Froggiz's questions

Does anyone know how i could shutdown ACPI Bios computer (without APM) using Syslinux ?

This is the configuration I am using :

 LABEL Shutdown
    MENU LABEL ^Shutdown computer
    KERNEL /tools/poweroff.c32
    TEXT HELP
        Shutdown the computer
    ENDTEXT 

On a non-APM Bios computer I got the error:

 APM not present

I heard that new Bios use most of the time ACPI instead of APM. So i tried acpioff.c32 from https://launchpadlibrarian.net/187530745/acpioff.c32

and replaced poweroff.c32 with it

 mv acpioff.c32 poweroff.c32

But i got the error :

 Failed to load com32 poweroff.c32

Maybe it require some dependencies? but I didn't found them...

I tested it from CDRom, USB Key and LPXE with the same result

Does anyone know how I could have shutdown works on ACPI using Syslinux ?

Thanks

PS

I already tried COM32 instead of KERNEL, but it is the same as said in : http://www.syslinux.org/wiki/index.php?title=SYSLINUX#KERNEL_file

KERNEL recognized extension (case sensitive)

.0 PXE bootstrap program (NBP) [PXELINUX only] .bin "CD boot sector" [ISOLINUX only]

.bs Boot sector [SYSLINUX only]

.bss Boot sector, DOS superblock will be patched in [SYSLINUX only]

.c32 COM32 image (32-bit COMBOOT)

.cbt COMBOOT image (not runnable from DOS)

.com COMBOOT image (runnable from DOS)

.img Disk image [ISOLINUX only]

I tried with Syslinux libraries from BIOS folder and EFI64 with the same result

This is the list of file I included :

I would like to get warned by email when some HTTP codes are triggered, so I wanted to dispatch log between different file depending of the request HTTP code. Like that i can put a watchers on those files and then get warned by mail about it.

Furthermore, logs files should be lighter if HTTP code are in separate files, so it will increase my log parser speed.

I tried to find informations on Apache documentation without success, It look like I have to use SetEnvIf with something like that :

SetEnvIf ??http_code?? 403 403log
CustomLog ${APACHE_LOG_DIR}/403.log vhost_combined env=403log

SetEnvIf ??http_code?? 404 404log
CustomLog ${APACHE_LOG_DIR}/404.log vhost_combined env=404log

SetEnvIf ??http_code?? 406 406log
CustomLog ${APACHE_LOG_DIR}/406.log vhost_combined env=406log

etc ...

Unfortunatly, It seems "http_code" look a like variable doesn't exist in Apache

Q: Is there a way to dispatch access log depending on the HTTP code in Apache ?

Thanks for reading.

i lost my .key file for one of my domain who was made by my ssl provider, i still got my .crt and .pem files.

Is it possible to recreate by my self a .key file matching with the certificate ?

i would like to know if it is possible to send a 200 status with a page content without passing by a status 30x ?

exemple or rewrite condition:

RewriteCond %{HTTP_USER_AGENT} ^-?$
RewriteCond %{REQUEST_URI} !errors\/noua\.htm
RewriteRule (.*) /errors/noua.htm

in this case i would like to display noua.htm directly with a 200 status (without doing a 301 redirect to noua.htm)

Thanks

i'am trying to remove some request from Apache logs. for example, if the request match "RunJobs&tasks=jobs"

i am trying to use

SetEnvIf Request_URI "(RunJobs&tasks=jobs)" dontlog
CustomLog ${APACHE_LOG_DIR}/access.log vhost_combined env=!dontlog

but request_URI doesn't contain the request it stop at the filename.

I checked the other possibilities, but none could help:

Remote_Host
Remote_Addr
Server_Addr
Request_Method
Request_Protocol
Request_URI

how to prevent log if request matches RunJobs&tasks=jobs ?

thanks

since some days, i am getting some tries of hack attacks, but actually all seems fine.

but i saw some log i could not explain:

127.0.0.1:443 216.218.206.66 - - [09/Oct/2015:04:49:29 +0200] "GET / HTTP/1.1" 404 4857 "-" "-"
127.0.0.1:80 220.181.108.177 - - [09/Oct/2015:07:56:11 +0200] "-" 408 0 "-" "-"
127.0.0.1:443 199.115.117.88 - - [09/Oct/2015:10:35:04 +0200] "GET /admin/i18n/readme.txt HTTP/1.1" 404 5081 "-" "python-requests/2.8.0"

here is my log configuration:

# - Exeption
SetEnvIf Request_URI "\.jpg$|\.jpeg$|\.gif$|\.png$|\.ico|\.icon|\.css$|\.js$|piwik\.php$|frogglogin\.php" dontlog
SetEnvIf User-agent "(bot|baidu)" dontlog

CustomLog ${APACHE_LOG_DIR}/access.log vhost_combined env=!dontlog

• how is it possible to thoose requests to reach 127.0.0.1 ?
• what can i do to prevent 408 errors ?
• should i panic to see thoose kind of attaks incomming ?

thanks

PS:

is this a good idea ?

<VirtualHost 127.0.0.1>
# [ Default restriction ]
<Directory />
    Order deny,allow
    Deny from all
    allow from 127.0.0.1
</Directory>
</VirtualHost>

i am trying to clean my apache log, so i try to seprate trafic / bot / stats in 3 differents files

i used the doc : http://httpd.apache.org/docs/2.4/en/logs.html

# [ Logs Exeptions ]
# - Exeption
SetEnvIf Request_URI "\.jpg$|\.jpeg$|\.gif$|\.png$|\.ico|\.icon|\.css$|\.js$|piwik\.php$|frogglogin\.php" dontlog
SetEnvIf User-agent "bot|baidu" dontlog
# - Special rules
SetEnvIf User-agent "bot|baidu" botlog
SetEnvIf Request_URI "piwik\.php$" piwiklog
# - Custom log
CustomLog ${APACHE_LOG_DIR}/bot.log combined env=botlog
CustomLog ${APACHE_LOG_DIR}/piwik.log combined env=piwiklog
# - logs 
CustomLog ${APACHE_LOG_DIR}/access.log combined env=!dontlog

acces.log is correct, there is only accessed files, but bot & piwik log are empty ! i tried common instead of combined but with the same result... (apache has been restarted)

can someone explain me what i did wrong ?

Thanks

i'am trying to do a simple redirect to a maintenance page, but seems like apache won't let me do !

i have a folder for 3 version of a wiki (each with a specific language), so i want to redirect each wiki trafic to his own maintenance page.

here is my .htaccess

 #Redirect trafic to maintenance page
 RewriteEngine On
 RewriteCond %{REQUEST_URI} !maintenance.htm$ [NC]
 RewriteRule "(.*\/wiki.*\/).*" "$1/maintenance.htm" [R=302,L]

• mod_rewrite is enabled
• AllowOverride All is enabled
• i tested my regexp https://regex101.com/r/jN2kA7/1
• RewriteRule ^.*$ maintenance.htm [R=302,L] strangely redirect to http://myserver/var/www/wiki/maintenance.htm

the goal is to redirect "myserver/wiki/ANYTHING" to "myserver/wiki/maintenance.htm"

if someone could tell me what i am doing wrong, it would be nice

Thanks

Edit:

After some more test, seems like i am looking for something like that

RewriteRule "(.*)" "??PROTOCOL??://%{HTTP_HOST}/??SITEFOLD??/maintenance.htm" [R=302,L]

i created a copy of the system in a VMWare Virual Machine (v7), size is 7.11 Go compressed, 70 Go uncompressed (sorry system is in french !) log in: adminstrateur & password: T3st https://mega.co.nz/#!l981ACQK!LnLFiUD5-MqPI9PnoOEpb_BiERkPe6W3PFa_x8dc_cE

There is 40 GB missing on my hard drive, and I've tried lots of things to track it down without success (chkdsk /r /f, Defrag, WinDirStat, Space sniffer, Boot on Windows defender offline, GMER 2.1.1 rootkit removal, streams, vssadmin, dism etc.). By the way the programs have been executed as admin & system

You can see the disk space detail here:

The only detail I can find is from chksdsk, which says that the 40 GB is used by the system:

Le nom de volume est System.

Avertissement ! Le paramètre F n'a pas été spécifié.
Exécution de CHKDSK en mode lecture seule.

CHKDSK est en train de vérifier les fichiers (étape 1 sur 3)...
  46402816 enregistrements de fichier traités.
La vérification des fichiers est terminée.
  793 enregistrements de grand fichier traités.
  0 enregistrements de fichier incorrect traités.
  0 enregistrements EA traités.
  84 enregistrements d'analyse traités.
CHKDSK est en train de vérifier les index (étape 2 sur 3)...
  46451532 entrées d'index traitées.
La vérification des index est terminée.
  0 fichiers non indexés analysés.
  0 fichiers non indéxés récupérés.
CHKDSK est en train de vérifier les descripteurs de sécurité (étape 3 sur 3)
  46402816 SD/SID de fichiers traités.
La vérification des descripteurs de sécurité est terminée.
  24359 fichiers de données traités.
CHKDSK vérifie le journal USN...
  100 % effectués. (1212416 octets USN sur 1216272 traités)
  1216272 octets USN traités.
Vérification du journal USN terminée.
Windows a vérifié le système de fichiers sans trouver de problème.

   157701119 Ko d'espace disque au total.
    26568260 Ko dans 260039 fichiers.
      130984 Ko dans 24360 index.
           0 Ko dans des secteurs défectueux.
    46482335 Ko utilisés par le système.
       65536 Ko occupés par le fichier journal.
    84519540 Ko disponibles sur le disque.

      4096 octets dans chaque unité d'allocation.
  39425279 unités d'allocation au total sur le disque.
  21129885 unités d'allocation disponibles sur le disque.

(46482335 Ko utilisés par le système means 46 GB used by system)

It doesn't seem to be in the System Volume Information folder, either:

Diskpart show that s it is only one partition :

i also tried to boot on linux debian live cd to check hard drive file & NTFS integrity:

result of "du -xks ./* | sort -n" (all is ok)

 0          ./Documents and Settings
 1          ./autorun.inf
 1          ./boot.ini.1.cache
 1          ./boot.ini.cache
 1          ./boot.ini..cache
 8          ./BOOTSECT.BAK
 16         ./cleanmem_log.txt
 22         ./SRVPRB
 53         ./SRVLOG
 234        ./$Recycle.Bin
 376        ./bootmgr
 504        ./Config.Msi
 916        ./_icon
 971        ./SRVSCRIPT
 2443       ./SRVTOOL
 3376       ./System Volume Information
 3792       ./inetpub
 15436      ./Boot
 19636      ./SRVWEB
 169092     ./Recovery
 281139     ./ProgramData
 513829     ./SRVINFO
 1421744    ./Program Files (x86)
 1543517    ./Users
 2877066    ./Program Files
 4197856    ./SRVFPT
 14981405   ./Windows

ntfsfix & ntfsfix -d say all is ok

but ntfsck return tones of the following error: error getting bit value for record {offset value}

on google there is only 2k results, some of thoose results are pointing on ntfsck source, the others seams not revelant...

Q : How do I find eliminate this space that's used by the system?

some more infos :

1. the system come from VMware converter, the original system (physic) has the same space trouble
2. the disk has been shrinked with EASEUS Partition Master, but the trouble was present before
3. When i compress the Virtual Machine i got as result a 14Go size tar.gz archive, like if thoose 40Go where empty

EDIT :

Used space has been located in MFT but no tool actually get rid of it.