Is it possible to exclude a virtualhost from mod_security protection?
I have a server with 200+ hosting accounts, but I need to exclude one of those from mod_security protection.
rsync -avz -e ssh --delete --exclude=/home/server/logs/
I want to exclude the logs directory from being transferred, that doesn't work.
I have a client who uses formmail on our dedicated server(another 140 clients also share this PLESK/LINUX server). While the formmail script has not been hacked, some schmuk spends the time to fill it out with spam 5-6 times a day and sends them to the client.
I verified the emails go only to the site owner and nobody else.
QUESTION: Is there a way to exclude the entire world and only allow visitors from the metro Chicago area? This would need to be done via .htaccess and not IPTABLES, as the other sites on the server draw world wide traffic.
I'm scratching my head on this, but if possible it would exclude our schmuk friend while allowing the local traffic this client draws from.
I am going to backup the whole server. (Rsync)
I understood it is not efficient to backup the local "backup" folder to avoid duplicated backups.
1. Should I exclude additional folders from the backup process?
2. I noticed it is familiar to exclude the "proc" folder also ... Why?
I have a rewrite for mobile clients :
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} "android|blackberry|iphone|ipad|nokia" [NC]
RewriteRule ^$ https://www.myudomain.com/Mobile [L,R=302]
My mobile site is HTML5 written and old phones doesn't support it. How to exclude f.x. old nokias - like 6220 and rewrite old phones to /Mobile_old?
My Plesk Panel 11.0.9 Update #26 is running on a dedicated Debian 6.0.6 server and works all fine, but I'm having some issues with the backups. I'm doing backups using the standard build in GUI backup manager. Everything works fine, even the cron job which copies the backup files every night to a second location. The problem I'm having is, that I can't specify folders to exclude from the backup. The reason why I need this is, that I have a 24TB RAID mounted in the /var/www/vhosts/mydomain.com folder and this will be a problem once the RAID is filling up.
View 10 Replies View RelatedVirtualhosts have got me stuck, I was wondering if someone could help me out.
It seems as though no matter what I try, even though I've read over 3 tutorials I can't get virtualhosts working properly.
Basically I have the
documentroot set to /var/www/html/
I'd like to create a virtualhost (I guess name based?) which has a document root of
/var/www/userdata/
Something like this is what I'm trying to accomplish:
Code:
<VirtualHost data.jcink.com:80>
ServerAdmin bleh@bleh.net
DocumentRoot /var/www/html/userdata
ServerName data.jcink.com
</VirtualHost>
So when someone goes to data.jcink.com it loads up /userdata/. And have all the other subdomains on my site continue to stay where they are.
But every time I try to do anything like that, it doesnt work. All I'm looking for is the proper code to put in the config to get it done, and if that's possible...
I'm trying to configure name-based virtual hosting, and I'm SO close, but I've got a question...
First off, here is the relevant info from httpd.conf
Code:
#
# Use name-based virtual hosting.
#
NameVirtualHost *:80
#
# NOTE: NameVirtualHost cannot be used without a port specifier
# (e.g. :80) if mod_ssl is being used, due to the nature of the
# SSL protocol.
#
#
# VirtualHost example:
# Almost any Apache directive may go into a VirtualHost container.
# The first VirtualHost section is used for requests without a known
# server name.
#
#<VirtualHost *:80>
# ServerAdmin webmaster@dummy-host.example.com
# DocumentRoot /www/docs/dummy-host.example.com
# ServerName dummy-host.example.com
# ErrorLog logs/dummy-host.example.com-error_log
# CustomLog logs/dummy-host.example.com-access_log common
#</VirtualHost>
<VirtualHost *:80>
DocumentRoot /home/thatscri/public_html
ServerName thatscriptguy.com
<Directory "/home/thatscri/public_html">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
<VirtualHost *:80>
DocumentRoot /home/thatscri/public_html
ServerName www.thatscriptguy.com
<Directory "/home/thatscri/public_html">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
<VirtualHost *:80>
DocumentRoot "/home/billiards/public_html"
ServerName www.billiardstalk.com
<Directory "/home/billiards/public_html">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
<VirtualHost *:80>
DocumentRoot "/home/billiards/public_html"
ServerName billiardstalk.com
<Directory "/home/billiards/public_html">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
1. Does that look alright? Is there anything in there that should be changed up any?
2. The only way that I could get the websites to work with www and without www was to add two virtualhosts for each site. Is there a way around this?
I'm trying to configure my ftp server (lateste proftpd) and I am stucked on virtualhosts.
I'd like to have two different domains have each their own anonymous access, but I only have one IP on my server.
As you might know, ftp does not handle the HOST field in its header as the HTTP protocol does... so I just can't seem to get it work out... I tried adding an alias IP to my main interface, it works great of course but only when I connect from my server to my server...
Currently working on debian ETCH with latest bind, mysql, proftpd and apache2
On a CentOS5 VPS I have access to "yum update" barely working due to the base mirror "styx.biochem.wfubmc.edu" being tremendously slow.
I'm trying to find out how to disable that mirror possibly via a mirror exclude setting in yum.conf or some other way. I've been searching but I've not found any documentation on this so hopefully somebody out there will know how to make this change.
I would like to have the Backup Manger run a full server backup but exclude one domain that has tons of material which does not need to be backed up as often.
Years ago, Plesk did have the option to choose the domains to backup (Admin login). However, It was a problem at times because I would forget to include new domains.
I do not know of any similar option present now to exclude a domain from the full Scheduled Backup.
I am thinking that I could set up a reseller (myself), put all of the sites I would like to backup more often in that account and run backup from that level.
The Problem with including all of the sites is that the SUPER LARGE site, bogs downs the backup process and I really do not knew it included as often.
I am getting this error in apache,
[warn] VirtualHost xx.xx.xx.xxx:xx overlaps with VirtualHost xx.xx.xx.xxx:xx, the first has precedence, perhaps you need a NameVirtualHost directive
I am really having trouble getting a virtualhost to work for an SSL certificate.. my browser just will not load the page..I have tried several different articles on how to setup a virtualhost and none of them seem to work.
My ssl.conf [URL] .....
*Note: I did purchase an SSL certificate - it is not self signed.
I am looking for some good ddos protection providers, via protected dns. I've searched on internet, but most of them are really expensive.
Please tell me some ddos protection providers what could help me.(gige is too expensive btw).
And I found some ddos protection scripts. How can a script protected a server from ddos? A sript like CSF or DDoS deflate?
I have apache set up and it works fine from the DocumentRoot when I access the server via the IP. I've set up the following virtualhost
<VirtualHost *:80> .....
I use Debian Lenny and I would like to host 2 sites on my apache web server.
So I created two virtualhost files site1 and site2.
Site 1 configuration file:
<VirtualHost *:80>
ServerAdmin mymail@admin.com
ServerName www.mydomain.com
ServerAlias mydomain.com
DocumentRoot /var/www/premier
<Directory /var/www/peremier>
[...]
Site 2 config file:
<VirtualHost *:80>
ServerAdmin mymail@admin.com
ServerName lemonsite.mydomain.com
ServerAlias /lemonsite
DocumentRoot /var/www/lemonsite/
[...]
Obviously I a2ensite both sites and reload Apache2.
When I digit lemonsite.mydomain.com on address bar of firefox, it returns Address not found.
When I digit MYIP/lemonsite, I get a 404 not found error generated by www.mydomain.com CMS.
When I digit MYIP on bar I get www.mydomain.com.
I would like to see lemonsite.
What is the proper syntax to perform a redirect within the <VirtualHost:443> section of the httpd.conf file?
The issue is: I have an existing login URL path that has changed slightly. As an example, let's say the old URL is:
"https://www.something.net/item1/item2/login.jsp" but now there's a "new" name for 'item2'.
I only want a user to be automatically redirected to the "new" path, but is ONLY triggered when the "old" login URL path is entered and nothing else.
I've a problem with my Plesk 12.0.18 Panel ,I tried to login today with Admin_User for a virtual host ,but there was a problem with logging "Error: You have entered incorrect username or password."then I used the User Administrator ,and I found "No web hosting" Under the Domain Name for the workspace !!!and the icons disappeared there are only
-DNS Settings
-Mail Settings
-ODBC Data Sources
-Remove Website
I have substituted the domain names and DocumentRoot folders for generic titles, so I will refer to those where applicable in the thread as well.
Here is my httpd-vhosts.conf:
<VirtualHost *:80>
DocumentRoot "C:WebServerwww"
</VirtualHost>
<VirtualHost *:80>
[Code] ....
Running Apache 2.2.22 on Ubuntu 12.04...Here's (in addition to default) my papertower config in sites-available: URL....
When I restart, I get this message: [URL] ....
I'm coming from Apache on Windows and trying to set up the same workflow I had there. Basically, if I placed a folder in /www/papertower/ it would become accessible via directoryname.papertower.dev after adding the host.
I'm having a strange issue getting it going again. Oddly, when I didn't have the wordpress config set up properly and went to site.papertower.dev, it would give me the "failed to connect to database" message. This made me happy, as it meant it was pointing at the right folder. Once I fixed the database config file, however, and go to site.papertower.dev, it thinks for a moment, then goes to www.site.papertower.dev and gives me a "Oops! Google Chrome could not find www.site.papertower.dev".
I double-checked that all the appropriate mods were enabled (especially rewrite), but that hasn't made a difference.
I have vhost setup for test of a new website. I want to allow access on the localhost, and, from one IP from the Internet (redacted). Apache serves the site just fine on the server but I can't access the site from my the "xxx...." IP.
I'm using a physical path to test from the public IP as follows:
xxx.xxx.xxx.xxx/~user/test/index.html
I have vhost setup for test of a new website. I want to allow access on the localhost, and, from one IP from the Internet (redacted). Apache serves the site just fine on the server but I can't access the site from my the "xxx...." IP.
I'm using a physical path to test from the public IP as follows:
Quote:
http://xxx.xxx.xxx.xxx/~user/test/index.html
Apache v2.2
RHEL6
UserDir configured/running
SuExec configured/running
Below is the relevant vhost block in httpd.conf:
Code:
<VirtualHost *:80>
ServerName test
ServerAlias test
DocumentRoot /home/user/public_html/test
<IfModule mod_fcgid.c>
[Code] .....
I don't have a FQDN as yet, so I just made a entry in /etc/hosts as follows:
Code:
127.0.0.1 test
Here is an excerpt from the Apache error log:
Quote:
[Mon Jun 17 12:02:16 2013] [error] [client xxx.xxx.xxx.xxx] client denied by server configuration: /home/user/public_html/test/index.html
I've checked the firewall and the /etc/hosts.allow- that's not it. I've read the Apache docs and in the vhost block Allow should be evaluated last, and apparently is matching localhost but is not matching my IP.
Does the apache virtualhost environment lower the web or apache server's security? virtualhost has no security issues.
View 3 Replies View Related