I have a website and i am trying to have a specific folder be able to list if u go to [url]
Anyone know how i can do this?
I thought it was something to do with the .htaccess but i cant seem to find anything for it.
May be this is a stupid question, but I really don't know why I can't list the files in the root folder of a website(I didn't put any index.html or index.php in the folder).
I point my domain.com to /home/user/docs, the server can list domain.com/test/ files. But it can't list the files of domain.com/. It just shows the page at /var/www/htm, if I don't have any index file under /home/user/docs.
I have this in the httpd.conf file:
<Directory "/home/user/docs">
Options +Indexes
allow from all
</Directory>
how can i hide all files and directories in public_html so when using apps suck Flash Get Site Explorere and similar software it will not show any file or directories in public_html.
View 5 Replies View Related I have been trying to get password protected directories working on my Linode server. It works / behaves in a desktop browser somewhat but not like I am used to with hostmonster. Also for some reason my phone (windows phone just loads the page in the protected directory without prompting for a password. So I imagine there is some security thing I am missing that none of the info I have found searching talks about. Here is what I have done. I have created a password file and set the permissions correctly on that and it works on the desktop. However when I close the browser or open a private browsing session I am never prompted for a password again. It just feels insecure. Plus my windows phone just loads the page with no prompt. With hostmonster if I closed the browser window it would ask me for the username and password again. I also tested hostmonster directory passwords on my phone and it prompts for a username/password.
Here is what I have added to the apache2.conf file. The rest is pretty much default. There is no .htaccess file for that directory.
<Directory "/var/www/protected">
AllowOverride All
AuthType basic
AuthName "Enter Login"
AuthUserFile /etc/htpasswd/.htpasswd
Require valid-user
Order deny,allow
Allow from user1
</Directory>
It may be worth noting that I have two virtual sites / domain names running on this server at the moment however the one that is being used for this is the primary domain name.
OS: Debian 7.3
Apache 2.2.22
We have a website running on Apache ver 2.2.3.
A couple of directories on the website need authentication against LDAP. The setup has been working for many years and all of a sudden is giving some issues.
The page asks for authentication and once login details are entered, either it throws an error "Page has moved" or "Please refresh your browser or reload the page".
As far as I am aware no configuration has been changed for LDAP or for Apache. The website runs on Windows Server 2003.
I am very much new to Apache and cannot seem to find any errors logged.
I'm trying to get multiple GUN groups to have access to certain directories.
Access to transport, delete
When you go to access transport or delete you get prompted for user name and password when entered you get in. However when I add GUNtest10 in the required ldap group. It doesnt accept your user name and password.
######ACL Directives######
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
<Directory /bills/>
AuthType Basic
AuthBasicProvider ldap
AuthName "1Login with your Windows ID and password"
[Code]....
I want to copy whole directories about 20gb to another server across the world.
If I type "mput *" it will say "not a plain file" for directories.
How do you move an entire site, I don't want to achive and move because it is big.
My server listed in spamcannibal but I dont know why
My IPs range are xx.xx.xx.166- 169 and the spam comes from xx.xx.xx.220 which doesnt belongs to me.
through ftp can see max 2000 files for single dir.
How can we setting this value?
I am having a very weird problem with virtuozzo. I created about 8 VPS in my server. But when i logged into the server after two days, I could find that some of the VPS i had created disappeared. And the ones that still listed, were in the mounted state.
I have no idea of what is happening with the server. To list all the VPS back i had to log into the base node and restart service vz.
I don log into the virtuozzo very often, but whenever i log into the panel after some time ( a day or two) this is what happens.
I need to move clients over to the new VPS, but the issue is causing a lot of worry for me. What if this happens once i move the client over. I cannot always go restarting th vz.
Please solve these issues
1) VPS changing to the mounted state
2) VPS disappearing from the virtuozzo panel.
My server has been formated it has two drives. I have my back up on the second drives.
What is the command I use to list the drives and how to mount the second drive.
Checking a domain for RBL listing
How can I check if my domain is listed in the RBL listing?
I have a problem with the configuration of my domain check out.
intodns.com/camhotgirls.com
The problem here specifically seems to be that the nameserver2 is not listed with the parent servers. I have no idea what that means and how I can list them?
I've just made a transition from a VDS to a Dedicated and I'm having problems preventing directory contents from showing. In my previous server whenever I created a directory, it would automatically give a 403 when you tried to access the directory directly in your browser (which is what I want). Now when I set up directories in this new dedicated the contents of the directories display when there is either no index page or if I didn't have an htaccess file preventing it from listing the contents.
So what im asking is how did my previous server automatically set up the directories to not display the contents but use the contents and allow access to say for example pictures in the directory?
Is there a way I can have apache automatically do this for me or do I have to place a blank index page in every directory i create or have to place an htaccess file in every directory I create? How can I protect the contents with a 403 but still allow the contents to be accessed only through full path?
I have an APC AP7930 which just randomly stopped showing the amperage of the circuit. When I log into the device I see:
Code:
Communication Status
Communication has been lost to the device!
and in the logs see:
Code:
08/26/2007 11:00:53 Switched Rack PDU: Communications lost.
08/26/2007 10:55:21 Switched Rack PDU: Communications lost.
08/26/2007 10:49:39 Switched Rack PDU: Communications lost.
08/26/2007 10:27:58 Switched Rack PDU: Communications lost.
08/26/2007 09:57:58 Switched Rack PDU: Communications lost.
Anyone ever see this on the AP793X series? My next step is to contact APC as think the unit might be under warranty. But it definitely will not be fun to migrate power for the some 20 devices connected to it...
I recently upgraded the firmware and rebooted the management interface several times to no avail. Powering down the PDU is not an option at this point.
This is the first time I've had an issue with an APC product. This isn't a huge issue. But I DO rely on amperage readings to keep from tripping breakers and keep power even among cabinets...
Anyone knows what is the optimum time to set for the delay in Windows Grey Listing?
View 3 Replies View RelatedWhat is the best way to get a list of all the software installed on a Linux server? Are there specific shell commands for this?
View 12 Replies View RelatedI set up my own webserver earlier this year using a dedicated server from my hosting company (IIS, win2003), for some reason two of my websites on there are not being listed by Google (or any search engine) at all. Could there be something wrong in my setup that can cause this to happen?
View 3 Replies View RelatedI recently had an issue where my box wasnt listing accounts (on logging into WHM for the first time it would, thereafter browsing different functions in WHM it would fail to list any accounts), would not list any zone items when editing DNS zones and in general was acting very strange.
I think the tech support chap narrowed it down to zero free inodes on the filesystem (i was even getting errors when editing files with 'vi'). This was increased for the VPS and all issues seemed to be resolved...
However named and httpd were not starting after reboots. Again on looking closely named and httpd were missing from /etc/init.d (on CentOS 5.3)! This is very strange and i certainly didnt modify those nor delete such critical files.
For a second opinion, is there any cPanel script that can be ran to fix the issues, i am concerned other things have been affected but havent manifested themselves yet (other files deleted etc). Does cPanel update script create the init.d files or is this done by the CentOS operating systems itself? Are these files modified during a cPanel update script?
These init.d files for named and httpd have been readded (copied across from another box) and it seems to be ok again, but ideas on howto proceed much appreciated, as i mentioned i dont want any nasty supprises!
I've been happily banning ip's using the output from
netstat -plan|grep :80|awk {'print $5'}|cut -d: -f 1|sort|uniq -c|sort -nk 1
for over a year now, with iptables. However recently, after upgrading to apache 2.2, the connections in netstat get listed as ipv6. A row can look like this for example:
tcp6 0 0 ::ffff:12.123.123.123:80 ::ffff:12.123.12.:12382 ESTABLISHED-
(actual ip addresses changed)
As you can see, the remote ip address isn't complete, it's cut off, so the script used to sum up connections and insert into iptables isnt doing anything.
Initially I was able to connect via FTP. Then all of a sudden I started getting 550 SSL/TLS required on the control channel. Why did it suddenly required SSL/TLS when I did not do anything extra?
Now when I'm trying to connect via FTPES using FileZilla (tried both active and passive) on Linux Mint Debian, I'm getting the error below. I'm really stumped. I have tried to Allow incoming from all on port 49152-65534/tcp via Plesk firewall, but still no go.
The worst thing now is, I can't even get FTP to work anymore. Of course I would prefer to have TLS working.
Status:Connection established, waiting for welcome message...
Response:220 ProFTPD 1.3.5 Server (ProFTPD) [206.106.213.243]
Command:AUTH TLS
[Code]....
I've been plagued by CBL listing for quite some time now, on a linux server with Plesk 12.After months of a fierce fight against every possible malware on the about 120 various websites on this server, extensively monitoring clients emails, enabling restrictive policies and finally even hiring a private security firm to investigate the problems further, we were sure that not a single spam message was sent by our server in any way.
So we finally contacted CBL, exposed the issue and got this answer:The CBL attempts to detect compromised machines in a number of ways based upon the email that the CBL's mail servers receive.During this it tries distinguish whether the connections represent real mail servers by ensuring that each connection is claiming a plausible machine name for itself (via SMTP HELO), and not listing any IP that corresponds to a real mail server (or several mail servers if the IP address is a NAT firewall with multiple mail servers behind it). 54.194.XX.XXX was found to be using several different EHLO/HELO names during multiple connections on or about:
2015:01:09 ~16:30 UTC+/- 15 minutes (approximately 3 days, 21 hours, 14 minutes ago).
The names seen included: xxx1.xx, xxx2.xx, xxx3.xx, xxx4.xx, xx.xxx5.xx, veniceberg.com..Note that the above list may include one or more names that are not fully qualified DNS names (FQDNs). Host names (ie: Windows node names) without a dot are not FQDNs.
The final possibility is that 54.194.XX.XXX is not a NAT firewall, and is instead a single box with many domains provisioned on it, some that send email directly, setting the HELO as the sending domain. If this is the case, to prevent a relisting we strongly recommend setting the mail software on the box so that a single identifying name is used in outbound SMTP connections mail software on the box so that a single identifying name is used in outbound SMTP connections. As an alternate workaround, you can configure the mail software to relay its outbound email through an intermediate mail server. Even a co-resident mail server package (such as IIS on Windows) will do fine.
This pointed me to this Plesk Mail setting (not sure if this selection is the default). Now we are waiting a few days to see if changing to "Send from domain IP addresses" solves the issue. I think this is a kind of issue which deserves attention by Parallels to avoid other users go trough our fatiguing ordeals. If this setting is responsible for getting servers blacklisted, it should be highly discouraged.
Today I try to fit all FW rules to my need. After i blocked the traffic "allow other incoming traffic" in the Plesk FW i dont get folders listed via FTP. The FTP client connect to my server, but listing content times out. After allow other traffic the content get listed. The rule "Allow FTP connections" ist in all enabled all the time.
View 3 Replies View RelatedI enabled plesk firewall to my ip now I cant seem retrieve directory listing. I've done the same with ssh that works fine.
Response:230 User logged in
Command:OPTS UTF8 ON
Response:200 UTF8 set to on
Status:Connected
Status:Retrieving directory listing...
Command:PWD
Response:257 "/" is the current directory
Command:TYPE I
Response:200 Type set to I
Command:PASV
Response:227 Entering Passive Mode
Command:MLSD
Error:Connection timed out
Error:Failed to retrieve directory listing