I am trying to access url: http://www.domain.com/data/images/.mthumbs/thumb-image.png
I know that this file definitely exists and correct permissions for reading: /data/images/.mthumbs/thumb-image.png
But when I view in url apache give forbidden error. Could it be because of the .mthumbs
I want to move my php scripts out of the /var/www so that they are not accessible via a URL. But where is the most logical place to store these?
When a IP address gets banned how can I check if the banned IP address is from China. If yes, then add it to the permanent ban list.
I have found this nice guide which write the banned IP to file.
Reason: I am getting a lot of brute force attacks from China daily, thankfully fail2ban is helping restrict this although they appear to be getting worse and they are just changing their IP Address.
Or even better would be if there was a maintained database of known hacker IP addresses.
Example 1
Hi,
The IP 60.169.78.77 has just been banned by Fail2Ban after
4 attempts against vsftpd.
Here are more information about 60.169.78.77:
% [whois.apnic.net node-7]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 60.166.0.0 - 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
changed: [email protected] 20040721
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: [email protected]
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: [email protected] 20070416
mnt-by: MAINT-CHINANET
source: APNIC
person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: [email protected]
nic-hdl: JW89-AP
mnt-by: MAINT-NEW
changed: [email protected] 19990818
source: APNIC
Regards,
Fail2Ban
Example 2
Hi,
The IP 60.169.78.81 has just been banned by Fail2Ban after
4 attempts against vsftpd.
Here are more information about 60.169.78.81:
% [whois.apnic.net node-6]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 60.166.0.0 - 60.175.255.255
netname: CHINANET-AH
descr: CHINANET anhui province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: JW89-AP
mnt-by: APNIC-HM
mnt-routes: MAINT-CHINANET-AH
mnt-lower: MAINT-CHINANET-AH
status: ALLOCATED PORTABLE
changed: [email protected] 20040721
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: [email protected]
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: [email protected] 20070416
mnt-by: MAINT-CHINANET
source: APNIC
person: Jinneng Wang
address: 17/F, Postal Building No.120 Changjiang
address: Middle Road, Hefei, Anhui, China
country: CN
phone: +86-551-2659073
fax-no: +86-551-2659287
e-mail: [email protected]
nic-hdl: JW89-AP
mnt-by: MAINT-NEW
changed: [email protected] 19990818
source: APNIC
Regards,
Fail2Ban
Example 3
Hi,
The IP 222.133.244.99 has just been banned by Fail2Ban after
4 attempts against vsftpd.
Here are more information about 222.133.244.99:
% [whois.apnic.net node-6]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 222.133.244.96 - 222.133.244.127
netname: LCZFFHQ
country: CN
descr: liaochenggovermentfanghuoqiang
admin-c: DS95-AP
tech-c: DS95-AP
status: ASSIGNED NON-PORTABLE
changed: [email protected] 20060122
mnt-by: MAINT-CNCGROUP-SD
source: APNIC
route: 222.132.0.0/14
descr: CNC Group CHINA169 Shandong Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: [email protected] 20060118
source: APNIC
person: Data Communication Bureau Shandong
nic-hdl: DS95-AP
e-mail: [email protected]
address: No.77 Jingsan Road,Jinan,Shandong,P.R.China
phone: +86-531-6052611
fax-no: +86-531-6052414
country: CN
changed: [email protected] 20050330
mnt-by: MAINT-CNCGROUP-SD
source: APNIC
Regards,
Fail2Ban
I am trying to unblock an IP address without restarting Fail2Ban each time, what is the best way of doing this? Or can you point me in the direction of a useful guide?
As you can see below the IP address I am trying to remove is: 89.31.259.161
# iptables -L -n
Chain INPUT (policy DROP)
target prot opt source destination
fail2ban-apache-badbots tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 80,443
fail2ban-httpd tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
fail2ban-sasl tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 25,465,143,220,993,110,995
fail2ban-SSH tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
fail2ban-httpd tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
fail2ban-httpd tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
fail2ban-vsftpd tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 80,443,25,465,110,995,143,993,587,465,21,20,2855
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:54000
Chain FORWARD (policy DROP)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain fail2ban-SSH (1 references)
target prot opt source destination
RETURN all -- 0.0.0.0/0 0.0.0.0/0
Chain fail2ban-apache-badbots (1 references)
target prot opt source destination
RETURN all -- 0.0.0.0/0 0.0.0.0/0
Chain fail2ban-httpd (3 references)
target prot opt source destination
DROP all -- 89.31.259.161 0.0.0.0/0
DROP all -- 89.31.259.161 0.0.0.0/0
RETURN all -- 0.0.0.0/0 0.0.0.0/0
RETURN all -- 0.0.0.0/0 0.0.0.0/0
RETURN all -- 0.0.0.0/0 0.0.0.0/0
Chain fail2ban-sasl (1 references)
target prot opt source destination
RETURN all -- 0.0.0.0/0 0.0.0.0/0
Chain fail2ban-vsftpd (1 references)
target prot opt source destination
RETURN all -- 0.0.0.0/0 0.0.0.0/0
I was able to run: iptables -D fail2ban-httpd -s 89.31.259.161 -j DROP although this only deleted one of the lines.
I have this in my vhost file which direct all sub domains which do not exist to the main www.
<VirtualHost *:80>
ServerName mysite.com
ServerAlias *.mysite.com
Redirect 301 / http://www.mysite.com/
</VirtualHost>
The problem I have at the moment is that some people are linking to my website with www.mysite.com. notice the . at the end. This is causing the CMS to break.
Is there a way to modify this ServerAlias or an alternative way so that this has a wild card at the end? I tried adding a * but this didn't work.
This is the full vhost for this domain:
# DEV
<VirtualHost *:80>
ServerName dev.mysite.com
DocumentRoot /var/www/mysite.com/subdomain/dev/public
ErrorLog /var/log/apache2/mysite.com-error.log
LogLevel warn
CustomLog /var/log/apache2/mysite.com-access.log combined
</VirtualHost>
<VirtualHost *:80>
ServerName www.mysite.com
DocumentRoot /var/www/mysite.com/public
<Directory /var/www/mysite.com/public>
Options +FollowSymlinks
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} -s [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^.*$ - [NC,L]
RewriteRule ^.*$ index.php [NC,L]
ErrorDocument 404 index.php
</Directory>
<Directory /var/www/mysite.com/public/webapp>
RewriteEngine Off
<Files *>
order allow,deny
deny from all
</Files>
<FilesMatch "\.(png|gif|jpe?g|css|js|swf|flv|htc|eot|woff|ttf|svg)$">
order allow,deny
allow from all
</FilesMatch>
</Directory>
<Directory /var/www/mysite.com/public/webapp/shared>
<Files *>
order allow,deny
allow from all
</Files>
</Directory>
ErrorLog /var/log/apache2/mysite.com-error.log
LogLevel warn
CustomLog /var/log/apache2/mysite.com-access.log combined
</VirtualHost>
# Redirect for non existent subdomains
<VirtualHost *:80>
ServerName mysite.com
ServerAlias *.mysite.com
Redirect 301 / http://www.mysite.com/
</VirtualHost>
I have disabled .htaccess thats the reason for all the <Directory>
I need to go through the mail.log and filter out a few emails that have been causing problems and wondered if there is anyway to make my life easier.
Is there anyway to parse the mail.log to make it easier to read (maybe displayed in a HTML table with sort capabilities) and filter emails from the log?
Is it possible to run a cp command which creates a backup of a file and renames it with todays date/time
e.g:
I found that adding
RewriteRule .* - [E=HTTP_IF_MODIFIED_SINCE:%{HTTP:If-Modified-Since}]
RewriteRule .* - [E=HTTP_IF_NONE_MATCH:%{HTTP:If-None-Match}]
To the bottom of my htaccess file (below all rewriterule) solved my issue (HTTP_IF_MODIFIED_SINCE was not being set) with caching dynamic generated images. Brilliant.
Although what does this actually do and why it is needed? Is it necessary I have this in every .htaccess or can I change the apache server config so I dont have to add this to every website project?
I am trying to configure fail2ban for my server and have come across: apache-overflows in the .config
What does it do/protect against?
I am receiving the following errors from rkhunter. I have recently upgraded my server from lenny to squeeze and this may have caused the problem. How do I fix this or hide the error messages?
Warning: The modules file '/proc/modules' is missing.
Warning: Suspicious file types found in /dev:
/dev/shm/network/ifstate: ASCII text
Warning: Hidden directory found: /dev/.udev
I also not get a second email: Please inspect this machine, because it may be infected. Please can anybody point me in the right direction to find the cause of these errors?
I have noticed a number of duplicate files such as the default Apache vHost, I have both: - default - default.dpkg-dist
Will Apache still read the .dpkg-dist file extension?
If I dont set a error log inside a virtual host it will default to the default error/access log. Is there a way to turn this off for one virtual host?
I have tried reading the manual although to be honest I am still finding it hard to understand and get my head around what the Order/Allow actually does and what should be the default settings for web server.
I have the following default config, where I have turned off .htaccess and symbolic links.
Although I am not really sure what the Order Allow,Deny and Allow from all actually does? Should I change this to Allow from 127.0.0.1?
<Directory />
Options -Indexes -FollowSymLinks MultiViews
AllowOverride None
Order Allow,Deny
Allow from all
</Directory>
Additionally do I need the below <Files> or is there a better way of writing this for apache?
<Directory /var/www/example/subdomains/dev/public/webapp>
RewriteEngine Off
<Files *>
order allow,deny
deny from all
</Files>
<FilesMatch "\.(png|gif|jpe?g|png|css|js|swf|ps|flv)$">
order allow,deny
allow from all
</FilesMatch>
</Directory>
Each email that is generated by the shop web application is returning: Delivery status notification, invalid header: bad MIME
From looking at the error message it look like it is complaining about the HTML that is in the email although when viewing the source there doesn't look like a problem.
Your message WAS SUCCESSFULLY RELAYED to:
<[email protected]>
This delivery report was generated by the program amavisd-new at host
example.com. Our internal reference code for your message is
20971-09/NNjaWqvFY5Qg
INVALID HEADER: BAD MIME HEADER SECTION OR BAD MIME STRUCTURE
MIME error: error: couldn't parse head; error near:; Return ID: 1; Return
Date: 11/09/2011
Return-Path: <[email protected]>
From: =?UTF-8?B?WW91ciBTdG9yZQ==?=<[email protected]>
Message-ID: <[email protected]>
X-Mailer: PHP/5.3.4
Subject: =?UTF-8?B?WW91ciBTdG9yZSAtIFJldHVybiBVcGRhdGUgMQ==?=
dsn_status
Reporting-MTA: dns; example.com
Received-From-MTA: smtp; example.com ([127.0.0.1])
Arrival-Date: Sun, 11 Sep 2011 18:54:40 +0100 (BST)
Original-Recipient: rfc822;[email protected]
Final-Recipient: rfc822;[email protected]
Action: delayed
Status: 2.0.0
Diagnostic-Code: smtp; 250 2.6.0 Bad message, but will be delivered anyway
Last-Attempt-Date: Sun, 11 Sep 2011 18:54:40 +0100 (BST)
Final-Log-ID: 20971-09/NNjaWqvFY5Qg
header
Return-Path: <[email protected]>
Received: from example.com (cpc10-donc9-2-0-cust122.barn.cable.virginmedia.com [94.171.174.123])
by example.com (iRedMail) with ESMTPSA id A84BE5E099
for <[email protected]>; Sun, 11 Sep 2011 18:54:40 +0100 (BST)
To: [email protected]
Subject: =?UTF-8?B?WW91ciBTdG9yZSAtIFJldHVybiBVcGRhdGUgMQ==?=
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Date: Sun, 11 Sep 2011 17:54:40 +0000
From: =?UTF-8?B?WW91ciBTdG9yZQ==?=<[email protected]>
Reply-To: Your Store<[email protected]>
X-Mailer: PHP/5.3.4
Content-Type: multipart/related; boundary="----=_NextPart_b45f3c386576f1955bb5338634f5047f"
Message-Id: <[email protected]>
Email Message source that causes the above error:
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from localhost (localhost.localdomain [127.0.0.1])
by example.com (iRedMail) with ESMTP id 4C03E5E09C
for <[email protected]>; Sun, 11 Sep 2011 18:54:41 +0100 (BST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=example.com;
h=message-id:content-type:content-type:x-mailer:reply-to:from
:from:date:date:mime-version:subject:subject:to; s=dkim; t=
1315763680; x=1316627680; bh=18GKmsQjF86uG/PbhhDg2FY9o3H6chH8XZo
4VFFN45k=; b=g4TbDzU8pWzeX7CdmCI/Sq8JjtPM6wTQIMqQ7dRclE0XqCVgEZ4
OeQtpR1zApiV31RLu87k9QQF6a4mvCmr1N31auiq4u+AfxFW3DujSvDz5h3lSSf4
vPVgHwzEBQbaue9VeZ0nPmHhrrJWojv5iMlfjUKIdNJkBuP9BF3plVgA=
X-Quarantine-ID: <NNjaWqvFY5Qg>
X-Amavis-Modified: Mail body modified (using disclaimer) -
example.com
X-Virus-Scanned: by amavisd at example.com
X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: couldn't parse head;
error near:; Return ID: 1; Return Date: 11/09/2011
X-Spam-Flag: NO
X-Spam-Score: -6.697
X-Spam-Level:
X-Spam-Status: No, score=-6.697 tagged_above=-999 required=6.31
tests=[ALL_TRUSTED=-10, AWL=-1.381, FROM_EXCESS_BASE64=1.984,
HTML_MESSAGE=0.001, MISSING_MIME_HB_SEP=2.699] autolearn=disabled
Received: from example.com ([127.0.0.1])
by localhost (example.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id NNjaWqvFY5Qg for <[email protected]>;
Sun, 11 Sep 2011 18:54:40 +0100 (BST)
Received: from example.com (cpc10-donc9-2-0-cust122.barn.cable.virginmedia.com [94.171.174.123])
by example.com (iRedMail) with ESMTPSA id A84BE5E099
for <[email protected]>; Sun, 11 Sep 2011 18:54:40 +0100 (BST)
To: [email protected]
Subject: =?UTF-8?B?WW91ciBTdG9yZSAtIFJldHVybiBVcGRhdGUgMQ==?=
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Date: Sun, 11 Sep 2011 17:54:40 +0000
From: =?UTF-8?B?WW91ciBTdG9yZQ==?=<[email protected]>
Reply-To: Your Store<[email protected]>
X-Mailer: PHP/5.3.4
Content-Type: multipart/related; boundary="----=_NextPart_b45f3c386576f1955bb5338634f5047f"
Message-Id: <[email protected]>
------=_NextPart_b45f3c386576f1955bb5338634f5047f
Content-Type: multipart/alternative; boundary="----=_NextPart_b45f3c386576f1955bb5338634f5047f_alt"
------=_NextPart_b45f3c386576f1955bb5338634f5047f_alt
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Return ID: 1
Return Date: 11/09/2011
Your return has been updated to the following status:
Complete
The comments for your return are:
gsfdgf
g
fdgfdgfdgfd
Please reply to this email if you have any questions.
------=_NextPart_b45f3c386576f1955bb5338634f5047f_alt
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 8bit
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Your Store</title>
<style type="text/css">
v\:* {
behavior: url(#default#VML);
display:inline-block;
}
</style>
</head>
<body bgcolor="#f5f5f5" style="margin:0; padding:0; background-color:#f5f5f5; color:#333333; font-size:12px; font-family:Helvetica, Arial, sans-serif; line-height:18px; width:100% !important;">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center">
<table width="660" border="0" cellspacing="0" cellpadding="0">
<td id="main-bg" align="center" valign="middle" background="http://www.example.com/default/image/mail/body-repeat-white.gif" style="margin:0 auto; background-image:url('http://www.example.com/default/image/mail/body-repeat-white.gif'); background-repeat:repeat-y; width:660px; postion:relative;">
<!--[if gte mso 9]>
<v:background xmlns:v="urn:schemas-microsoft-com:vml">
<v:fill type="solid" src="http://www.example.com/default/image/mail/body-repeat-white.gif" />
</v:background>
<![endif]-->
<table width="580" border="0" cellspacing="0" cellpadding="0" style="overflow:hidden; table-layout:fixed; width:580px; word-wrap:break-word;">
<tr>
<td id="header-bg" bgcolor="#515151" background="http://www.example.com/default/image/mail/head-bg.jpg" style="background-image:url("http://www.example.com/default/image/mail/head-bg.jpg"); background-repeat:no-repeat; background-color:#434343; font-size:30px; color:#ffffff;">
<table border="0" cellspacing="0" cellpadding="20">
<tr>
<td>
<a href="http://localhost/opencart-1.5/" title="Your Store" style="display:block;padding-left:10px;">
<img src="http://localhost/opencart-1.5/image/data/logo.png" alt="Your Store" style="display:block; border:none;" />
</a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td bgcolor="#ffffff" style="background-color:#ffffff; padding:5px 25px 0; font-size:12px; font-family:Helvetica, Arial, sans-serif; line-height:18px;text-align:left;">
<h1 style="color:#333333; font-size:18px; font-weight:bold; line-height:28px; margin:10px 0;">Your Store</h1>
<p>
<strong>Return ID:</strong> 1<br />
<strong>Return Date:</strong> 11/09/2011 </p>
<p>Your return has been updated to the following status: <strong>Complete</strong></p>
<p><strong>The comments for your return are:</strong>gsfdgf<br /><br /><br />g<br />fdgfdgfdgfd</p>
<p>Please reply to this email if you have any questions.</p>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<style type="text/css">
p {
font-size:12px;
font-family:Helvetica, Arial, sans-serif;
line-height:18px;
margin:4px 0 12px;
}
strong {
font-weight:bold;
}
a {
color:#28b0ec;
text-decoration:none;
border:none;
}
a:hover {
color:#28b0ec;
text-decoration:underline;
cursor:pointer;
}
a:visited {
text-decoration:underline;
}
</style>
</body>
</html>
------=_NextPart_b45f3c386576f1955bb5338634f5047f_alt--
------=_NextPart_b45f3c386576f1955bb5338634f5047f--
I know there are a number of different ways to redirect using apache although I wanted to check if this is the correct way of doing it via virtual host?
<VirtualHost *:80>
ServerName example.com
ServerAlias www.example.com
DocumentRoot /var/www/example/public
<Directory "/var/www/example/public">
Options +FollowSymlinks
# Prevent Direct Access to files
<FilesMatch "\.(tpl|ini|log)">
Order deny,allow
Deny from all
</FilesMatch>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^([^?]*) index.php?_route_=$1 [L,QSA]
</Directory>
<Directory "/var/www/example/public/admin/view/javascript/ckeditor">
AddType application/x-javascript .js
AddType text/css .css
AddType text/xml .xml
</Directory>
ErrorLog /var/log/apache2/example-error.log
LogLevel warn
CustomLog /var/log/apache2/example-access.log combined
</VirtualHost>
# Redirect for all non existent subdomains
<VirtualHost *:80>
ServerAlias *.example.com
Redirect 301 / http://www.example.com
</VirtualHost>
How do I go about turning off Apache searching for the .htaccess file by default for each virtual host?
I have tried changing the default virtual host although the htaccess file is still being read. Is there anywhere else I need to change in apache settings?
Also do I need to change this also in the default-ssl?
<VirtualHost *:80>
ServerAdmin [email protected]
DocumentRoot /var/www
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory "/var/www/">
Options -Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
UPDATE: httpd.conf: empty, apache2.conf below:
#
# Based upon the NCSA server configuration files originally by Rob McCool.
#
# This is the main Apache server configuration file. It contains the
# configuration directives that give the server its instructions.
# See http://httpd.apache.org/docs/2.2/ for detailed information about
# the directives.
#
# Do NOT simply read the instructions in here without understanding
# what they do. They're here only as hints or reminders. If you are unsure
# consult the online docs. You have been warned.
#
# The configuration directives are grouped into three basic sections:
# 1. Directives that control the operation of the Apache server process as a
# whole (the 'global environment').
# 2. Directives that define the parameters of the 'main' or 'default' server,
# which responds to requests that aren't handled by a virtual host.
# These directives also provide default values for the settings
# of all virtual hosts.
# 3. Settings for virtual hosts, which allow Web requests to be sent to
# different IP addresses or hostnames and have them handled by the
# same Apache server process.
#
# Configuration and logfile names: If the filenames you specify for many
# of the server's control files begin with "/" (or "drive:/" for Win32), the
# server will use that explicit path. If the filenames do *not* begin
# with "/", the value of ServerRoot is prepended -- so "/var/log/apache2/foo.log"
# with ServerRoot set to "" will be interpreted by the
# server as "//var/log/apache2/foo.log".
#
### Section 1: Global Environment
#
# The directives in this section affect the overall operation of Apache,
# such as the number of concurrent requests it can handle or where it
# can find its configuration files.
#
#
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
#
# NOTE! If you intend to place this on an NFS (or otherwise network)
# mounted filesystem then please read the LockFile documentation (available
# at <URL:http://httpd.apache.org/docs-2.1/mod/mpm_common.html#lockfile>);
# you will save yourself a lot of trouble.
#
# Do NOT add a slash at the end of the directory path.
#
ServerRoot "/etc/apache2"
#
# The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
#
#<IfModule !mpm_winnt.c>
#<IfModule !mpm_netware.c>
LockFile /var/lock/apache2/accept.lock
#</IfModule>
#</IfModule>
#
# PidFile: The file in which the server should record its process
# identification number when it starts.
# This needs to be set in /etc/apache2/envvars
#
PidFile ${APACHE_PID_FILE}
#
# Timeout: The number of seconds before receives and sends time out.
#
Timeout 300
#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive On
#
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
#
MaxKeepAliveRequests 100
#
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
#
KeepAliveTimeout 2
##
## Server-Pool Size Regulation (MPM specific)
##
# prefork MPM
# StartServers: number of server processes to start
# MinSpareServers: minimum number of server processes which are kept spare
# MaxSpareServers: maximum number of server processes which are kept spare
# MaxClients: maximum number of server processes allowed to start
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_prefork_module>
StartServers 3
MinSpareServers 3
MaxSpareServers 4
MaxClients 25
ServerLimit 25
MaxRequestsPerChild 100
</IfModule>
# worker MPM
# StartServers: initial number of server processes to start
# MaxClients: maximum number of simultaneous client connections
# MinSpareThreads: minimum number of worker threads which are kept spare
# MaxSpareThreads: maximum number of worker threads which are kept spare
# ThreadsPerChild: constant number of worker threads in each server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_worker_module>
StartServers 3
MaxClients 25
MinSpareThreads 4
MaxSpareThreads 12
ThreadsPerChild 4
MaxRequestsPerChild 100
</IfModule>
# These need to be set in /etc/apache2/envvars
User ${APACHE_RUN_USER}
Group ${APACHE_RUN_GROUP}
#
# AccessFileName: The name of the file to look for in each directory
# for additional configuration directives. See also the AllowOverride
# directive.
#
AccessFileName .htaccess
#
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
#
<Files ~ "^\.ht">
Order allow,deny
Deny from all
</Files>
#
# DefaultType is the default MIME type the server will use for a document
# if it cannot otherwise determine one, such as from filename extensions.
# If your server contains mostly text or HTML documents, "text/plain" is
# a good value. If most of your content is binary, such as applications
# or images, you may want to use "application/octet-stream" instead to
# keep browsers from trying to display binary files as though they are
# text.
#
DefaultType text/plain
#
# HostnameLookups: Log the names of clients or just their IP addresses
# e.g., www.apache.org (on) or 204.62.129.132 (off).
# The default is off because it'd be overall better for the net if people
# had to knowingly turn this feature on, since enabling it means that
# each client request will result in AT LEAST one lookup request to the
# nameserver.
#
HostnameLookups Off
# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a <VirtualHost>
# container, error messages relating to that virtual host will be
# logged here. If you *do* define an error logfile for a <VirtualHost>
# container, that host's errors will be logged there and not here.
#
ErrorLog /var/log/apache2/error.log
#
# LogLevel: Control the number of messages logged to the error_log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
#
LogLevel warn
# Include module configuration:
Include /etc/apache2/mods-enabled/*.load
Include /etc/apache2/mods-enabled/*.conf
# Include all the user configurations:
Include /etc/apache2/httpd.conf
# Include ports listing
Include /etc/apache2/ports.conf
#
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
# If you are behind a reverse proxy, you might want to change %h into %{X-Forwarded-For}i
#
LogFormat "%v:%p %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
#
# Define an access log for VirtualHosts that don't define their own logfile
CustomLog /var/log/apache2/other_vhosts_access.log vhost_combined
#
# Customizable error responses come in three flavors:
# 1) plain text 2) local redirects 3) external redirects
#
# Some examples:
#ErrorDocument 500 "The server made a boo boo."
ErrorDocument 404 "/404"
Alias /404 /var/www/site/public/404.html
#ErrorDocument 402 http://www.example.com/subscription_info.html
#
#
# Putting this all together, we can internationalize error responses.
#
# We use Alias to redirect any /error/HTTP_<error>.html.var response to
# our collection of by-error message multi-language collections. We use
# includes to substitute the appropriate text.
#
# You can modify the messages' appearance without changing any of the
# default HTTP_<error>.html.var files by adding the line:
#
# Alias /error/include/ "/your/include/path/"
#
# which allows you to create your own set of files by starting with the
# /usr/share/apache2/error/include/ files and copying them to /your/include/path/,
# even on a per-VirtualHost basis. The default include files will display
# your Apache version number and your ServerAdmin email address regardless
# of the setting of ServerSignature.
#
# The internationalized error documents require mod_alias, mod_include
# and mod_negotiation. To activate them, uncomment the following 30 lines.
# Alias /error/ "/usr/share/apache2/error/"
#
# <Directory "/usr/share/apache2/error">
# AllowOverride None
# Options IncludesNoExec
# AddOutputFilter Includes html
# AddHandler type-map var
# Order allow,deny
# Allow from all
# LanguagePriority en cs de es fr it nl sv pt-br ro
# ForceLanguagePriority Prefer Fallback
# </Directory>
#
# ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var
# ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var
# ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var
# ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var
# ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var
# ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var
# ErrorDocument 410 /error/HTTP_GONE.html.var
# ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var
# ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var
# ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var
# ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var
# ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var
# ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var
# ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var
# ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var
# ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var
# ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var
# Active gem for ruby on rails
LoadModule passenger_module /usr/lib/ruby/gems/1.8/gems/passenger-3.0.8/ext/apache2/mod_passenger.so
PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-3.0.8
PassengerRuby /usr/bin/ruby1.8
# Include of directories ignores editors' and dpkg's backup files,
# see README.Debian for details.
# Include generic snippets of statements
Include /etc/apache2/conf.d/
# Include the virtual host configurations:
Include /etc/apache2/sites-enabled
Will turning off override by htaccess in apache have a performance increase? I have had a look online and there is very little articles/reports on this.
If this is the case how do I go about turning this off? Will I do this in the default virtual host file?
A example being:
OpenCart comes with 2 htaccess files mainly for mod_rewrite, if I move this into a <Directory> will this make a difference?
<VirtualHost *:80>
ServerAdmin [email protected]
ServerName shop.co.uk
ServerAlias www.shop.co.uk
DocumentRoot /var/www/shop/public
<Directory /var/www/shop/public>
Options +FollowSymlinks
# Prevent Direct Access to files
<FilesMatch "\.(tpl|ini|log)">
Order deny,allow
Deny from all
</FilesMatch>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^([^?]*) index.php?_route_=$1 [L,QSA]
</Directory>
<Directory /var/www/shop/public/admin/view/javascript/ckeditor>
AddType application/x-javascript .js
AddType text/css .css
# If PHP is mapped to handle XML files, you could have some issues. The following will disable it.
AddType text/xml .xml
</Directory>
ErrorLog /var/log/apache2/shop-error.log
LogLevel warn
CustomLog /var/log/apache2/shop-access.log combined
</VirtualHost>
I have a basic understanding of cron jobs, but I came across a tutorial today which recommends adding:
30 3 * * * wget http://www.mywebsite.com/bamboodir/index.php/recur
31 3 * * * rm -rf recur
What does the rm -rf recur do?
I would like to view what packages are available for update/upgrade without actually changing any files becuase there are some packages I wouldn't like to update. Would it then be possible to apt-get update with exceptions.
I have a virtual server running apache2 on debian. I would like to create a default 404 error message in the apache2.conf for all my websites.
ErrorDocument 404 "/var/www/site/public/404.html"
The error I get after restarting apache is: Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
It works if I enter the URL although I dont want the page to redirect only use a default 404.html page.