we are running a file sharing service and use lighttpd as a web server
the problem is that in Internet Explorer are some files i.e. .mpg, .pdf
and others opened directly in the browser
so is there a way to prevent this behavior(to force the browser to
download the file) by setting headers (or something else) in
lighttpd.conf?
A user from USA clicks www.domain.com/video/vid.flv and they go to the USA server to download.
A user from Europe clicks the same link and they go to Netherlands server.
A user from Asia clicks the same link and they go to Hong Kong.
How can I configure Lighttpd to point *.flv to a specific server based on location. I don't want the www.domain.com to change, I would like it to always show www.domain.com but point to different countries depending on where the person is located.
I want this for *.flv only
to getting a second server, specifically for downloads for my site. Without going into too much detail, my website requires that I get a separate server for downloads, and another for the webserver.
I've already gone ahead and configured the server I want; however, I'm trying to do something different from what I'm used to. I'd like to use Lighttpd, instead of apache, as well as not having cPanel installed on the server. I'd still have cPanel and Apache on my regular webserver, but I'd rather keep my download server relatively clean.
So, once I get my server, and I install Lighttpd, how do I go about setting up everything so that my two servers can communicate? I'd like the download server to be something like: download.mydomain.com , so would I have to set up an A Hostname on my webserver?
What are the steps I should take?
If you know how x-sendfile (lighttpd) and X-Accel-Redirect(Nginx) headers working you know that in php script I can use this headers when I want to download some files direct with lighttpd/nginx and not with php, that is great, but I need to know is possible to set some header in lighttpd/nginx to execute some php script/code after download finished (to back to php)?
View 7 Replies View RelatedSo I've recently ordered a Supermicro 4U server with 24x1TB HDs, 64GB RAM and put it in RAID 10. I'm running Debian 5.0 and have installed lighttpd. All the content I serve are video files (AVi, MP4, MKV, OGM) and each file is about 100-500mb in size. I'm wondering how can I optimize lighttpd to get the best performance out of it. I look forward to your replies.
View 14 Replies View RelatedI am using port 81.
I can access all the files without any issue.
Until today when I check the flv file on other machine,
[url]
It say 404 no found!
I can access other *.jpg *.html file without any problem, but no flv file.
I thought it's firewall issue, but even I turn off firewall, it's still having the same issue.
And I have another computer in the same network, it's fine. they are all windows XP.
Any one manage file hosting servers here?
I run file sharing service, bandwidth usage is going up too much, 300 Mbps, anyone know if file hosting sites use bandwidth shaping ? Any recommended settings for lighttpd?
Logwatch reset my server logs this morning and there's an event I need to check for in /var/log/kern.log
How can I download the gzip of:
kern.log.1.gz
..to my pc desktop, using putty / ssh.
I have just performed a ftp backup of my entire server. I then zipped it up in Cpanel.
The file size its self it 3322megs big (about 3.3gb). If i press it to download it says:
Forbidden
You don't have permission to access /backup/sepmid07/sepmid07.zip on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/1.3.37 Server at backup.xxx*********** Port 80
I have made sure that i have the right permissions, I have also made sure that it belongs to the correct user. Also next to it where it would say how big it is, it says "-"
We have a video streaming server, sometimes the server gets really slow and when we digg into it, we see that the same ip is trying to download the same file many many times. for example i either run this command
netstat -n | grep :80 | awk '{ print $5 }' | awk -F: '{ print $1 }' | sort | uniq -c | sort -n | tail
or go to WHM and see the 'apache stats' and i see 100 http connections from the same ip, trying to download the same video 100 times,,,
what is this? is this some sort of attack? could that be 100 different people that use a proxy? or what is going on?
I am having a large problem moving my sites over to another server. WHM is timing out transferring some large sites that are 4-16 gigs in size, so I tried to manually pkgacct and was able to get one of the accounts setup as root, moved it over to public_html so I could wget from the 2nd server. No luck, permission denied. I tried to change permissions in FTP and found out I couldn't change them so I chmodded the file as root, no luck.
From there I set chown and changed it to the user of the FTP account and was able to modify the file from FTP. I'm still getting a forbidden message when I try wget or download from browser.
Forbidden
You don't have permission to access /backup/cpmove-azcorp.tar.gz on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
At this point I'm clueless, I chmodded the file to 777 so what else could be causing this?
how all the php files popping up for download. Am I missing anything here?
View 2 Replies View RelatedUsers of my web site, running MD-Pro, a PostNuke (php-based) clone, suddenly started to report difficulties downloading files from the download module. We assumed it was the download module and spent ages diagnosing it, uploading fresh versions etc. After some time someone had the bright idea to see if the files could be downloaded direct (using the URLs) to eliminate the web application.
We found: Some users can download all files from the server with no problems.
Some users can download some files but not others.
So far as we can tell only MS Word files are affected, but not all.
The files on the server are not corrupted and there are no permissions issues
Disabling antivirus and firewalls locally makes no difference.
REloading fresh originals to the servedr does not help.
The host reports that no changes to the server have been made recently.
We have discovered that files in the web root are OK. The furhte down the directory structure they are, the less likely they are to download. Performance varies according to the browser in use. According to the host technical support, 'Firefox appears to be returning the data from its own cache. IE is only doing so for root. For the other places IE tries to download the file but stops receiving at exactly the same number of bytes from different locations.'
Using another server on a different host, the problem disappears so it must be due to the host setup in some way. Diagnosis is difficult because the host technical support can't reproduce it.
Platforms include Mac, Windows and Linux and browsers include IE7, Firefox and Safari.
One user with Mac isn't having problems, another with Mac is. All others reporting problems are on Windows. Users are at different locations, using different ISPs so it is unlikely there are common local problems.
The only common element I can see is that the ony files causing trouble are MS Word, though some of these do download OK
We have run out of ideas why this should be happening. How can some users have problems with the same files on the same server and others not?
What could have happened to cause this problem on a site that has been functioning correctly for several months on this server?
We're running a departmental intranet site on Apache 2.2 (on Windows Server 2003, if that matters). I'm trying to figure out how to post exe files on the web site so I can create a link and users can download the programs.trying various changes to my httpd.conf file, but no matter what I tried I get a 403 Forbidden error and the error.log file shows an error "Options ExecCGI is off in this directory:...".
1) I've tried putting the EXE in various folders.
2) I don't have a .htaccess file and I don't see anything in the httpd.conf file that seems to specifically relate to access for this file type.
3) If I put a zip file in the same folders, I am able to download or open it.
4) The httpd.conf file should be whatever was created when we installed Apache.
I just want to use wget command to transfer data from a shared host to dedicated server.Anybody knows how to set wget to download the .htaccess file and keep the file/directory's permission the same as they used to be on the old server?
I only knows these:wget -b -c -r -l0 -np -nH -t0
The problem is that HTTP file download speed is nearly 10 times lower than FTP download speed. What could be limiting it? It's about 7Mb for FTP and 70-100Kb for HTTP. Strangely, download speed is OK when browsing from the server itself (e.g. via RDP)
View 2 Replies View RelatedI'm currently running on a VPS. My site allows for large file uploads and downloads, with files over 600mb in size.
The server has issues when the site gets three or more requests for large file downloads. I'm trying to grow this site to thousands of users and it is hard to do when the site can't handle even three.
I've been told by my host that I need to upgrade to dedicated. My VPS only has 512mb RAM and one large file download is eating up that RAM. This is causing the issue.
I'm a newbie and while I knew I was risking a bit by going with VPS I do find it a bit annoying that these guys advertise 1TB of bandwidth per month but I can't even support downloading 1GB at the same time....maybe it's just me...
Anyway, I am now looking into moving the large files and the upload/download over to Amazon S3. If I do this I am expecting my RAM usage on the VPS to greatly decrease. Is this correct? If my PHP code is running on the VPS, but the actual file download via HTTP is coming from S3, that should not be a heavy load on my box, correct?
any opinions on S3?
Apache 2.2.22
I may be making something here too complicated but a friend downloaded a largish video file via my very basic web server.
Trying to interpret the data I am getting different figures, which one is correct or am I reading it wrongly.
carole [10/Nov/2013:17:55:21 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 2879608
carole [10/Nov/2013:17:56:07 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 1902255
carole [10/Nov/2013:18:11:41 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 206 357
carole [10/Nov/2013:18:11:49 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 206 5317289
carole [10/Nov/2013:18:16:38 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 1834235652
200 totals = 1839017515
File properties on Ubuntu 2.0 GB (1,971,322,880 bytes)
server-status
1-0319210/3/3_ 82.6457740190482630.01880.001880.00 ip72-197-68-158.sd.sd.cox.net3lanesNULL
The other_vhost_access file says 1839017515
Ubuntu file properties says 2.0 GB (1,971,322,880 bytes)
Apache server-status says 1880.00
someone can give me a link "Download Test File" from theplanet..
View 3 Replies View RelatedI'm build Plesk Panel for Linux and Presence Builder, I don't want my user can upload their website to hosting via File Manager. How can I do it...
View 2 Replies View Relatedhow to force that the PHP files won't run if the folder permission is 777
I saw this in micfo.com
but I want to know how to do this
I checked my attachments folder in WHMCS dir
There was a file ftpquickbrute_08.05.2008_10_47_08.log
Opened it up it says:
Quote:
FTP Quick Brute (called c99shell v. w4ck1ng-shell (Private Build v0.3)) started at 08.05.2008 10:47:21
No success. connections!
------------------------------------------
Done!
Total time (secs.): 3.2036
Total connections: 101
Success.: 0
Unsuccess.:101
Connects per second: 31.53
flood in FTP and brute force
all day i receved msgs of BFD someone trying acess server, how to stop it, exemple:
Executed ban command:
/etc/apf/apf -d 221.186.164.233 {bfd.pure-ftpd}
The following are event logs from 221.186.164.233 on service pure-ftpd (all time stamps are GMT -0500):
Oct 25 13:52:37 svr1 pure-ftpd: (?@221.186.164.233) [INFO] New connection from 221.186.164.233
Oct 25 13:52:37 svr1 pure-ftpd: (?@221.186.164.233) [INFO] New connection from 221.186.164.233
Oct 25 13:52:38 svr1 pure-ftpd: (?@221.186.164.233) [WARNING] Authentication failed for user [router] ....
Today I woke up to a couple of emails from people in China and India trying to break into my server. Then as I went to login to WHM I get this message:
This account is currently locked out because a brute force attempt was detected. Please wait 10 minutes and try again. Attempting to login again will only increase this delay.
If you frequently experience this problem, we recommend having your username changed to something less generic.
Are there ways that I can prevent these attacks? I know that the IPs involved are getting banned, but are there any other methods I should be taking?
Over the last few weeks I've been getting emails from WHM stating "x login failures attempts to account root (system) -- too many attempts from this ip"
These emails have been coming in almost hourly and it seems as though somebody is trying to guess the password to the root account and random other accounts.
For now I reduced the amount of failed login attempts to 2 before cPanel blocks the IP.
Is there any other way I can completely stop this person from even attempting to guess my passwords?
For a company I'm working at, two nodes have been brute force attempted through SSH. I've got the logs from both servers in front of me, but could anyone enlighten me of who the ISP is?
ISP: host-80-241-179-30.deltanet.ge
I have a managed VPS and I haven't really ever paid too much attention to the logs until now.
I noticed that the APF logs indicate a 2-5 attacks on my server attempting to log in via ssh. My system allows 10 minutes of log in failure attacks before apf bans the ip.
To eliminate the method of attack, I see 2 ways. One way is to change the SSH port; the second is to only allow ssh via specified ip's.
What are the pro's and con's of both... also are there other ways to eliminate these attacks via ssh?
I would like to know what you do with your BFD data?
when you receive an alert message with IP of who tried to hack your server:
- do you just ignore?
- do you send a message of it abuses for the responsible for IP?
I sent for a long time messages of it abuses, but never nobody answered...
is that normal? when will anybody make something against these people?