Apache « VICOSYS

Archive for the ‘Apache’ Category

blocking hacker scanning your website using various type of extension that is not running on your webserver

Wednesday, April 10th, 2019

If you are running WordPress on Linux, most likely you won’t expect user hitting your website with .asp / .cfm / .jsp extension. When some hackers are trying to scan your site with all these non-sense requests, your webserver will be overloaded due to the 404 page is generated from wordpress.

To deal with this issue – we have written some re-write rules to tackle these requests before this is hitting onto the wordpress core.

RewriteCond %{REQUEST_URI} !^/index.php$
RewriteCond %{REQUEST_URI} !robots.txt$
RewriteCond %{REQUEST_URI} !wp-.*.php$ RewriteCond %{REQUEST_URI} !healthcheck.php$
RewriteRule .*\.(asp|aspx|ashx|asa|jsp|cfm|do|action|cer|exe|txt|htm|html|rar|zip|php)$ – [F,L,NC]

Posted in Apache, Linux | No Comments »

Specify Exprire/Cache control headers for static content in apache httpd

Friday, April 19th, 2013

in /etc/httpd/conf/httpd.conf

Add

#A better header control on images/static content
Include conf/extra/httpd-expire.conf

Then create /etc/httpd/conf/extra/httpd-expire.conf

ExpiresActive on

# Perhaps better to whitelist expires rules? Perhaps.
ExpiresDefault “access plus 1 month”

# cache.appcache needs re-requests
# in FF 3.6 (thx Remy ~Introducing HTML5)
ExpiresByType text/cache-manifest “access plus 0 seconds”

# Your document html
ExpiresByType text/html “access plus 0 seconds”

# Data
ExpiresByType text/xml “access plus 0 seconds”
ExpiresByType application/xml “access plus 0 seconds”
ExpiresByType application/json “access plus 0 seconds”

# RSS feed
ExpiresByType application/rss+xml “access plus 1 hour”

# Favicon (cannot be renamed)
ExpiresByType image/x-icon “access plus 1 week”

# Media: images, video, audio
ExpiresByType image/gif “access plus 1 month”
ExpiresByType image/png “access plus 1 month”
ExpiresByType image/jpg “access plus 1 month”
ExpiresByType image/jpeg “access plus 1 month”
ExpiresByType video/ogg “access plus 1 month”
ExpiresByType audio/ogg “access plus 1 month”
ExpiresByType video/mp4 “access plus 1 month”
ExpiresByType video/webm “access plus 1 month”

# HTC files (css3pie)
ExpiresByType text/x-component “access plus 1 month”

# Webfonts
ExpiresByType font/truetype “access plus 1 month”
ExpiresByType font/opentype “access plus 1 month”
ExpiresByType application/x-font-woff “access plus 1 month”
ExpiresByType image/svg+xml “access plus 1 month”
ExpiresByType application/vnd.ms-fontobject “access plus 1 month”

# CSS and JavaScript
ExpiresByType text/css “access plus 1 year”
ExpiresByType application/javascript “access plus 1 year”
ExpiresByType text/javascript “access plus 1 year”
Header append Cache-Control “public”

Posted in Apache | No Comments »

Combining REMOTE_ADDR and X-Forwarded-For in apache access_log

Saturday, January 12th, 2013

A great and simple solution to combine the reverse proxy log into access_log

SetEnvIf REMOTE_ADDR “(.+)” CLIENTIP=$1
SetEnvIf X-Forwarded-For “^([0-9.]+)” CLIENTIP=$1
LogFormat “%{CLIENTIP}e %D %u %t \”%r\” %>s %O \”%{Referer}i\” \”%{User-Agent}i\”” trueip_combined

For details: http://blog.grahampoulter.com/2011/10/how-to-log-client-ip-from-apache-behind.html

Posted in Apache | No Comments »

Apache HTACCESS

Friday, November 25th, 2011

.htaccess is a configuration file working in Apache to provide a way to make configuration change per directory.

Username / Password Protection

Apache Configuration File

<Directory "/home/www/www.foo.com/htdocs">
       AllowOverride All
       Options +Includes
</Directory>

.htaccess File

AuthUserFile /home/www/www.foo.com/htpasswd
AuthName "Secret Area"
AuthType Basic
require valid-user

Create htpasswd file

htpasswd -c /home/www/www.foo.com/htpasswd johndoe

Restrict by IP Address

.htaccess File

AuthName “Secret Area”
AuthType Basic
order deny,allow deny from all
allow from 192.168.

Posted in Apache | No Comments »

htaccess using http header information

Tuesday, August 30th, 2011

this is a sample how to restricted web access using X-FORWARDED-FOR information from http header.

SetEnvIf X-FORWARDED-FOR ^1.1.1.1$ allowclient

<limit GET POST PUT>
order deny,allow
deny from all
allow from env=allowclient
</limit>

Posted in Apache | No Comments »

Compiling PHP with mysql support on x64 platform

Tuesday, July 12th, 2011

In order to compile PHP on a 64 bit platform, you will need to include the following configure option
–with-libdir=lib64

Posted in Apache, Linux, MySQL, PHP | No Comments »

Compile OpenSSL with SNI Support

Monday, July 4th, 2011

In order to allow 1 IP Address to serve multiple SSL Websites – we will need to compile OpenSSL with SNI support

./config enable-tlsext shared
make
make install

Posted in Apache | No Comments »

Setting HTTPS for Apache 2.x using Godaddy SSL Certificate

Monday, July 4th, 2011

Generating csr
openssl genrsa -aes128 2048 > www.domain.com.key
openssl req -utf8 -new -key www.domain.com.key -out www.domain.com.csr

Remove Passphrase
openssl rsa -in www.domain.com.key -out www.domain.com.key2

Posted in Apache | No Comments »

Create an Apache Self-signed Certificate without a PassPhrase

Saturday, April 3rd, 2010

This is annoying to start the apache webserver with SSL. After hours of research, I found the following procedures can create a certificate that does not require to type passphrase.

It could be less secured – so use it at your own risk!!

This is how we can generate a DSA Certificate without a passphrase.

openssl dsaparam 1024 -out dsaparams
openssl gendsa -out ca.key dsaparams
openssl req -new -key ca.key -out ca.csr
openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt

Posted in Apache | No Comments »

Redirecting a website based on source IP address.

Monday, July 6th, 2009

To use .htaccess to redirect a website based on the source ip address.

RewriteEngine on
RewriteCond %{REMOTE_HOST} 192.168.1 [OR]
RewriteCond %{REMOTE_HOST} 172.16
RewriteRule “^(.*)$” “http://www2.domainname.com/$1” [R=301,L]

Posted in Apache | Comments Closed

VICOSYS

Archive for the ‘Apache’ Category

blocking hacker scanning your website using various type of extension that is not running on your webserver

Specify Exprire/Cache control headers for static content in apache httpd

Combining REMOTE_ADDR and X-Forwarded-For in apache access_log

Apache HTACCESS

htaccess using http header information

Compiling PHP with mysql support on x64 platform

Compile OpenSSL with SNI Support

Setting HTTPS for Apache 2.x using Godaddy SSL Certificate

Create an Apache Self-signed Certificate without a PassPhrase

Redirecting a website based on source IP address.

Categories

Archives

Meta