0 and add the deny.
But my issue is the the alias Alias /mediawiki /var/lib/mediawiki is being added to all 3 sites so domain1.com/mediawiki domain2.com/mediawiki are also displaying the wiki pages.
This alias was added in the /etc/mediawiki/apache.conf by the mediawiki install. The instructions I had were to then go in and uncomment to make it available.
I have a problem with my new server's setup. It's using a big RAID storage mounted to the main system. When it comes to shell everything is fine, I have access to the disk and files. Problems rise when I try to access the storage content from my php scripts (running on apache) - "Permission Denied" ...
Anyone knows where might be the problem?
I suppose it's because of using RAID but I'm sure it's doable.. somehow..
When I tried to use CLI mode it looks fine - PHP script can access RAID'ed folders when running like : php /var/www/html/filetest.php
I have apache, php, and mysql setup on CentOS 4.4. I have phpMyAdmin running perfectly in a folder in /var/www/html/phpMyAdmin. I can access phpMyAdmin and use it perfectly. I downloaded Cacti which is a server monitoring application written in php, nothing special. I untar the file and it creates a folder, I simply do a mv command from /home/sys/cacti to /etc/www/html/cacti. Then when I open my browser and attempt to access: [url]I am getting a Access Denied error. It makes no sense though, I have verified the permissions of the files and folders, all good.
The group owner and owner are root, the files are all -rw-r--r-- and the folders are drwxr-xr-x.
I am working with an Apple Lion Server. I want to give users the possibility to gain access to certain share points with the webbrowser via the WebDAV protocol. The OS allows to define sharepoints with the GUI. In this GUI you can adjust, that the users are allowed to access the sharepoints via WebDAV but it is not possible to access the folders via a browser. You just get an error from the webserver after a login:
You don't have permission to access /webdav/ on this server.
So I have looked for the relevant configuration file "httpd_webdavsharing.conf" (apache v2.2)
# # Apache Config for WebDAV Sharing # Activated and deactivated by com.apple.webapp.webdavsharing webapp #
RegisterResource "WebDAV Sharing: %c %s" /webdav main webdav RewriteEngine On RewriteMap webdavmap prg:/usr/libexec/webdavsharing/webdavsharing_mapper
Is there a way to modify the code in such a way that it allows the favoured access?
We have many intranet document what linked on our intranet site. We use "apache builed in" directory listing to handle documents on browser, and make accessable to users. Because this not so user friendly we try to use a template (h5ai-[URL] ....) for mod_autoindex.
Unfortunatelly if file or folder name contains special characters (like é,á,ű,ő,ú,ü,ö,ó) than get Access Forbidden - Error 403. If change the folder name, than its ok.
I want to run an HTML webpage that accesses an MP3 resource that's also on my website. However, I only want the webpage to have access to the file and block access from those attempting to access the file directly. That leaves me with two options:
1. Block access through the Apache configuration so that only my Webserver can access the resource, or