Tag Info

Hot answers tagged

3

Checkout this bug report from RedHat : https://bugzilla.redhat.com/show_bug.cgi?id=1232360 Package mod_evasive-1.10.1-22.el7, should fix your issue, was pushed to the Fedora EPEL 7 testing repository. Update it with: su -c 'yum update --enablerepo=epel-testing mod_evasive-1.10.1-22.el7'


3

Yes you can, The first VirtualHost will point to your Wordpress site, the other VirtualHosts will be setup as Reverse Proxy to your other internal devices. Example: <VirtualHost *:443> Servername fw.me.com ProxyPass / https://192.168.1.1:8443/ ProxyPassReverse / https://192.168.1.1:8443/ </VirtualHost> See ...


2

This is, at least in part, governed by the ServerTokens directive, so you could set ServerTokens Prod which will reveal only that the Server is an unspecified version of Apache, but even the manual itself suggests this is not a security measure.


1

I have not used PHP, but I've used FastCGI to accomplish a similar thing with other lanaguages, and that's the approach I'd recommend, especially since php 5.3.3 and newer has an implementation built in, PHP-FPM. You can find documentation on how to use this on the official PHP website: FastCGI Process Manager (FPM). This has many features, but the most ...


1

[Sat Jun 06 05:53:24.412867 2015] [authz_core:error] [pid 28374:tid 140381836453632] [client 108.205.62.183:55886] AH01630: client denied by server configuration: /usr/local/apache2 That means you haven't configured authorization for your webserver. What you want to do is ensure that you have something like <Directory /usr/local/apache2/cgi-bin> ...


1

You could have a script in your server that makes all kind of test among them if the server is alive, here's one: #!/bin/bash date; echo "uptime:" uptime echo "Currently connected:" w echo "--------------------" echo "Last logins:" last -a |head -3 echo "--------------------" echo "Disk and memory usage:" df -h | ...


1

If I understand you correctly, you simply don't want to run HTTP as root. Either don't have Apache listen to port 80 and use IPtables to redirect those packets to a higher port number; or tell Linux that ports < 1024 are not secure. See the excellent answer at http://unix.stackexchange.com/a/10791/105631. Also here: ...


1

Aside: @CodesInChaos Chrome says "outdated security settings", NOT "obsolete cryptography", for SHA1 cert past end of year. The "Your connection is not private" page you added is actually the important symptom. It isn't caused by crypto settings, it's caused if the cert cannot be validated, because it is selfsigned (which is your case with openssl req -new ...


1

Configure a VirtualHost as all the others and configure the ProxyPass and ProxyPassReverse for this specific domain: Servername www.somedomain.com ProxyPass / http://internal-web-server/ ProxyPassReverse / http://internal-web-server/ See http://httpd.apache.org/docs/2.2/mod/mod_proxy.html for details


1

I created a python scrript that will do the task at github: https://github.com/rubo77/vhost-split.py It splits an apache vhost file into separate files so you could use them in the Apache folders sites-available and sites-enabled. Just pass the configuration file and the script will generate a bunch of files named with the ServerName variable found in each ...


1

Do I install packages using dpkg, instead of adding Wheezy in my sources? No. Or should I just add wheezy in my sources? No. Either via dpkg, or via apt-get, do I risk breaking "stuff" if I install two different versions of the same library? Yes. I would recommend instead, asking the maintainer of the project to use the most recent ...



Only top voted, non community-wiki answers of a minimum length are eligible