Tag Info

New answers tagged

0

Try this: #gateway.school.edu virtual host RewriteCond %{REMOTE_ADDR} ^10\.(.*)$ [OR] RewriteCond %{REMOTE_ADDR} ^172\.(.*)$ [OR] RewriteCond %{REMOTE_ADDR} ^192\.(.*)$ RewriteRule .* reset.school.edu [R=301,L] The .* is a wildcard. The \ escapes the . which anchors the match allowing it to be taken literally. The () may not be necessary- it is usually ...


0

Simply put, these are hackers trying to exploit a specific PHP application install which you do not have. Which application? I would have to research this and it would take too much time to figure it out. But does it really matter which application? No. This is quite common and you should keep an eye on your access logs to controls these behaviors. You will ...


1

Depending on what Apache version your WAMP is using, you may need to replace these directives in your regular virtual host settings: Order allow,deny Allow from all with Require all granted Please see more about upgrading form Apache 2.2 to Apache 2.4 here.


1

Specifying /sbin/nologin as the login shell for the Apache user does not prevent Apache from launching bash. It only prevents logins with the user that is meant to only run the webserver. You might be interested in How do I secure Apache against the Bash Shellshock vulnerability? from the security StackExchange site. It suggests some workarounds like ...


0

Tomcat can be configured to password protect the contents of a web app. Here is a tutorial about setting it up. Create tomcat-users.xml similar to this: <?xml version='1.0' encoding='utf-8'?> <tomcat-users> <role rolename="tomcat"/> <user username="tomcat" password="tomcat" roles="tomcat"/> <user username="myname" ...


1

Now a days Godaddy allows us to buy a higher physical Resource Level. Buy 1024 and use less plugins, I had same issue with my site but I used fewer plugins and bought 1024 (Resource Level 2). Now my site is running well with 10k visitors daily.


0

Yes. This is exactly what a reverse proxy is used for. We do the same exact thing and reverse proxy using NginX as our front end servers. We do this for multiple benefits. NginX as the reverse proxy offloads SSL connections (meaning SSL cert is only installed on our linux Reverse proxy server) We cache static resources (.css .js .gif .jpeg ....) This ...


0

It could be a malformed rewrite rule that is messing you up, but I think it is more likely that your www and no-www are pointing to different sites. Here is how you should diagnose the problem. Verify that the IP address for both versions is pointing to the correct server. I'd recommend using ping or dig for this: $ ping example.com -c 1 PING ...


1

Please reverse everything you have done thus far. Please uninstall IIS Server using Programs and Features, until you understand that IIS operates on port 80(default), and that Apache is also attempting to operate on port 80. You must either choose: To Configure IIS to operate on port 80, and set Apache to operate on port 8080. To Configure Apache on port ...


0

Not sure whether this will be of any help to you. Please ignore if it was not. You will have to create two hosts files to achieve this: Host File 01: asking the server to listen at 80, for requests for localhost, and feed the root directory through port 80 to those requests. Host File 02: asking the server to listen at 80, for requests for my.domain.com ...


3

I was serving my static files using Django while my media files using Apache. Serving my static files through Apache solved this issue.


1

When you don't have a rewrite base, all you have to do is insert what would have been the base into each of your rewrite rules. RewriteRule ^index\.html$ welcome.html Becomes RewriteRule ^/index\.html$ /welcome.html


1

Using the Standalone version for Youtrack (comes with Tomcat) and Apache, i've succeeded serving Youtrack from a subdirectory (/youtrack) with the following steps: Stop the Youtrack service if it's running Enable the AJP connector by uncommenting the following line in server.xml if it is commented (default: enabled) <Connector port="8009" ...


3

XML-RPC is Being Used to Brute Force Passwords Aside from the security issues mentioned in the other answers, there has been an uptick in brute-force attacks against xmlrpc.php. These attacks are trying to gain passwords. Sucuri has some nice documentation on this. This is not a bug in the software. WP's XML-RPC implementation includes authentication ...


2

I study and research advanced processes for defense and detection for such things. The answer from Rarst is technically correct. No question. However, this smells of what is extremely typical- let me explain. A number of systems were compromised and Wordpress sites were likely bulk attacked and are now targeting known vulnerabilities almost randomly. It ...


3

This was only a DDoS attack or they were trying to hack my site? There is no way to tell the functional aspect of it without seeing POST payload. Since it was aimed at interactive endpoint I would assume that had some point, other than simply exhausting your resources. Although they might have been trying (succeeding? no way to tell without seeing ...


0

I just answered a similar question here: Website opening both on domain name and IP. Is that a problem? You may need to redirect any IP address based requests to your domain name.


1

Check if you have the environment force-no-vary set to TRUE in your configuration, or simply try to set it to FALSE in your virtual host configuration. More details about this and how you should proceed, you can fine here: Environment Variables in Apache. Also, there are modules that may override this header when the response is served to the client - for ...


2

Your DNS example is missing a few elements. Here is how I would set things up. example.com A 10.0.11.101 www CNAME example.com sub-domain CNAME example.com www.sub-domain CNAME example.com If all are on a single web server, then the web server will take the request header and respond to the request accordingly. In this case, only your parent domain needs ...


0

Check that you are using NameVirtualHost directive for each IP address. From the documentation, that is required. Your first Virtual host is the "default" virtual host. I think that your public virtual host isn't actually matching anything and is getting caught in the first "default" virtual host. I would create a "dummy" virtual host that goes first. ...


0

Apache out of the box Apache2 does not support streaming out of the box however nowadays most browsers do, that means if you have correctly setup your MIME applications browsers will decide what course of action to take based on MIME type. That means things like Mp4 will work using a compatible codec installed on the users machine, often things like VLC can ...



Top 50 recent answers are included