Tag Info

New answers tagged

0

Not sure whether this will be of any help to you. Please ignore if it was not. You will have to create two hosts files to achieve this: Host File 01: asking the server to listen at 80, for requests for localhost, and feed the root directory through port 80 to those requests. Host File 02: asking the server to listen at 80, for requests for my.domain.com ...


3

I was serving my static files using Django while my media files using Apache. Serving my static files through Apache solved this issue.


1

When you don't have a rewrite base, all you have to do is insert what would have been the base into each of your rewrite rules. RewriteRule ^index\.html$ welcome.html Becomes RewriteRule ^/index\.html$ /welcome.html


1

Using the Standalone version for Youtrack (comes with Tomcat) and Apache, i've succeeded serving Youtrack from a subdirectory (/youtrack) with the following steps: Stop the Youtrack service if it's running Enable the AJP connector by uncommenting the following line in server.xml if it is commented (default: enabled) <Connector port="8009" ...


3

XML-RPC is Being Used to Brute Force Passwords Aside from the security issues mentioned in the other answers, there has been an uptick in brute-force attacks against xmlrpc.php. These attacks are trying to gain passwords. Sucuri has some nice documentation on this. This is not a bug in the software. WP's XML-RPC implementation includes authentication ...


2

I study and research advanced processes for defense and detection for such things. The answer from Rarst is technically correct. No question. However, this smells of what is extremely typical- let me explain. A number of systems were compromised and Wordpress sites were likely bulk attacked and are now targeting known vulnerabilities almost randomly. It ...


3

This was only a DDoS attack or they were trying to hack my site? There is no way to tell the functional aspect of it without seeing POST payload. Since it was aimed at interactive endpoint I would assume that had some point, other than simply exhausting your resources. Although they might have been trying (succeeding? no way to tell without seeing ...


0

I just answered a similar question here: Website opening both on domain name and IP. Is that a problem? You may need to redirect any IP address based requests to your domain name.


1

Check if you have the environment force-no-vary set to TRUE in your configuration, or simply try to set it to FALSE in your virtual host configuration. More details about this and how you should proceed, you can fine here: Environment Variables in Apache. Also, there are modules that may override this header when the response is served to the client - for ...


2

Your DNS example is missing a few elements. Here is how I would set things up. example.com A 10.0.11.101 www CNAME example.com sub-domain CNAME example.com www.sub-domain CNAME example.com If all are on a single web server, then the web server will take the request header and respond to the request accordingly. In this case, only your parent domain needs ...


0

Check that you are using NameVirtualHost directive for each IP address. From the documentation, that is required. Your first Virtual host is the "default" virtual host. I think that your public virtual host isn't actually matching anything and is getting caught in the first "default" virtual host. I would create a "dummy" virtual host that goes first. ...


0

Apache out of the box Apache2 does not support streaming out of the box however nowadays most browsers do, that means if you have correctly setup your MIME applications browsers will decide what course of action to take based on MIME type. That means things like Mp4 will work using a compatible codec installed on the users machine, often things like VLC can ...


0

put this in .htaccess file in you're demo.example.com directory: RewriteEngine On RewriteCond %{HTTP_HOST} ^demo\.example\.com [NC] RewriteRule (.*) http://example.com/demo/$1 [L,R=301] i.e: demo.example.com is in folder root-folder/demo put that .htaccess file on folder demo, not on root-folder. hope this work for you.


0

If you have a virtual host set up, the easiest way to implement the redirect is going to be to replace the virtual host configuration rather than remove it. A virtual host that only redirects has a very simple configuration. <VirtualHost *:80> ServerName sub.example.com RedirectPermanent / http://www.example.com/subdir </VirtualHost> ...


0

Apache2 Environment Variables It would be useful to know what Linux version and release distro the NAS is running due to the fact that Apache2 can be setup in various ways depending on what version of linux your using. Sometimes you need to edit etc/apache2/envvars gedit /etc/apache2/envvars Change: export APACHE_RUN_USER=www-data export ...


1

Looks like you are encrypting the traffic twice - once over WAN and another time over LAN. Normally, the reverse proxy would be set up as the SSL termination point as it is usually unnecessary to encrypt the traffic over a secure LAN connection. From your Apache configuration, the reverse proxy (Server ALPHA) is connecting to the web server (Server BETA) ...


0

NON-WWW URLS TO WWW WITH HTTPS USING HTACCESS: You can add the following code to your .htaccess file, you can find it in your website root directory, if you don't find it you can copy this in a text editor and save it as .htaccess, then upload it. p.s.: Make sure that you backup the .HTACCESS file before you proceed. Incorrect codes can lead to 500 ...


1

You should only serve very generic error page to the user, as providing more details on error may disclose highly valuable information for malicious attacker. However you need more information for debugging. There are following solutions: Log all error information rather than just responding with it. This is good for production servers as allows to ...


1

These sort of entries are common with most websites. I get plenty of them in my apache logs. If you have a secure server configuration, there is nothing to worry about. For example, the fourth entry was probably some bot looking for a phpmyadmin installation file on your server. The second entry was probably a purposeful stray entry for promotional ...


2

It depends on your situation. Your PHP could also handle the lack of database connection in a nice way. But if you have a custom PHP with many possibilities for bugs and problems, go for an HTML page. If you're using a system such as Drupal or WordPress it's best to go with whatever is provided there, possibly adding something such as a module such as ...


3

This really depends on the error being served. For a 404 error, there would be no reason that there are any issues with the server - meaning all the php stuff should be working find. But if you have a 500 there may be an issue with the server, preventing php from running. This really depends on your tolerance for risk.


3

I would say yes, simply because there isn't any need for dynamic error pages. For example: If your database is down or under pressure, it is unlikely that you will want your error pages to be attempting database connections. Likewise, if your server is under pressure, you don't want your error pages to be carrying out any server-side processing. All-in-all, ...


1

Easy. Just set something like this within your main configuration or your virtual configuration: <Directory /var/www/path/to/your/web/documents> Order Deny,Allow Deny from all Allow from 127.0.0.1 ::1 Allow from localhost Allow from 192.168 Allow from 10 Satisfy Any </Directory> The <Directory></Directory> statement ...



Top 50 recent answers are included