How can I ban a browser/client type http request in Apache2 configuration?
For example; I would like to redirect all 'Opera' traffic to another URL or ban it altogether.
In my logs:
[Tue Jul 22 01:01:35 2008] [error] [client x.x.x.x] Invalid URI in request GET . HTTP/1.0
(yes, that is it for this entry/line)
This showed up in logwatch as:
Requests with error response codes
400 Bad Request
.: 4 Time(s)
...what was this guy trying to do?
The offending IP was banned in APF last night, if his IP is still showing up in my logs, is he using aproxy?
After adding his ip to:
/etc/apf/deny_hosts.rules
I ran:
apf -r
Is there a way to construct an HTML request so that only HTML text is returned (without images or rich media)? I assume search engines do this - how?
What I'm trying to do is write an Apache module that will retrieve only text from a web site. The idea is to provide a Lynx-like experience, using Apache as a proxy between my workstation and my ISP.
I have a script that makes a request via telnet and it worked on my old server, but not on the new one.. Heres what I'm doing
telnet localhost 80
GET /files/downloadFLV.php HTTP/1.1
Host: www.soybe.com
I get this back:
HTTP/1.1 404 Not Found
Date: Sun, 08 Jun 2008 06:34:25 GMT
Server: Apache
Last-Modified: Tue, 18 Mar 2008 06:52:59 GMT
I know that /files/downloadFLV.php does exist, so I'm thinking it could be an issue with the Host: part of it, any ideas?
I have a Linux server running some reasonable setups:
Opteron 180, 4 GB RAM, running 8x 36gb 15k scsi with hardware raid 10 -- this is one of the servers from WebNX advertised here not long ago
Running CentOS 4(?), Apache2/MySql 4/PHP5.2, the normal stuff.
I have only one main site on the server, which runs a pretty old PostNuke CMS in Chinese (0.7.2.3 Phoenix) + PNphpBB2 + Gallery 1.5.7 (all integrated into PostNuke). This site is pretty light in "human" traffic, getting about 20K hits per day.
Now, the problem I have noticed with this site, is related to the many MP3 files stored in the Gallery albums. There are lots of HTTP requests to these files, most maybe from Chinese search engine bots (judging from IP), that slows the server to a crawl and even crashes Apache. This happens in the late hours here when it's day time in China. As a matter of fact I just did a reboot, and in 5 minutes there are more than 1000 HTTP requests to MP3 files resulting in a traffic of 2.1+ Gb. So within minutes, the server is brought to its knees again and I can't even get the "apache status" from CPanel now: "Unable to retrieve apache status".
The company that manages the server for me said there's no security problem here. We have installed an Apache extension to limit the number of simultaneous requests to media files to 1. However that doesn't seem to help.
I have an Xitami server and am migrating to apache httpd. I have the regular server working fine. I tried configuring ssl, but no requests are coming through. I know 443 is open on the router because it works fine under Xitami. I checked the logs and it si starting fine. I am attaching my httpd.conf and the startup log. If I try to access the website using https, it just times out and nothing goes in the log file. I replaced my domain with domain.com. I have tried many different examples, but cannot get it to work and am not sure what to do.
View 5 Replies View Relatedi want to redirect main domain http //, www request to https://
i added this code
RewriteCond %{HTTPS} off# First rewrite to HTTPS:# Don't put www. here. If it is already there it will be included, if not# the subsequent rule will catch it.RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]# Now, rewrite any request to the wrong domain to use www.RewriteCond %{HTTP_HOST} !^www.RewriteRule ^(.*)$ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
how to catch request over http and forward them to https, I have VPS/Plesk and I was wondering how to do that.
Also, what do you think about having a sub domain on each client domain to access plesk, likes this:
[url]--> [url]
I have a client who's Apache on a CPanel based VPS keep's restarting.
In the error log we recieve two of these lines
"client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFin "
Then the Apache will restart.
I have looked around and found some threads about this problem, but none explaining how to fix this.
some clients on server couldn't access vb sometimes. this error occured
HTML Code:
[B]Forbidden[/B]
You don't have permission to access /vb/showthread.php on this server.
So I checked /usr/local/apache/logs/error_log and found this error
Code:
client denied by server configuration: /home/USER_NAME/public_html/vb/showthread.php
what does it mean, and How it was happened sometimes not all time?
Lately my users have been getting 403 and 404 errors for pages that are on the server and have the correct permissions. when I look in cpanel in the error logs I see the error:
Mon Mar 26 12:43:09 2007] [error] [client 216.x.x.x client denied by server configuration: /home/xxxx/public_html/acronyms.php
I am trying a webpage siremis whenever i try to login i am getting below error in error log of apache [client 192.168.137.7:4758] AH01630: client denied by server configuration: /opt/siremis-4.0.0/siremis/.htaccess
in httpd.conf following is the rule
Alias /siremis "/opt/siremis-4.0.0/siremis"
<Directory "/opt/siremis-4.0.0/siremis">
Options Indexes FollowSymLinks MultiViews
[code]....
i am using apache 2 and php 5.5.1 and mysql 5.6.12.
I've a Wordpress Blog on a Ubuntu 13.10 server with Apache 2.4.2.
For only one page on this site I've this error and can't find a solution.
When i try to install BotNET 1.0 on my dedicated, i got this error :
root@leet [~/botnet/BotNET-1.0]# . install.sh
Compiling source code . . .
In file included from src/main.c:9:
src/../include/bot.h:43: error: array type has incomplete element type
src/../include/bot.h:57: error: array type has incomplete element type
src/../include/bot.h:89: error: array type has incomplete element type
src/main.c: In function:
src/main.c:146: error: type of formal parameter 1 is incomplete
Here is my install.sh file:
Code:
#!/bin/bash
# BotNET installation script.
# If this script causes problems, try "make all" instead.
# Usage: . install.sh
cc="/usr/bin/gcc"
echo "Compiling source code . . ."
bot=`$cc src/main.c src/launch.c src/memo.c src/seen.c src/parse.c src/help.c src/log.c src/info.c -o bin/bot -pthread || (echo 1)`
botnet=`$cc src/botserv.c -o bin/botserv || (echo 1)`
if [ "$bot" != "1" ]; then
echo "Installation complete."
echo "Executables will be found in bin/"
else
echo "Errors encountered during compilation!"
fi
My OS is centOs 5.x
Kernel : Linux 2.6.18-53.el5 #1 SMP Mon Nov 12 02:22:48 EST 2007 i686 i686 i386 GNU/Linux
* I have tried all other way to install (make all) and other *
I cant access gmail from my internet connection, but google is opening and also all other emils are opend(yahoo,aol...). Im using windows 2000 OS. Is it a problm of mail server of gmai?
View 4 Replies View Relatedi recently got multiple logs regarding this weird browser user agent,
Browser Agent:
XXX<? echo "w0000t"; ?>XXX
anyone have information regarding this?
How do you defend against browser spoofing? From the tutorials shown at [url]. it seems really easy to spoof a firefox useragent.
View 5 Replies View RelatedI'm trying to download this 1 GB file on my Linux server CentOS. But its requiring me to enter a Captcha image which doesn't show up using Elinks or Lynx the two browser I tried.
Wget was my first thing that I tried but that wouldnt work since its impossible to enter the captcha using wget command.
So I need some help how should I download this to my server I'm on Slow DSL connection and it would take weeks to download 1 GB using my desktop and then reuploading it again to server using FTP.
I know that if you want to access your ftp account from a browser you use this link format:
ftp://username : password@yourdomain.com
But what happens when your usersame is in the form of: username@yourdomain.com
How can I access my ftp from a browser then?
i run a browser based game in (php/mysql/javascript) and i currently have noticing with the growing numbers of players that my shared hosting is not going to handle the load, obviously.
i am not sure if this is the right place to ask but are there any hosting companies out there willing to negotiate a deal where they provide hosting for such a thing in return of advertising?
we havent even began to advertise the game and expand it, it will reach thousands of players easely... we would need atleast 2 highend boxes to split up the database from the webserver.
This is the error i'm getting after i installed my cert.
i did the installation in plesk 9 and it asked for three files:
1. private key
2. certificate
3. CA bundle
for the CA bundle i used the: intermediary_certificate1.cst, intermediary_certificate2.cst, & root_certificate.cst files and in that order.
What could have went wrong? and how can i get rid of this error?
My client was rather forcibly moved to a VPS by their host (long story, involving inadequate PHP memory allocations).
I've run sites on MediaTemple's VPS's without any issues. This one, via Network Solutions (not my pick) is driving me nuts. It uses Plesk and Virtuozzo, and is, I believe, running Redhat.
I am able to FTP files into httpdocs, but when I try to pull them up via browser, I get 404's. Additionally, the default landing page persists, even though I deleted their index.html.
I can SSH with root, but have thus far not been able to find my way to httpdocs via command line. Updated: scratch that. Found it. Files are there...
I am accessing solely via IP, as I do not want to redirect the domain until the new site is up and running.
Any thoughts on where I need to be looking for a solution? I'm not really a server person, though this is the first time I've encountered so much trouble. I do not foresee NS support being much help, per prior (recent) experience.
I got a list of IPs from the country i want to block from blockacountry.com and i added them to my .htaccess as I have no access to PF or IP tables firewall.
I am concerned about the server load if I get too many requests from that country to access the webpage, I have been told of a better solution, blocking someone based on the browser language they use, for example for China that is "zh-CN" but I don't know how to implement this and I have not been able to find it through Google, help with this appreciated.
Second thing, anyone knows what happens when someone attempts to access a webpage from a blocked IP? Do they get a "Page not found" or "your IP is blacklisted" message?
If I block by browser language it would be good if the blocking message does not tell the user about this
(Notice that I am aware that blocking by browser language is not a perfect solution).
I have setup an Addon Domain in cPanel.
[url]is pointing to:
[url]
That is working fine, test it for yourself.
However, I want the URL in the browser to read: [url]but currently as you can see the long URL appears.
How can I make the short clean URL appear in the browser?
I recently initiated "Hot Link Prevention" on one of my web sites on my Dedicated server (via CPanel). It woks well in re-directing hotlinked images to a small image that says "Unauthorized Hotlink Image." This of course prevents other web sites from leaching my bandwidth. However, I have had a number of people complain that when they visit my forum, they don't get my site's images, but instead see the Unauthorized Hotlink Image. The common thread seems to be the people with the problem are using Security Software. In one case, a guy is using Norton Confidential. Another guy is using some Security software provided by his ISP. I'm guessing that this security software is somehow messing with the Referer in tehir browser and confusing my server into thinking the images are being hotlinked from some other site. Short of turning off Hot Link Prevention, does anyone have any suggestions to tell the folks...are there settings in their Security Software for example that will prevent the problem when they visit my site?
View 4 Replies View RelatedI have upgraded to Apache 2.4 and Php 5.5.7. I am not able to get any php script to show output in the browser. Html and text files work fine.
phpinfo works fine and shows output.
Phpmyadmin gives "No data received" in chrome and "The connection was reset" in Firefox.
In command line php -f filename gives me output.
Last lines of my Apache error log:
[mpm_winnt:notice] [pid 2028:tid 376] AH00456: Apache Lounge VC11 Server built: Nov 21 2013 20:13:01
[Fri Dec 20 2013] [core:notice] [pid 2028:tid 376] AH00094: Command line: 'C:Program FilesApache Software FoundationApache24binhttpd.exe -d C:/Program Files/Apache Software Foundation/Apache24'
[Fri Dec 20 2013] [mpm_winnt:notice] [pid 2028:tid 376] AH00418: Parent: Created child process 2628
[Fri Dec 20 2013] [mpm_winnt:notice] [pid 2628:tid 276] AH00354: Child: Starting 64 worker threads.
In Php log it is giving no error.
httpd -t shows: Syntax ok
php -v shows:
PHP 5.5.7 (cli) (built: Dec 11 2013 13:48:27)
Copyright (c) 1997-2013 The PHP Group
Zend Engine v2.5.0, Copyright (c) 1998-2013 Zend Technologies
i signed up for vps from vps.me and i got ssh credential i logged in ssh using token2shell but when i put my server ip "10.223.1.157" in google chorome but then it says unable to find even i am not able to access ftp through filezilla also
View 3 Replies View RelatedUsually our website traffic is about 50 MB/day in our dedicated server. From these past 2 days it's consuming 5 GB/day and Apache2 opens so many processes/connections that our router can't handle and turns our WAN/LAN extremely SLOW!
If the reboot the server, it calms down but soon the apache2 starts again to open the connection (+1000).
Can this be a worm? I'm using Ubuntu Server 8.04.
I am still running apache 1.3 something on my debian vps but debian would really like to upgrade to apache 2 (Ie PHP5 updates).
So I wanted to ask what the advantages and disavantages of running apache2 is?
Can apache2 use a 1.3 httpd.conf?