Comment by BlaM on Which is faster, and why: transferring several small files...
I guess he's still going to need all the small files in the target system, so he'll probably have to extract the zip later on, i.e. the filesystem will still have to do the work. Sending the large file...
View ArticleComment by BlaM on Apache 2: Prevent image hotlinking serverwide
It doesn't seem to be possible to use mod_rewrite in the global config.
View ArticleComment by BlaM on Apache 2: Prevent image hotlinking serverwide
I think there are much more people without cookies than without referer. Also: I can live with a few hotlinked images slipping through if almost every other person sees the wrong image. That should be...
View ArticleComment by BlaM on Apache 2: Prevent image hotlinking serverwide
As stated in my Question: RewriteEngine does not work in my environment. Not sure why. I use it all over the place. Maybe RewriteRules specified in global scope are overwritten by local .htaccess files.
View ArticleComment by BlaM on Debian Linux: Find Application that generates lots of...
I can't find bandwithd in debian. Any hints where to look?
View ArticleComment by BlaM on Debian Linux: Find Application that generates lots of...
pktstat did it for me. Helped me to find out that my provider charged me for traffic of another server, too - due to a routing problem.
View ArticleComment by BlaM on mod_secdownload for Apache 2.x
Seems to actually work. Thought it was only Apache 1.x because I can't find absolutely NO documentation about it. Any hints? How do I use it?
View ArticleComment by BlaM on Apache 2: Is Referer from current Host
... because I don't know if I'm on localhost? As mentioned in my question: I don't want to add all possible local hostnames manually. I just want to allow all pages that have the current (image's)...
View ArticleComment by BlaM on IIS7: Allow users to identify themselves with either...
We are already considering the first option. It's a webservice, so we don't really have a log-in page. But we could deploy it twice under different urls. Kind of hackish, though. I don't really...
View ArticleComment by BlaM on MySQL stopped asking for passwords
Great, that fixed my problem. Looks like my colleague created such a file... grr
View ArticleComment by BlaM on Someone is abusing my server but how do I stop the abuse?
Have you checked if your server can be used as a proxy server? (But yes, those .so files look very suspicious)
View ArticleComment by BlaM on nginx proxy to Apache/PHP is slow
Because I didn't have time to check/fix all schripts on the server for compatibility with another webserver. I may be able to do that in the long run - but right now it was "hdd crash - so I had to set...
View ArticleAnswer by BlaM for Apache 2: Prevent image hotlinking serverwide
I have a solution, even if it is not very beautiful, because it leaves the default error 403 document changed even if the image is not hotlinked:This goes into apache2.conf: SetEnvIfNoCase Referer...
View ArticleApache 2: Prevent image hotlinking serverwide
I'm trying to block access to images on my server if they are linked from some common "baddies", i.e. sites with users that tend to use other peoples...
View ArticleDebian Linux: Find Application that generates lots of Incoming Traffic
Is there any way to find out which application on a server is responsible for incoming traffic?I have a debian linux server that has a lot of incoming traffic and would like to know if someone managed...
View Articlemod_secdownload for Apache 2.x
Is there something like mod_secdownload (which is available for lighttpd) also available for Apache 2.x?The mod provides expiring URLs, so that it is possible to prevent hotlinking of files. A similar...
View ArticleApache 2: Is Referer from current Host
I have an Apache 2 with mod_setenvif. My goal is to stop all hotlinking of images in my global apache.conf. Currently that's:<FilesMatch ".(gif|jpg|jpeg|png)$"> SetEnvIfNoCase Referer...
View Article.htaccess - Remove all cookies
I want to make an existing domain a "CDN" domain that serves all images, CSS and JS files (i.e. static files). However that domain was parked earlier and some application on that domain has set...
View ArticleWhat is a CCM_POST HTTP Request?
I keep getting error messages like these on a server running an installation of an embedded Mongoose webserver[1280931978] [error] [client 66.65.74.105] CCM_POST /ccm_system/request: Error 400: Bad...
View ArticleIIS7: Allow users to identify themselves with either "Windows Authentication"...
Is it possible to have both windows authentication and basic authentication enabled on one .asmx page in IIS7?What I want is:Someone calls webserviceIf possible, use windows authentication (e.g. when...
View ArticleMySQL stopped asking for passwords
I'm currently experiencing a weird problem with one of my MySQL database servers:It stopped asking for passwords when I try to access the database from local with the mysql command line tool.I need a...
View ArticleApache 2: Negative FilesMatch / FilesNotMatch
If I want to apply a rule to only some files in apache2.conf, I can use <FilesMatch>.For example:<FilesMatch ".(gif|jpg|jpeg|png|mpg|avi)$"> deny from env=hotlink</FilesMatch>But is...
View ArticleAnswer by BlaM for IIS7 and PHP: Show error messages with all the rest of the...
... and finally I got it working.Based on my stderr findings I did some more googling and found this document about "Secure PHP with Configuration Settings" on IIS.net.I have an dev machine, so I don't...
View ArticleIIS7 and PHP: Show error messages with all the rest of the output
Okay, this is slowly getting annoying. I'm used to work with Apache Webservers and never had any of these problems. IIS seems to try to be intelligent - or whatever.Here's my situation: My customer...
View ArticleAnsible installs php5filter instead of php5
I have a strange problem with Ansible that I use to install / update / manage my webservers.I have an installation script that is supposed to make sure that I always have the latest PHP5 module in my...
View ArticleAnswer by BlaM for Apache 2: SetEnvIf "IP Range"
This is not really a solution to go from RegExp to IP Ranges, but I found a nice script hosted by Google to convert an IP range to a matching regexp. Could be of use for some of you, too...How do I...
View ArticleAnswer by BlaM for fail2ban rule results in "iptables returned 200" error...
I did a quick google search and no answer seemed to help me, so I just tried the first thing that came into my mind:I renamed the rule and made its name shorter:[apache-suspicious]enabled = trueport =...
View ArticleAnswer by BlaM for nginx proxy to Apache/PHP is slow
Okay, I finally found my problem - and it looks as if I was causing my own problems:I misconfigured limit_req_zone throttling my server down to a crawl slower than expected.
View ArticleAnswer by BlaM for Apache in Docker: How do I "access.log"?
So far I have found "docker logs" being mentioned several times. I'm an absolute Docker newb, so that might hold the solution to my problem - but so far I haven't fully understood the concept behind...
View ArticleApache 2: SetEnvIf "IP Range"
In my Apache config I want to set an environment variable if I see that the visitor comes from an specific IP range. Currently I do it this way:SetEnvIfNoCase Remote_Addr "^194\.8\.7[45]\."...
View Articlefail2ban rule results in "iptables returned 200" error message
I just tried to add a new fail2ban rule that is supposed to scan Apache2 error logs for suspicious file access attempts (People who try to access three common login urls that do not exist usually don't...
View ArticleApache in Docker: How do I "access.log"?
I'm just getting started with Docker and richt now I'm trying to figure out how to set up my first dockerized Apache 2 / PHP environment. Up to now I have been using full Linux VMs, where I used...
View ArticleHow to bind MySQL server to more than one IP address?
Is there a secret way to bind MySQL to more than one IP address?As far as I can see the bind-address parameter in the my.cnf does not support more than one IP and you can't have it more than once.
View Article
