478 reputation
413
bio website fussfreehome.com
location Worldwide
age 42
visits member for 2 years, 6 months
seen 1 hour ago

1h
accepted How to handle non-existent subdirectories?
Oct
1
awarded  Notable Question
Sep
25
comment Will /sbin/nologin Protect Apache from Bash Exploit CVE-2014-6271
I don't have a test or citation. The purpose of nologin in /etc/passwd file is to prevent non-root user from signing into the system using the credential of apache, for example. Since apache is already in the system, it does not need to sign in to run a CGI bash script. What it needs is just the execute permission to run.
Sep
25
comment Will /sbin/nologin Protect Apache from Bash Exploit CVE-2014-6271
This question is actually more suited for InfoSec.SE site. Disabling mod_cgi may cause your server to stop working. And also, nologin does not solve this problem.
Sep
25
accepted BingBot hitting multiple subdomains all at the same time, causing panic
Sep
25
comment BingBot hitting multiple subdomains all at the same time, causing panic
Hi Vincent, thank you for your attention. Just to clarify some details. The webmaster crawl pattern has always been at the default crawl rate with default uniform pattern. I was having 403 errors from BingBot before I decided to add in the crawl delay directive, hoping to mitigate the problem. But the situation did not improve. I will file a report and see how it goes from there. Having said that, it would be good if BingBot can be optimized to crawl one subdomain at a time to avoid overloading websites with multiple subdomains since there is no good way to control this with robots.txt
Sep
24
awarded  Notable Question
Sep
24
comment BingBot hitting multiple subdomains all at the same time, causing panic
@closetnoc, I am quite sure those IPs are from Microsoft as I have been running whois and host on them. Example a whois on 207.46.13.100 says "NetName: MICROSOFT-GLOBAL-NET". A PTR lookup says "msnbot-207-46-13-100.search.msn.com". Also, the webmaster tool reported these 403 errors.
Sep
24
asked BingBot hitting multiple subdomains all at the same time, causing panic
Aug
28
comment What can cause the size of HTTP response to vary for the same response body?
If you look at the example above, the response size for 400 error is typically 392 bytes. Why would the web server output custom headers like Foo: xeous...? I thought the http response format is quite standard.
Aug
28
comment What can cause the size of HTTP response to vary for the same response body?
I do not have a custom error page for 400 error, so I expect the response size would be of a constant size 392 bytes. In case of 0 size, yes, I agree with you that premature closure of connection could be the cause. But how do I account for the 4kB output in case 4 and 5?
Aug
26
awarded  Teacher
Aug
26
awarded  Yearling
Aug
26
answered Apache HTTPS ProxyPass certificate location
Aug
26
comment How to handle non-existent subdirectories?
@w3d, /about is a valid about page so /about/123 is returning the about page. I think because I am using proxypass, Apache would not know if the page is non-existent.
Aug
25
comment How to handle non-existent subdirectories?
@closetnoc, I am using proxypass method with php-fpm as the fcgi handler. For handling friendly URLs, the php script itself does an extraction of the parameters using server path info.
Aug
25
asked How to handle non-existent subdirectories?
Aug
24
comment Apache HTTPS ProxyPass certificate location
Looks like you are encrypting the traffic twice. Normally the SSL terminates at the reverse proxy as it is unnecessary to encrypt the traffic over a secure LAN connection.
Aug
14
comment What can cause the size of HTTP response to vary for the same response body?
I believe, except for the first request where the body size is larger, the rest are return in compressed format. Contrary to your second point, all of the responses are static as these are the same error 400 page, which is the reason why I am asking. It is not about troubleshooting performance bottlenecks but understanding the behaviour of the web server.
Aug
10
comment Does lazy loading work on externally hosted images?
I don't see why you need lazy loading for images that are hosted externally since it doesn't affect the performance of your website at all.