blob: 3f175ed61da77de0971706fb67d450fceee52186 [file] [log] [blame]
From users-return-119661-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 1 05:04:06 2020
Return-Path: <users-return-119661-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id E53451A2E6
for <apmail-httpd-users-archive@www.apache.org>; Wed, 1 Jul 2020 05:04:05 +0000 (UTC)
Received: (qmail 46233 invoked by uid 500); 1 Jul 2020 05:03:56 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 46015 invoked by uid 500); 1 Jul 2020 05:03:55 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 46002 invoked by uid 99); 1 Jul 2020 05:03:54 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jul 2020 05:03:54 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id E22B2C04A6
for <users@httpd.apache.org>; Wed, 1 Jul 2020 05:03:53 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.2
X-Spam-Level:
X-Spam-Status: No, score=-0.2 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id RUMcxFqMHV8K for <users@httpd.apache.org>;
Wed, 1 Jul 2020 05:03:48 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.166.181; helo=mail-il1-f181.google.com; envelope-from=dave.mehler@gmail.com; receiver=<UNKNOWN>
Received: from mail-il1-f181.google.com (mail-il1-f181.google.com [209.85.166.181])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 504FDBB8FA
for <users@httpd.apache.org>; Wed, 1 Jul 2020 05:03:48 +0000 (UTC)
Received: by mail-il1-f181.google.com with SMTP id q3so9217591ilt.8
for <users@httpd.apache.org>; Tue, 30 Jun 2020 22:03:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
bh=GT4+la+DjuPO6bAjl4+Ag0+NsL4WFBk20oEHlhq9Ii0=;
b=J1B8lv2m99PuzSs2ytJCD0XD8kg/x/KWnekAyoYzXDdf3hi85LV9WAmW0uBQJRbAFs
TCKrBEGkiExFkDY0bN/g7O2LulytGvnUe4DtpJyq5nXeTK+I6s01g/ujKHEBaJuluZOW
pzbXRRZzMlgAUB/KWPmsXI225CBwl92Gve81Kr/JX9dJeb8AaAPLq+Spu+oAO70fgyXt
izgxVCsd8SRI2BcN+kZcr4/5/hDqU82JCtlG7c+ObqytmexWZIm0lA0nLEXHdJfYKC8c
ovbRnK2NVxl8xCroP3vZLa5iDFuj1FEOKVueeXixLtBw6hS//uPvyVSILnut3ivFKl0O
Z/wg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to;
bh=GT4+la+DjuPO6bAjl4+Ag0+NsL4WFBk20oEHlhq9Ii0=;
b=kl5jkiPGGc/xEUm8lVTIbbtYD3MNN7pWC1OVeRfr5YqG32aAJ5DtuoZZqrnEVH7Oht
8eXNUP9IajSmdPXzJpf8kU9FbWOgt9Wi/TvO22FsEgSzkhvOVzJLiKzr7MQDzYxpw4YX
TU8TidSSH7tBUDJeXxBPr5Wwy/iQmmdxHhNjDg2ZslXJLMsmbqOxhuzlUEYE66qoMBI4
04Wf7q3GcYhdkbxLKH5gH/HR10vPLA0/HIOUw8debq4r5kUURvKCnbE/wm/0uruYqNMR
HMhSxabQKOKs0G8jEixgwxBr6s5I83Qz3ZETdrvaX9PMs5P3XEvSYqOcLzNoLo+aFTae
t/ig==
X-Gm-Message-State: AOAM533bizh2bBNrilUGnK+plgdw7y/dTJcUuYoK/9scjyI+dK4yFAgJ
WAsZMpPtJ+Jj5Esxzk3+42ELF/c3HGYoSScViVtntAFh
X-Google-Smtp-Source: ABdhPJyJHavfihal77Hcg6zOZ24l9OhUiI1lrjyJzV+gwhwYCJml+dbmOK7LWp7AygBlHWafzPoMzoOIO2F1DRV4Z18=
X-Received: by 2002:a92:c9cb:: with SMTP id k11mr6225711ilq.70.1593579821845;
Tue, 30 Jun 2020 22:03:41 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a4f:3b52:0:0:0:0:0 with HTTP; Tue, 30 Jun 2020 22:03:41
-0700 (PDT)
In-Reply-To: <202006281750.44007.Antony.Stone@apache.open.source.it>
References: <CAPORhP6C5f1vK5rdi4J_mFKL1=w-wd4Hq=3_mGhaH_1RyJtRAw@mail.gmail.com>
<202006281722.25818.Antony.Stone@apache.open.source.it> <CAPORhP66gy-_sjv6O_jtSBG7QwbQT2_BgySDWerPU3xxh9=_mw@mail.gmail.com>
<202006281750.44007.Antony.Stone@apache.open.source.it>
From: David Mehler <dave.mehler@gmail.com>
Date: Wed, 1 Jul 2020 01:03:41 -0400
Message-ID: <CAPORhP5gkEyrAtqi+uAvJStuCkEqwrO95BFbH0OKaszm=8JuRw@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset="UTF-8"
Subject: Re: [users@httpd] Apache virtual hosts listening on specific IPv6 addresses
Hello,
Thanks, actually turned out to be a firewall issue.
Thanks a lot.
Dave.
On 6/28/20, Antony Stone <Antony.Stone@apache.open.source.it> wrote:
> On Sunday 28 June 2020 at 17:44:48, David Mehler wrote:
>
>> Hello,
>>
>> Yes netstat does show that the sockets are listening on the correct
>> addresses.
>>
>> As for wireshark/tshark can you give me a quick howto to get you the
>> answer to your question? I've never used it.
>
> tshark -i eth0 -f "port 443 and host aaaa:bbb:cc::dddd:eeee"
>
> Change "eth0" if that's not your external interface name, and just put in
> one
> of your IPv6 addresses as indicated.
>
>
> Antony.
>
> --
> How many Prolog programmers does it take to change a lightbulb?
> No.
>
> Please reply to the
> list;
> please *don't* CC
> me.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
From users-return-119662-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 1 14:34:20 2020
Return-Path: <users-return-119662-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 4C7D419A8E
for <apmail-httpd-users-archive@www.apache.org>; Wed, 1 Jul 2020 14:34:19 +0000 (UTC)
Received: (qmail 93347 invoked by uid 500); 1 Jul 2020 14:34:12 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 93289 invoked by uid 500); 1 Jul 2020 14:34:12 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 93235 invoked by uid 99); 1 Jul 2020 14:34:12 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jul 2020 14:34:12 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 902B4180F01
for <users@httpd.apache.org>; Wed, 1 Jul 2020 14:34:11 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 2.254
X-Spam-Level: **
X-Spam-Status: No, score=2.254 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=0.2,
KAM_BADIPHTTP=2, KAM_SHORT=0.001, NORMAL_HTTP_TO_IP=0.001,
NUMERIC_HTTP_ADDR=0.001, RCVD_IN_DNSWL_NONE=-0.0001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
Authentication-Results: spamd3-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024)
with ESMTP id JaKdnl34gN4O for <users@httpd.apache.org>;
Wed, 1 Jul 2020 14:34:07 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::12e; helo=mail-il1-x12e.google.com; envelope-from=wendellhatcher1074@gmail.com; receiver=<UNKNOWN>
Received: from mail-il1-x12e.google.com (mail-il1-x12e.google.com [IPv6:2607:f8b0:4864:20::12e])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 8D0ED7F58D
for <users@httpd.apache.org>; Wed, 1 Jul 2020 14:34:06 +0000 (UTC)
Received: by mail-il1-x12e.google.com with SMTP id r12so14005131ilh.4
for <users@httpd.apache.org>; Wed, 01 Jul 2020 07:34:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=poqagRbP3r8+wNHoaRgY1ls98LpQz1BmN8ISyHjjKiI=;
b=cMm7+/Snk5uJv/eA72E3FkUXSVWyKDSai7yRtLGur8ADSl6oPwIHTMsvxS5glHwJNd
jY7py/eO54RR+yBQZSZ6Gx/WNZgj0Y3j7osCA5dtIqMzHgx2NF4s0GX9MZX+h9Y+qyjF
nngK0NSKQbwuE7ePTVramXQ+jSn1QnUzL8ahKc2iaUD8CJa8H85NwToV6pHbuSF44uxw
2YFwtL6z7IA3XzwbuHr7gn34o5h7UHyOrjU88hyclzqEqL+HK1gU9Q7G7wpkh9+3dYdR
gILBsiAQcJlFwi2ZpSYQkMrhTvEntiMtsxdbecqAHlgZMl3SniBX6H1F3Ei+SCyO5ueq
iLTw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=poqagRbP3r8+wNHoaRgY1ls98LpQz1BmN8ISyHjjKiI=;
b=qMR1VmS4i73l9VN+8VW2TyNLBZlsls3rYlnz35FReg+CrY/t2zZ0yXLmPs4QKn8cqL
9Kk5YJgBa9CWTlhDPOnkJvTwQN4aSmZYYI+xc5pbhOkqjCIWugzqWwYZiRjiqqJc396E
Vl6mE2NGjqOkJvOCtRiOzCOf0HypZOMIj1unRciInh3/S7Jwf/5P1XDQSDIb5KrQBA8O
/eSSSUg7G8IIVU1H2mDcpgCP7SdhXX56cXP0Mkp16ck+y9GOeTZ0jiQzBVk17KTmkU3x
fOEmNVDoE1MDTB1Ec7rTbsHqcoy1km3Xvd3GJeYNyEtk/TkEE5NVDWSv4ET0knDnxTbw
0wLQ==
X-Gm-Message-State: AOAM5308CSjJDngd5pK5jZfNuKm7c7NU+RM7SnbvBpUoQKH1MMaoI2Tt
/HrRP08JsVs+I5Z0NEOyohuHJyOKx1K9zDvqQduil0z3P0Q=
X-Google-Smtp-Source: ABdhPJzcv8BAWM7PYtWuDnU7N6r9WnjMa4PESlsxNbrMhu6EjJJ4TZ2OnPPfaEIMSJ1byh2NB+uxcxM6UsWLojZowpQ=
X-Received: by 2002:a92:7b0b:: with SMTP id w11mr8046362ilc.116.1593614044382;
Wed, 01 Jul 2020 07:34:04 -0700 (PDT)
MIME-Version: 1.0
From: Wendell Hatcher <wendellhatcher1074@gmail.com>
Date: Wed, 1 Jul 2020 10:33:53 -0400
Message-ID: <CAKXhZzwONzGiOPUyYE84tkx8sUgLSnHWOZSQWcOXf-sWGwLiyQ@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary="00000000000006527f05a9622ffd"
Subject: [users@httpd] Apache rewritemap condition that will CDIR-ipmatch against returned
value from the map?
--00000000000006527f05a9622ffd
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello, I have a ipfileblocklist text file that has over 10,000 ip addresses
that need to be matched against. We managed to do a RewriteCond expr "
(%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=80=9D on the cdir ipmatch=
that
comes back from the F5 but there are too many single rewrite cond
exprs that are being called and it caused apache to slow down or lock due
to each singular condition call within the file.
Over 60000 plus single condition calls in our separate ipblocking file.
This causes a huge load on the apache server and locks the system.
RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=
=80=9D
RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=
=80=9D
RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=
=80=9D
We want to load the ips into a rewritemap text or db and call them but the
mapping condition on the CDIR seems to be off somewhat and doesn't work.
Also, as the file grows do you have any recommendations on iobuffering or
slow down loading the data into a map?
Our file has a list of ips like to so. The condition will check each
beginning and end with b$
142.255.85.0/17 b
65.144.129.15/1 b
RewriteMap ipblocklist =E2=80=9Ctxt:/path/to/ipblocklist.txt=E2=80=9D
RewriteCond "${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch ^b$)=E2=
=80=9D
[NC]
RewriteCond ${ipblocklist:%{HTTP:x-etsc-client-ip} -ipmatch}}
^b$ [NC]
RewriteRule ^/[^/]+/Main/ad/ - [F,L]
--00000000000006527f05a9622ffd
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><div style=3D"box-sizing:border-box;font-family:&quot;Sego=
e UI&quot;,system-ui,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quo=
t;,sans-serif;font-size:14px"><p><span style=3D"font-size:11pt"><span style=
=3D"font-family:Calibri,sans-serif">Hello, I have a ipfileblocklist=C2=A0te=
xt file that has over 10,000 ip addresses that need to be matched against. =
We managed to do a=C2=A0</span></span><span style=3D"font-family:Calibri,sa=
ns-serif;font-size:14.6667px;background-color:rgb(252,209,22)">Rewri</span>=
<span style=3D"font-family:Calibri,sans-serif;font-size:14.6667px">teCond e=
xpr =C2=A0&quot; (%{HTTP:x-etsc-client-ip} -ipmatch &#39;X.X.X.X&#39; )=E2=
=80=9D on the cdir ipmatch that comes back from the F5 but there are too ma=
ny single rewrite cond exprs=C2=A0that are being called and it caused apach=
e to slow down or lock=C2=A0 due to each singular condition call within the=
file.=C2=A0</span></p><p><span style=3D"font-family:Calibri,sans-serif;fon=
t-size:14.6667px"><br></span></p><p><span style=3D"font-family:Calibri,sans=
-serif;font-size:14.6667px">Over 60000 plus single condition calls in our s=
eparate=C2=A0ipblocking file. This causes a huge load on the apache server =
and locks the system.=C2=A0</span></p><p>=C2=A0=C2=A0<span style=3D"font-si=
ze:11pt"><span style=3D"font-family:Calibri,sans-serif">=C2=A0=C2=A0</span>=
</span><span style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;ba=
ckground-color:rgb(252,209,22)">Rewri</span><span style=3D"font-family:Cali=
bri,sans-serif;font-size:14.6667px">teCond expr =C2=A0&quot; (%{HTTP:x-etsc=
-client-ip} -ipmatch &#39;X.X.X.X&#39; )=E2=80=9D</span></p><p><span style=
=3D"font-family:Calibri,sans-serif;font-size:14.6667px">=C2=A0 =C2=A0=C2=A0=
</span><span style=3D"font-size:11pt"><span style=3D"font-family:Calibri,sa=
ns-serif">=C2=A0</span></span><span style=3D"font-family:Calibri,sans-serif=
;font-size:14.6667px;background-color:rgb(252,209,22)">Rewri</span><span st=
yle=3D"font-family:Calibri,sans-serif;font-size:14.6667px">teCond expr =C2=
=A0&quot; (%{HTTP:x-etsc-client-ip} -ipmatch &#39;X.X.X.X&#39; )=E2=80=9D</=
span></p><p><span style=3D"font-family:Calibri,sans-serif;font-size:14.6667=
px">=C2=A0=C2=A0</span><span style=3D"font-size:11pt"><span style=3D"font-f=
amily:Calibri,sans-serif">=C2=A0=C2=A0</span></span><span style=3D"font-fam=
ily:Calibri,sans-serif;font-size:14.6667px;background-color:rgb(252,209,22)=
">Rewri</span><span style=3D"font-family:Calibri,sans-serif;font-size:14.66=
67px">teCond expr =C2=A0&quot; (%{HTTP:x-etsc-client-ip} -ipmatch &#39;X.X.=
X.X&#39; )=E2=80=9D</span></p><p>=C2=A0<span style=3D"font-family:Calibri,s=
ans-serif;font-size:14.6667px"><br></span></p><p><span style=3D"font-family=
:Calibri,sans-serif;font-size:14.6667px"><br></span></p><p><span style=3D"f=
ont-family:Calibri,sans-serif;font-size:14.6667px">We want to load the ips =
into a rewritemap text or db and call them but the mapping condition on the=
CDIR seems to be off somewhat and doesn&#39;t work.=C2=A0</span></p><p><sp=
an style=3D"font-family:Calibri,sans-serif;font-size:14.6667px">Also, as th=
e file grows do you have any recommendations on iobuffering=C2=A0or slow do=
wn loading the data into a map?=C2=A0 =C2=A0</span></p><p><span style=3D"fo=
nt-size:11pt"><span style=3D"font-family:Calibri,sans-serif"><br></span></s=
pan></p><p><span style=3D"font-size:11pt"><span style=3D"font-family:Calibr=
i,sans-serif">Our file has a list of ips like to so. The condition will che=
ck each beginning and end with b$ </span></span></p>
<p><span style=3D"font-size:11pt"><span style=3D"font-family:Calibri,sans-s=
erif"><span style=3D"font-size:10pt"><span style=3D"font-family:&quot;Couri=
er New&quot;"><a href=3D"http://142.255.85.0/17">142.255.85.0/17</a> =C2=A0=
=C2=A0b</span></span></span></span></p>
<p><span style=3D"font-size:11pt"><span style=3D"font-family:Calibri,sans-s=
erif"><span style=3D"font-size:10pt"><span style=3D"font-family:&quot;Couri=
er New&quot;"><a href=3D"http://65.144.129.15/1">65.144.129.15/1</a>=C2=A0 =
=C2=A0b</span></span></span></span></p>
<p><span style=3D"font-size:11pt"><span style=3D"font-family:Calibri,sans-s=
erif"></span></span>=C2=A0</p>
<p><span style=3D"font-size:11pt"><span style=3D"vertical-align:baseline"><=
span style=3D"font-family:Calibri,sans-serif"><span style=3D"border:1pt non=
e windowtext;padding:0in">RewriteMap ipblocklist =E2=80=9Ctxt:/path/to/ipbl=
ocklist.txt=E2=80=9D</span></span></span></span></p>
<p><span style=3D"background-color:rgb(0,255,0)"><span style=3D"font-size:1=
1pt"><span style=3D"vertical-align:baseline"><span style=3D"font-family:Cal=
ibri,sans-serif"><span style=3D"border:1pt none windowtext;padding:0in"></s=
pan></span></span></span>=C2=A0=20
RewriteCond &quot;${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch=C2=A0 ^=
b$)=E2=80=9D=C2=A0 =C2=A0[NC]</span></p>
<p style=3D"margin-bottom:32px"><span style=3D"font-size:11pt"><span style=
=3D"vertical-align:baseline"><span style=3D"font-family:Calibri,sans-serif;=
background-color:rgb(0,255,0)">=C2=A0 RewriteCond ${ipblocklist:%{HTTP:x-et=
sc-client-ip} -ipmatch}} =C2=A0^b$=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0 [NC]</span></span></span></p>
<p style=3D"margin-bottom:32px"><span style=3D"font-size:11pt"><span style=
=3D"background-color:rgb(240,242,244)"><span style=3D"vertical-align:baseli=
ne"><span style=3D"font-family:Calibri,sans-serif">RewriteRule ^/[^/]+/Main=
/ad/ - [F,L]</span></span></span></span></p></div></div>
--00000000000006527f05a9622ffd--
From users-return-119663-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 1 17:42:49 2020
Return-Path: <users-return-119663-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id A1C7A1A4DB
for <apmail-httpd-users-archive@www.apache.org>; Wed, 1 Jul 2020 17:42:48 +0000 (UTC)
Received: (qmail 44745 invoked by uid 500); 1 Jul 2020 17:42:42 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 44714 invoked by uid 500); 1 Jul 2020 17:42:42 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 44699 invoked by uid 99); 1 Jul 2020 17:42:42 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jul 2020 17:42:42 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 65A18C0DD0
for <users@httpd.apache.org>; Wed, 1 Jul 2020 17:42:41 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 1.303
X-Spam-Level: *
X-Spam-Status: No, score=1.303 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, KAM_BADIPHTTP=2,
KAM_SHORT=0.001, NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=0.001,
RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=me.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id A9380BIFgjJY for <users@httpd.apache.org>;
Wed, 1 Jul 2020 17:42:39 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=17.58.6.41; helo=pv50p00im-zteg10011401.me.com; envelope-from=rammsteinium@me.com; receiver=<UNKNOWN>
Received: from pv50p00im-zteg10011401.me.com (pv50p00im-zteg10011401.me.com [17.58.6.41])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id C65627F5CF
for <users@httpd.apache.org>; Wed, 1 Jul 2020 17:42:38 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=me.com; s=1a1hai;
t=1593625350; bh=ChyTbFaqDPBG+YTq13HFJUN14BzH2IBTc0h7iK053iA=;
h=From:Content-Type:Subject:Date:To:Message-Id;
b=xjou7QNJ8e23JekSHEEbjvOv8mu3WnTwMSXHsnOVIxmi9yrpei682VK0toJ9mRGn+
MBOlrahSZHn+x7Ul65DrRuz4ng9uTPkDAqVK8yXGkK7qdWi9a5vyi3N1t7x56U+zUV
sTe50Xj47WJppY6UOpB0JUoE1o7oAPSzIsq1j+Lmbg68Q6ysds9bXnbqkiiD1/Qw7+
Em6oHfBtRuJBlsGinrXMFfCyOs5Qjhkhv8qaYD7y3H6X3oxnZkI0W5s7IL/KOjYTKA
/xkmAXv6yo9VIMzm9UZLkKDOSsLNuJpJ6lDkpJaacg5GAb/lPlOnYfLF2pZuq1qPas
7I5AF4hovL2Xg==
Received: from [192.168.1.83] (host81-143-199-113.in-addr.btopenworld.com [81.143.199.113])
by pv50p00im-zteg10011401.me.com (Postfix) with ESMTPSA id B06D0900945
for <users@httpd.apache.org>; Wed, 1 Jul 2020 17:42:28 +0000 (UTC)
From: angel Hall-Coulston <rammsteinium@me.com.INVALID>
Content-Type: multipart/signed;
boundary="Apple-Mail=_27794021-B83A-42B4-BDA1-C5340D58E313";
protocol="application/pgp-signature";
micalg=pgp-sha256
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Wed, 1 Jul 2020 18:42:00 +0100
References: <CAKXhZzwONzGiOPUyYE84tkx8sUgLSnHWOZSQWcOXf-sWGwLiyQ@mail.gmail.com>
To: users@httpd.apache.org
In-Reply-To: <CAKXhZzwONzGiOPUyYE84tkx8sUgLSnHWOZSQWcOXf-sWGwLiyQ@mail.gmail.com>
Message-Id: <975C7E60-393F-4884-9479-742DB3131B3B@me.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235,18.0.687
definitions=2020-07-01_09:2020-07-01,2020-07-01 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=1 malwarescore=0
phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 mlxscore=0
mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx
scancount=1 engine=8.0.1-2004280000 definitions=main-2007010124
Subject: Re: [users@httpd] Apache rewritemap condition that will CDIR-ipmatch
against returned value from the map?
--Apple-Mail=_27794021-B83A-42B4-BDA1-C5340D58E313
Content-Type: multipart/alternative;
boundary="Apple-Mail=_BD9E4C48-DA16-41A4-B360-505F8645B82E"
--Apple-Mail=_BD9E4C48-DA16-41A4-B360-505F8645B82E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
Depends on not =E2=80=99smarter thinking=E2=80=99 but 'out of the box' =
thinking=E2=80=A6 I can block a few hundred thousand IP=E2=80=99s with =
just THREE characters ! Not boasting but I have half of China and Russia =
blocked if not 3/4 with less than 30 characters=E2=80=A6 So I suggest =
(with the aid of the 'GREP' command) to ascertain which countries you =
won=E2=80=99t deal with and block whole IP blocks or domain suffixes=E2=80=
=A6. ONE possible solution and a LOT less work :) Anyone blocked can =
ALWAYS email me if they are a genuine customer and ask WHY they are =
blocked if they feel it=E2=80=99s a wrong decision, 99.99% don=E2=80=99t =
because MOST bad IP requests are automated, so no loss there=E2=80=A6.
Angel
Scotland.
> On 1 Jul 2020, at 15:33, Wendell Hatcher =
<wendellhatcher1074@gmail.com> wrote:
>=20
> Hello, I have a ipfileblocklist text file that has over 10,000 ip =
addresses that need to be matched against. We managed to do a =
RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=80=9D=
on the cdir ipmatch that comes back from the F5 but there are too many =
single rewrite cond exprs that are being called and it caused apache to =
slow down or lock due to each singular condition call within the file.
>=20
>=20
>=20
> Over 60000 plus single condition calls in our separate ipblocking =
file. This causes a huge load on the apache server and locks the system.
>=20
> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' =
)=E2=80=9D
>=20
> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' =
)=E2=80=9D
>=20
> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' =
)=E2=80=9D
>=20
>=20
>=20
>=20
>=20
> We want to load the ips into a rewritemap text or db and call them but =
the mapping condition on the CDIR seems to be off somewhat and doesn't =
work.
>=20
> Also, as the file grows do you have any recommendations on iobuffering =
or slow down loading the data into a map?
>=20
>=20
>=20
> Our file has a list of ips like to so. The condition will check each =
beginning and end with b$
>=20
> 142.255.85.0/17 <http://142.255.85.0/17> b
>=20
> 65.144.129.15/1 <http://65.144.129.15/1> b
>=20
>=20
> RewriteMap ipblocklist =E2=80=9Ctxt:/path/to/ipblocklist.txt=E2=80=9D
>=20
> RewriteCond "${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch =
^b$)=E2=80=9D [NC]
>=20
> RewriteCond ${ipblocklist:%{HTTP:x-etsc-client-ip} -ipmatch}} ^b$ =
[NC]
>=20
> RewriteRule ^/[^/]+/Main/ad/ - [F,L]
>=20
--Apple-Mail=_BD9E4C48-DA16-41A4-B360-505F8645B82E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D"">Depends on not =E2=80=99smarter thinking=E2=80=99 but 'out of =
the box' thinking=E2=80=A6 I can block a few hundred thousand IP=E2=80=99s=
with just THREE characters ! Not boasting but I have half of China and =
Russia blocked if not 3/4 with less than 30 characters=E2=80=A6 So I =
suggest (with the aid of the 'GREP' command) to ascertain which =
countries you won=E2=80=99t deal with and block whole IP blocks or =
domain suffixes=E2=80=A6. ONE possible solution and a LOT less work :) =
Anyone blocked can ALWAYS email me if they are a genuine customer and =
ask WHY they are blocked if they feel it=E2=80=99s a wrong decision, =
99.99% don=E2=80=99t because MOST bad IP requests are automated, so no =
loss there=E2=80=A6.&nbsp;<div class=3D""><br class=3D""></div><div =
class=3D"">Angel</div><div class=3D"">Scotland.<br class=3D""><div><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">On 1 Jul =
2020, at 15:33, Wendell Hatcher &lt;<a =
href=3D"mailto:wendellhatcher1074@gmail.com" =
class=3D"">wendellhatcher1074@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" =
class=3D""><div style=3D"box-sizing:border-box;font-family:&quot;Segoe =
UI&quot;,system-ui,&quot;Apple Color Emoji&quot;,&quot;Segoe UI =
Emoji&quot;,sans-serif;font-size:14px" class=3D""><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D"">Hello, I have a =
ipfileblocklist&nbsp;text file that has over 10,000 ip addresses that =
need to be matched against. We managed to do a&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D on the cdir ipmatch that comes back from the F5 but =
there are too many single rewrite cond exprs&nbsp;that are being called =
and it caused apache to slow down or lock&nbsp; due to each singular =
condition call within the file.&nbsp;</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D""><br class=3D""></span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">Over 60000 plus single condition calls in our =
separate&nbsp;ipblocking file. This causes a huge load on the apache =
server and locks the system.&nbsp;</span></p><p =
class=3D"">&nbsp;&nbsp;<span style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" =
class=3D"">&nbsp;&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">&nbsp; &nbsp;&nbsp;</span><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" =
class=3D"">&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">&nbsp;&nbsp;</span><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" =
class=3D"">&nbsp;&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D</span></p><p class=3D"">&nbsp;<span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D""><br class=3D""></span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D""><br class=3D""></span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" class=3D"">We=
want to load the ips into a rewritemap text or db and call them but the =
mapping condition on the CDIR seems to be off somewhat and doesn't =
work.&nbsp;</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">Also, as the file grows do you have any recommendations on =
iobuffering&nbsp;or slow down loading the data into a map?&nbsp; =
&nbsp;</span></p><p class=3D""><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" class=3D""><br =
class=3D""></span></span></p><p class=3D""><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" class=3D"">Our =
file has a list of ips like to so. The condition will check each =
beginning and end with b$ </span></span></p><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"font-size:10pt" class=3D""><span =
style=3D"font-family:&quot;Courier New&quot;" class=3D""><a =
href=3D"http://142.255.85.0/17" class=3D"">142.255.85.0/17</a> =
&nbsp;&nbsp;b</span></span></span></span></p><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"font-size:10pt" class=3D""><span =
style=3D"font-family:&quot;Courier New&quot;" class=3D""><a =
href=3D"http://65.144.129.15/1" class=3D"">65.144.129.15/1</a>&nbsp; =
&nbsp;b</span></span></span></span></p><div class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" =
class=3D""></span></span>&nbsp;<br =
class=3D"webkit-block-placeholder"></div><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"border:1pt none windowtext;padding:0in" class=3D"">RewriteMap =
ipblocklist =
=E2=80=9Ctxt:/path/to/ipblocklist.txt=E2=80=9D</span></span></span></span>=
</p><p class=3D""><span style=3D"background-color:rgb(0,255,0)" =
class=3D""><span style=3D"font-size:11pt" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"border:1pt none windowtext;padding:0in" =
class=3D""></span></span></span></span>&nbsp;=20
RewriteCond "${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch&nbsp; =
^b$)=E2=80=9D&nbsp; &nbsp;[NC]</span></p><p style=3D"margin-bottom:32px" =
class=3D""><span style=3D"font-size:11pt" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif;background-color:rgb(0,255,0)" =
class=3D"">&nbsp; RewriteCond ${ipblocklist:%{HTTP:x-etsc-client-ip} =
-ipmatch}} =
&nbsp;^b$&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
; [NC]</span></span></span></p><p style=3D"margin-bottom:32px" =
class=3D""><span style=3D"font-size:11pt" class=3D""><span =
style=3D"background-color:rgb(240,242,244)" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D"">RewriteRule =
^/[^/]+/Main/ad/ - [F,L]</span></span></span></span></p></div></div>
</div></blockquote></div><br class=3D""></div></body></html>=
--Apple-Mail=_BD9E4C48-DA16-41A4-B360-505F8645B82E--
--Apple-Mail=_27794021-B83A-42B4-BDA1-C5340D58E313
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEE5j6xVNka+Ov1R06PZqOsqvAod+0FAl78yugACgkQZqOsqvAo
d+157xAAs00DvbPKsppE6wUfQoNIEfnKyg4lBTiazBjAhyQRzlk+Mm5eviTpldgb
Q6CQCYmuA8e2icMpwG7itWDQW+ILT/dD6Wfqz3tQbIF2CA3fL2r26tIhD7B+85dN
b+Rt+1NkdTA2/dbaIW08lAUaf51Ts+526gZn6L+mnwh/HV0Ldq65T1IZbKZbMFvy
PcouCKZDqwVbQyD5i3eMCnavPtZtgvIFicYt2e3IlRXe0t4EFgSkt+9llGh2z6y/
7T1eBZ2nuHH+0NcIBfXZR1bedsYJJgZwltdrBM1nbomD5Sykm0d8J1kXuNPnlCKL
xwbEP4BVhhaCbhaJsOIiAifLtlDwWpZWgVa6cHKHAKgHCw6clGubVPXDs1/KcSc5
+eL5raaNS0/VE2nDtLGkj6QZo8aCN8JuUQ3kuK0ITrcWwqUpzaokdO/UPfIHiMNQ
H0bxUiInFaDBbxzTS8SuLqdOrVi9ACOI3ZEmEwySkt/pPcC/0qD449KzhZtwYr4r
mOHcninwbz9pAfT5qMrXJmICTlayEwdE1kMmZuV8NEPr2h1RHtDmW8s1NzRPHGYF
z+NemgttctCaKEZyJGsESXCa8ZZ6h+IW9P6MHTy4Ei17t1fzTNhhpo5CaIYOJMeK
vdZLn4k6y1JZgKYpiQRZHOkKbbmdZDb1TzenU3D71rkhIpOvqyw=
=TEza
-----END PGP SIGNATURE-----
--Apple-Mail=_27794021-B83A-42B4-BDA1-C5340D58E313--
From users-return-119664-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 1 18:05:20 2020
Return-Path: <users-return-119664-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 4E5331A5BE
for <apmail-httpd-users-archive@www.apache.org>; Wed, 1 Jul 2020 18:05:20 +0000 (UTC)
Received: (qmail 89310 invoked by uid 500); 1 Jul 2020 18:05:14 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 89278 invoked by uid 500); 1 Jul 2020 18:05:14 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 89268 invoked by uid 99); 1 Jul 2020 18:05:14 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jul 2020 18:05:14 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 4E05BC0DCE
for <users@httpd.apache.org>; Wed, 1 Jul 2020 18:05:13 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 2.254
X-Spam-Level: **
X-Spam-Status: No, score=2.254 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=0.2,
KAM_BADIPHTTP=2, KAM_SHORT=0.001, MIME_QP_LONG_LINE=0.001,
NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=0.001,
RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id PPFvNi9JyWF1 for <users@httpd.apache.org>;
Wed, 1 Jul 2020 18:05:09 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.222.171; helo=mail-qk1-f171.google.com; envelope-from=wendellhatcher1074@gmail.com; receiver=<UNKNOWN>
Received: from mail-qk1-f171.google.com (mail-qk1-f171.google.com [209.85.222.171])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 1B00CBC0B4
for <users@httpd.apache.org>; Wed, 1 Jul 2020 18:05:09 +0000 (UTC)
Received: by mail-qk1-f171.google.com with SMTP id z63so23039403qkb.8
for <users@httpd.apache.org>; Wed, 01 Jul 2020 11:05:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=content-transfer-encoding:from:mime-version:subject:date:message-id
:references:in-reply-to:to;
bh=MH/jVm80woXTwYFIjkv4Q4DEBEpsCvjwn24TjHO7Bbk=;
b=AvOK4faiZrvnqyAb1vPIGQWadaNUPuGYhL94ZNHDkkKy9TZ85VdkvoeE4vGhT8ixjk
5Vk0rGuidth7uKFh/fTDQKPaI8wvCQrDPG69t7C17F/aFGK6DUipAWj6FoE7526xOT5u
uPXwamxAOS9Xmd5zp66HNKQxI6mPkr7IAs9G4LZQwy8lWKTDI7GH5AW5wEI4mz7aiwS3
Qcr5Isjqqzos2vslMP+JyIz3bie8LEGgJzR7e9KWAVEMK9W3oIeo7i4boNDL7mRGzdYV
Q+QMvqAkenrs0WVEAWIvuGl9AXo+tOpjacJOz3bO3DvBblM+UE3AWGg1EWpMR4ydWFFn
X9qw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:content-transfer-encoding:from:mime-version
:subject:date:message-id:references:in-reply-to:to;
bh=MH/jVm80woXTwYFIjkv4Q4DEBEpsCvjwn24TjHO7Bbk=;
b=S0+xh88fMsP09lPi20r9z6BPxJuZ4gilMEKdEZBNr2o6wVzxDryyoVPgWWrfH+muB7
rqGgqMB9Wl9IuRg14QH8xFT3xfzZDZuPUH0vj+abQ1gJPXqGnTmcujB6rsYmxn5xgiiX
n5Rie8zYWUnDlnHFGgMzFZxGU+Dkwll4NG/9vJ4VBehl3keFAftb6mJT4DFnQL4OepNZ
gvx9Y/5VfI2Ls9CcvjrB8xQgfVcfCVQuYboC8wZyDnhvffK00Eu82lLx3E6y4esVKpFB
gjVlr5qRyLtIW7O/3X6k5xDMRJhq42hd1l3TcBzg2z180gsxCs+aSrZIf2KxTY90dLEl
UQHg==
X-Gm-Message-State: AOAM533m5TKnNEYu8CGrAk5zRxjyhT17UU7d0gmXRCEkK5lbMmhPrZTe
33QitQtq5KXuEyKPoD80yxr+DyNbmmw=
X-Google-Smtp-Source: ABdhPJzlU27wPYLE4sO50WivZ5shLdn2NW3PmdgBm3u/3KvnfF99M0f6OApTfC96oRH93+wdHafMIg==
X-Received: by 2002:a05:620a:6c9:: with SMTP id 9mr25614197qky.271.1593626708420;
Wed, 01 Jul 2020 11:05:08 -0700 (PDT)
Received: from ?IPv6:2606:a000:1216:4aa0:882a:edf:6f9:be1b? (2606-a000-1216-4aa0-882a-0edf-06f9-be1b.inf6.spectrum.com. [2606:a000:1216:4aa0:882a:edf:6f9:be1b])
by smtp.gmail.com with ESMTPSA id y40sm6740605qtc.29.2020.07.01.11.05.07
for <users@httpd.apache.org>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Wed, 01 Jul 2020 11:05:07 -0700 (PDT)
Content-Type: multipart/alternative; boundary=Apple-Mail-059E43C2-0C4A-4655-B086-DF77FC103894
Content-Transfer-Encoding: 7bit
From: Wendell Hatcher <wendellhatcher1074@gmail.com>
Mime-Version: 1.0 (1.0)
Date: Wed, 1 Jul 2020 14:05:07 -0400
Message-Id: <2C6C20B9-F948-44A4-8E62-67CCF6192E01@gmail.com>
References: <975C7E60-393F-4884-9479-742DB3131B3B@me.com>
In-Reply-To: <975C7E60-393F-4884-9479-742DB3131B3B@me.com>
To: users@httpd.apache.org
X-Mailer: iPhone Mail (17F80)
Subject: Re: [users@httpd] Apache rewritemap condition that will CDIR-ipmatch against returned value from the map?
--Apple-Mail-059E43C2-0C4A-4655-B086-DF77FC103894
Content-Type: text/plain;
charset=utf-8
Content-Transfer-Encoding: quoted-printable
Angel, you are the man what you did in your solution is exactly what we are t=
rying to do block certain countries. I am leaning towards using Perl to loop=
through the bad ips list on a text file and then take the blocked ip match b=
locking similar to the solution in the link below. Can you please take a lo=
ok and provide me with a high-level code set of how you completed this and g=
ot it working with Apache?
https://www.ispcolohost.com/2017/02/03/keeping-amazon-ec2-crap-off-your-webs=
ite/
Wendell
> On Jul 1, 2020, at 1:42 PM, angel Hall-Coulston <rammsteinium@me.com.inval=
id> wrote:
>=20
> =EF=BB=BFDepends on not =E2=80=99smarter thinking=E2=80=99 but 'out of the=
box' thinking=E2=80=A6 I can block a few hundred thousand IP=E2=80=99s with=
just THREE characters ! Not boasting but I have half of China and Russia bl=
ocked if not 3/4 with less than 30 characters=E2=80=A6 So I suggest (with th=
e aid of the 'GREP' command) to ascertain which countries you won=E2=80=99t d=
eal with and block whole IP blocks or domain suffixes=E2=80=A6. ONE possible=
solution and a LOT less work :) Anyone blocked can ALWAYS email me if they a=
re a genuine customer and ask WHY they are blocked if they feel it=E2=80=99s=
a wrong decision, 99.99% don=E2=80=99t because MOST bad IP requests are aut=
omated, so no loss there=E2=80=A6.=20
>=20
> Angel
> Scotland.
>=20
>> On 1 Jul 2020, at 15:33, Wendell Hatcher <wendellhatcher1074@gmail.com> w=
rote:
>>=20
>> Hello, I have a ipfileblocklist text file that has over 10,000 ip address=
es that need to be matched against. We managed to do a RewriteCond expr " (=
%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=80=9D on the cdir ipmatch t=
hat comes back from the F5 but there are too many single rewrite cond exprs t=
hat are being called and it caused apache to slow down or lock due to each s=
ingular condition call within the file.=20
>>=20
>>=20
>>=20
>> Over 60000 plus single condition calls in our separate ipblocking file. T=
his causes a huge load on the apache server and locks the system.=20
>>=20
>> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=
=80=9D
>>=20
>> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=
=80=9D
>>=20
>> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=
=80=9D
>>=20
>> =20
>>=20
>>=20
>>=20
>> We want to load the ips into a rewritemap text or db and call them but th=
e mapping condition on the CDIR seems to be off somewhat and doesn't work.=20=
>>=20
>> Also, as the file grows do you have any recommendations on iobuffering or=
slow down loading the data into a map? =20
>>=20
>>=20
>>=20
>> Our file has a list of ips like to so. The condition will check each begi=
nning and end with b$
>>=20
>> 142.255.85.0/17 b
>>=20
>> 65.144.129.15/1 b
>>=20
>> =20
>> RewriteMap ipblocklist =E2=80=9Ctxt:/path/to/ipblocklist.txt=E2=80=9D
>>=20
>> RewriteCond "${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch ^b$)=E2=
=80=9D [NC]
>>=20
>> RewriteCond ${ipblocklist:%{HTTP:x-etsc-client-ip} -ipmatch}} ^b$ =
[NC]
>>=20
>> RewriteRule ^/[^/]+/Main/ad/ - [F,L]
>>=20
>=20
--Apple-Mail-059E43C2-0C4A-4655-B086-DF77FC103894
Content-Type: text/html;
charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto">Angel, you are the man what you did in your=
solution is exactly what we are trying to do block certain countries. I am l=
eaning towards using Perl to loop through the bad ips list on a text file an=
d then take the blocked ip match blocking similar to the solution in the lin=
k below. &nbsp;Can you please take a look and provide me with a high-level c=
ode set of how you completed this and got it working with Apache?<div><br></=
div><div><a href=3D"https://www.ispcolohost.com/2017/02/03/keeping-amazon-ec=
2-crap-off-your-website/">https://www.ispcolohost.com/2017/02/03/keeping-ama=
zon-ec2-crap-off-your-website/</a><br><br><div dir=3D"ltr">Wendell</div><div=
dir=3D"ltr"><br><blockquote type=3D"cite">On Jul 1, 2020, at 1:42 PM, angel=
Hall-Coulston &lt;rammsteinium@me.com.invalid&gt; wrote:<br><br></blockquot=
e></div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF<meta http-equiv=
=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">Depends on not =E2=80=
=99smarter thinking=E2=80=99 but 'out of the box' thinking=E2=80=A6 I can bl=
ock a few hundred thousand IP=E2=80=99s with just THREE characters ! Not boa=
sting but I have half of China and Russia blocked if not 3/4 with less than 3=
0 characters=E2=80=A6 So I suggest (with the aid of the 'GREP' command) to a=
scertain which countries you won=E2=80=99t deal with and block whole IP bloc=
ks or domain suffixes=E2=80=A6. ONE possible solution and a LOT less work :)=
Anyone blocked can ALWAYS email me if they are a genuine customer and ask W=
HY they are blocked if they feel it=E2=80=99s a wrong decision, 99.99% don=E2=
=80=99t because MOST bad IP requests are automated, so no loss there=E2=80=A6=
.&nbsp;<div class=3D""><br class=3D""></div><div class=3D"">Angel</div><div c=
lass=3D"">Scotland.<br class=3D""><div><br class=3D""><blockquote type=3D"ci=
te" class=3D""><div class=3D"">On 1 Jul 2020, at 15:33, Wendell Hatcher &lt;=
<a href=3D"mailto:wendellhatcher1074@gmail.com" class=3D"">wendellhatcher107=
4@gmail.com</a>&gt; wrote:</div><br class=3D"Apple-interchange-newline"><div=
class=3D""><div dir=3D"ltr" class=3D""><div style=3D"box-sizing:border-box;=
font-family:&quot;Segoe UI&quot;,system-ui,&quot;Apple Color Emoji&quot;,&qu=
ot;Segoe UI Emoji&quot;,sans-serif;font-size:14px" class=3D""><p class=3D"">=
<span style=3D"font-size:11pt" class=3D""><span style=3D"font-family:Calibri=
,sans-serif" class=3D"">Hello, I have a ipfileblocklist&nbsp;text file that h=
as over 10,000 ip addresses that need to be matched against. We managed to d=
o a&nbsp;</span></span><span style=3D"font-family:Calibri,sans-serif;font-si=
ze:14.6667px;background-color:rgb(252,209,22)" class=3D"">Rewri</span><span s=
tyle=3D"font-family:Calibri,sans-serif;font-size:14.6667px" class=3D"">teCon=
d expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=80=9D on th=
e cdir ipmatch that comes back from the F5 but there are too many single rew=
rite cond exprs&nbsp;that are being called and it caused apache to slow down=
or lock&nbsp; due to each singular condition call within the file.&nbsp;</s=
pan></p><p class=3D""><span style=3D"font-family:Calibri,sans-serif;font-siz=
e:14.6667px" class=3D""><br class=3D""></span></p><p class=3D""><span style=3D=
"font-family:Calibri,sans-serif;font-size:14.6667px" class=3D"">Over 60000 p=
lus single condition calls in our separate&nbsp;ipblocking file. This causes=
a huge load on the apache server and locks the system.&nbsp;</span></p><p c=
lass=3D"">&nbsp;&nbsp;<span style=3D"font-size:11pt" class=3D""><span style=3D=
"font-family:Calibri,sans-serif" class=3D"">&nbsp;&nbsp;</span></span><span s=
tyle=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-color:=
rgb(252,209,22)" class=3D"">Rewri</span><span style=3D"font-family:Calibri,s=
ans-serif;font-size:14.6667px" class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc=
-client-ip} -ipmatch 'X.X.X.X' )=E2=80=9D</span></p><p class=3D""><span styl=
e=3D"font-family:Calibri,sans-serif;font-size:14.6667px" class=3D"">&nbsp; &=
nbsp;&nbsp;</span><span style=3D"font-size:11pt" class=3D""><span style=3D"f=
ont-family:Calibri,sans-serif" class=3D"">&nbsp;</span></span><span style=3D=
"font-family:Calibri,sans-serif;font-size:14.6667px;background-color:rgb(252=
,209,22)" class=3D"">Rewri</span><span style=3D"font-family:Calibri,sans-ser=
if;font-size:14.6667px" class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client=
-ip} -ipmatch 'X.X.X.X' )=E2=80=9D</span></p><p class=3D""><span style=3D"fo=
nt-family:Calibri,sans-serif;font-size:14.6667px" class=3D"">&nbsp;&nbsp;</s=
pan><span style=3D"font-size:11pt" class=3D""><span style=3D"font-family:Cal=
ibri,sans-serif" class=3D"">&nbsp;&nbsp;</span></span><span style=3D"font-fa=
mily:Calibri,sans-serif;font-size:14.6667px;background-color:rgb(252,209,22)=
" class=3D"">Rewri</span><span style=3D"font-family:Calibri,sans-serif;font-=
size:14.6667px" class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ip=
match 'X.X.X.X' )=E2=80=9D</span></p><p class=3D"">&nbsp;<span style=3D"font=
-family:Calibri,sans-serif;font-size:14.6667px" class=3D""><br class=3D""></=
span></p><p class=3D""><span style=3D"font-family:Calibri,sans-serif;font-si=
ze:14.6667px" class=3D""><br class=3D""></span></p><p class=3D""><span style=
=3D"font-family:Calibri,sans-serif;font-size:14.6667px" class=3D"">We want t=
o load the ips into a rewritemap text or db and call them but the mapping co=
ndition on the CDIR seems to be off somewhat and doesn't work.&nbsp;</span><=
/p><p class=3D""><span style=3D"font-family:Calibri,sans-serif;font-size:14.=
6667px" class=3D"">Also, as the file grows do you have any recommendations o=
n iobuffering&nbsp;or slow down loading the data into a map?&nbsp; &nbsp;</s=
pan></p><p class=3D""><span style=3D"font-size:11pt" class=3D""><span style=3D=
"font-family:Calibri,sans-serif" class=3D""><br class=3D""></span></span></p=
><p class=3D""><span style=3D"font-size:11pt" class=3D""><span style=3D"font=
-family:Calibri,sans-serif" class=3D"">Our file has a list of ips like to so=
. The condition will check each beginning and end with b$ </span></span></p>=
<p class=3D""><span style=3D"font-size:11pt" class=3D""><span style=3D"font-=
family:Calibri,sans-serif" class=3D""><span style=3D"font-size:10pt" class=3D=
""><span style=3D"font-family:&quot;Courier New&quot;" class=3D""><a href=3D=
"http://142.255.85.0/17" class=3D"">142.255.85.0/17</a> &nbsp;&nbsp;b</span>=
</span></span></span></p><p class=3D""><span style=3D"font-size:11pt" class=3D=
""><span style=3D"font-family:Calibri,sans-serif" class=3D""><span style=3D"=
font-size:10pt" class=3D""><span style=3D"font-family:&quot;Courier New&quot=
;" class=3D""><a href=3D"http://65.144.129.15/1" class=3D"">65.144.129.15/1<=
/a>&nbsp; &nbsp;b</span></span></span></span></p><div class=3D""><span style=
=3D"font-size:11pt" class=3D""><span style=3D"font-family:Calibri,sans-serif=
" class=3D""></span></span>&nbsp;<br class=3D"webkit-block-placeholder"></di=
v><p class=3D""><span style=3D"font-size:11pt" class=3D""><span style=3D"ver=
tical-align:baseline" class=3D""><span style=3D"font-family:Calibri,sans-ser=
if" class=3D""><span style=3D"border:1pt none windowtext;padding:0in" class=3D=
"">RewriteMap ipblocklist =E2=80=9Ctxt:/path/to/ipblocklist.txt=E2=80=9D</sp=
an></span></span></span></p><p class=3D""><span style=3D"background-color:rg=
b(0,255,0)" class=3D""><span style=3D"font-size:11pt" class=3D""><span style=
=3D"vertical-align:baseline" class=3D""><span style=3D"font-family:Calibri,s=
ans-serif" class=3D""><span style=3D"border:1pt none windowtext;padding:0in"=
class=3D""></span></span></span></span>&nbsp;=20
RewriteCond "${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch&nbsp; ^b$)=E2=
=80=9D&nbsp; &nbsp;[NC]</span></p><p style=3D"margin-bottom:32px" class=3D""=
><span style=3D"font-size:11pt" class=3D""><span style=3D"vertical-align:bas=
eline" class=3D""><span style=3D"font-family:Calibri,sans-serif;background-c=
olor:rgb(0,255,0)" class=3D"">&nbsp; RewriteCond ${ipblocklist:%{HTTP:x-etsc=
-client-ip} -ipmatch}} &nbsp;^b$&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp; [NC]</span></span></span></p><p style=3D"margin-botto=
m:32px" class=3D""><span style=3D"font-size:11pt" class=3D""><span style=3D"=
background-color:rgb(240,242,244)" class=3D""><span style=3D"vertical-align:=
baseline" class=3D""><span style=3D"font-family:Calibri,sans-serif" class=3D=
"">RewriteRule ^/[^/]+/Main/ad/ - [F,L]</span></span></span></span></p></div=
></div>
</div></blockquote></div><br class=3D""></div></div></blockquote></div></bod=
y></html>=
--Apple-Mail-059E43C2-0C4A-4655-B086-DF77FC103894--
From users-return-119665-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 1 18:41:37 2020
Return-Path: <users-return-119665-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 2D0331A6F2
for <apmail-httpd-users-archive@www.apache.org>; Wed, 1 Jul 2020 18:41:37 +0000 (UTC)
Received: (qmail 50547 invoked by uid 500); 1 Jul 2020 18:41:30 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 50520 invoked by uid 500); 1 Jul 2020 18:41:30 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 50477 invoked by uid 99); 1 Jul 2020 18:41:30 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jul 2020 18:41:30 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 8F673C0E23
for <users@httpd.apache.org>; Wed, 1 Jul 2020 18:41:29 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 2.306
X-Spam-Level: **
X-Spam-Status: No, score=2.306 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FREEMAIL_REPLY=1, HTML_MESSAGE=0.2,
KAM_BADIPHTTP=2, KAM_SHORT=0.001, NORMAL_HTTP_TO_IP=0.001,
NUMERIC_HTTP_ADDR=0.001, RCVD_IN_DNSWL_LOW=-0.7,
RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=me.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id ib7fsU8mr0MG for <users@httpd.apache.org>;
Wed, 1 Jul 2020 18:41:27 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=17.58.6.43; helo=pv50p00im-hyfv10011601.me.com; envelope-from=rammsteinium@me.com; receiver=<UNKNOWN>
Received: from pv50p00im-hyfv10011601.me.com (pv50p00im-hyfv10011601.me.com [17.58.6.43])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 0F1AC7F58D
for <users@httpd.apache.org>; Wed, 1 Jul 2020 18:41:27 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=me.com; s=1a1hai;
t=1593628879; bh=JReQT2GPKLsqAKWD/6+UwBoYQAv0I5j9GfLenAg3S8g=;
h=From:Content-Type:Subject:Date:To:Message-Id;
b=NpVKJ27K6xl6ejYKQeyOR+JW8EvpWIYg+L9oKrx0Zx+VJnDCtMdBYzIAtFXwp6Jyo
1CN5yP01c1CVazl1r64Jp5JO9dV41/V54CdHE30Gc88AIoRK7p6hDgVUZ0gEig7KA8
ZXtnwfF9U395iXHwNdJ2GNqzmcZ6sb3ou1sFtpHprViZ+WgcA62iDAXLkOVzoqgxOf
IuFCQmZ6diKU+HyP16LPZQ1uo6CvKFbUOn8Ek5XfjfNeqSgLt46mL1+hmumGive7nl
cGJKVqUJ8ZmFUL3X/v5yu0DjHlESs+ast4YFjLW1IYe2wQvOLfJUfPjTLStRv0GztZ
WoaBtKOTKQaxQ==
Received: from [192.168.1.83] (host81-143-199-113.in-addr.btopenworld.com [81.143.199.113])
by pv50p00im-hyfv10011601.me.com (Postfix) with ESMTPSA id F20D33804A3
for <users@httpd.apache.org>; Wed, 1 Jul 2020 18:41:18 +0000 (UTC)
From: angel Hall-Coulston <rammsteinium@me.com.INVALID>
Content-Type: multipart/signed;
boundary="Apple-Mail=_37E3FA76-8317-4334-ABA8-A4681C650F5F";
protocol="application/pgp-signature";
micalg=pgp-sha256
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Wed, 1 Jul 2020 19:41:15 +0100
References: <975C7E60-393F-4884-9479-742DB3131B3B@me.com>
<2C6C20B9-F948-44A4-8E62-67CCF6192E01@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <2C6C20B9-F948-44A4-8E62-67CCF6192E01@gmail.com>
Message-Id: <7E1FB2EF-DB3A-46CA-94E0-8F57FB5A99E0@me.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235,18.0.687
definitions=2020-07-01_10:2020-07-01,2020-07-01 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0
phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 mlxscore=0
mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx
scancount=1 engine=8.0.1-2004280000 definitions=main-2007010130
Subject: Re: [users@httpd] Apache rewritemap condition that will CDIR-ipmatch
against returned value from the map?
--Apple-Mail=_37E3FA76-8317-4334-ABA8-A4681C650F5F
Content-Type: multipart/alternative;
boundary="Apple-Mail=_B12EF420-D2C6-46B9-8127-65E70D10AD97"
--Apple-Mail=_B12EF420-D2C6-46B9-8127-65E70D10AD97
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
Hi Wendell,
I tend to use Apache configuration for blocking, a mix of hosts and also =
IP=E2=80=99s. Sometimes it=E2=80=99s as easy as blocking say '*.ru' as =
it=E2=80=99s highly improbable that some English company has a Russian =
suffix (I could be wrong of course, but if they DO they prob have a UK =
based website too..). You have to be careful though if you have say two =
genuine Russian companies you do business with (for example) to =
'Require' their domain/IP address. Hostnames is sometimes better=E2=80=A6 =
sometimes IP ranges. A mix of both seems a good idea. 'GREP' command =
will come in really useful perhaps 'PIPED' with =E2=80=99SORT' to sift =
through so many IP=E2=80=99s to at least first group them and so break =
down into smaller chunks the work. There are many sites that can help =
too:
https://www.countryipblocks.net/acl.php =
<https://www.countryipblocks.net/acl.php>
https://www.abuseipdb.com/check/5.101.0.209 =
<https://www.abuseipdb.com/check/5.101.0.209>
Not forgetting the great (no, honestly) manual pages of Apache that you =
can enable through Apache configurations contained in httpd.conf and the =
'extra' directory so you can access through your site(s), much quicker =
and easier to navigate. For example I can type 'open http::/manual' from =
my terminal, and I=E2=80=99m instantly there in the manual home index =
page. Hope this helps, have a nice day.
Angel
Scotland
> On 1 Jul 2020, at 19:05, Wendell Hatcher =
<wendellhatcher1074@gmail.com> wrote:
>=20
> Angel, you are the man what you did in your solution is exactly what =
we are trying to do block certain countries. I am leaning towards using =
Perl to loop through the bad ips list on a text file and then take the =
blocked ip match blocking similar to the solution in the link below. =
Can you please take a look and provide me with a high-level code set of =
how you completed this and got it working with Apache?
>=20
> =
https://www.ispcolohost.com/2017/02/03/keeping-amazon-ec2-crap-off-your-we=
bsite/ =
<https://www.ispcolohost.com/2017/02/03/keeping-amazon-ec2-crap-off-your-w=
ebsite/>
>=20
> Wendell
>=20
>> On Jul 1, 2020, at 1:42 PM, angel Hall-Coulston =
<rammsteinium@me.com.invalid> wrote:
>>=20
>> =EF=BB=BFDepends on not =E2=80=99smarter thinking=E2=80=99 but 'out =
of the box' thinking=E2=80=A6 I can block a few hundred thousand IP=E2=80=99=
s with just THREE characters ! Not boasting but I have half of China and =
Russia blocked if not 3/4 with less than 30 characters=E2=80=A6 So I =
suggest (with the aid of the 'GREP' command) to ascertain which =
countries you won=E2=80=99t deal with and block whole IP blocks or =
domain suffixes=E2=80=A6. ONE possible solution and a LOT less work :) =
Anyone blocked can ALWAYS email me if they are a genuine customer and =
ask WHY they are blocked if they feel it=E2=80=99s a wrong decision, =
99.99% don=E2=80=99t because MOST bad IP requests are automated, so no =
loss there=E2=80=A6.
>>=20
>> Angel
>> Scotland.
>>=20
>>> On 1 Jul 2020, at 15:33, Wendell Hatcher =
<wendellhatcher1074@gmail.com <mailto:wendellhatcher1074@gmail.com>> =
wrote:
>>>=20
>>> Hello, I have a ipfileblocklist text file that has over 10,000 ip =
addresses that need to be matched against. We managed to do a =
RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' )=E2=80=9D=
on the cdir ipmatch that comes back from the F5 but there are too many =
single rewrite cond exprs that are being called and it caused apache to =
slow down or lock due to each singular condition call within the file.
>>>=20
>>>=20
>>>=20
>>> Over 60000 plus single condition calls in our separate ipblocking =
file. This causes a huge load on the apache server and locks the system.
>>>=20
>>> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' =
)=E2=80=9D
>>>=20
>>> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D
>>>=20
>>> RewriteCond expr " (%{HTTP:x-etsc-client-ip} -ipmatch 'X.X.X.X' =
)=E2=80=9D
>>>=20
>>>=20
>>>=20
>>>=20
>>>=20
>>> We want to load the ips into a rewritemap text or db and call them =
but the mapping condition on the CDIR seems to be off somewhat and =
doesn't work.
>>>=20
>>> Also, as the file grows do you have any recommendations on =
iobuffering or slow down loading the data into a map?
>>>=20
>>>=20
>>>=20
>>> Our file has a list of ips like to so. The condition will check each =
beginning and end with b$
>>>=20
>>> 142.255.85.0/17 <http://142.255.85.0/17> b
>>>=20
>>> 65.144.129.15/1 <http://65.144.129.15/1> b
>>>=20
>>>=20
>>> RewriteMap ipblocklist =E2=80=9Ctxt:/path/to/ipblocklist.txt=E2=80=9D
>>>=20
>>> RewriteCond "${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch =
^b$)=E2=80=9D [NC]
>>>=20
>>> RewriteCond ${ipblocklist:%{HTTP:x-etsc-client-ip} -ipmatch}} ^b$ =
[NC]
>>>=20
>>> RewriteRule ^/[^/]+/Main/ad/ - [F,L]
>>>=20
>>=20
--Apple-Mail=_B12EF420-D2C6-46B9-8127-65E70D10AD97
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
Wendell,<div class=3D"">I tend to use Apache configuration for blocking, =
a mix of hosts and also IP=E2=80=99s. Sometimes it=E2=80=99s as easy as =
blocking say '*.ru' as it=E2=80=99s highly improbable that some English =
company has a Russian suffix (I could be wrong of course, but if they DO =
they prob have a UK based website too..). You have to be careful though =
if you have say two genuine Russian companies you do business with (for =
example) to 'Require' their domain/IP address. Hostnames is sometimes =
better=E2=80=A6 sometimes IP ranges. A mix of both seems a good idea. =
'GREP' command will come in really useful perhaps 'PIPED' with =E2=80=99SO=
RT' to sift through so many IP=E2=80=99s to at least first group them =
and so break down into smaller chunks the work. There are many sites =
that can help too:</div><div class=3D""><a =
href=3D"https://www.countryipblocks.net/acl.php" =
class=3D"">https://www.countryipblocks.net/acl.php</a></div><div =
class=3D""><br class=3D""></div><div class=3D""><a =
href=3D"https://www.abuseipdb.com/check/5.101.0.209" =
class=3D"">https://www.abuseipdb.com/check/5.101.0.209</a></div><div =
class=3D""><br class=3D""></div><div class=3D"">Not forgetting the great =
(no, honestly) manual pages of Apache that you can enable through Apache =
configurations contained in httpd.conf and the 'extra' directory so you =
can access through your site(s), much quicker and easier to navigate. =
For example I can type 'open http::/manual' from my terminal, and I=E2=80=99=
m instantly there in the manual home index page. Hope this helps, have a =
nice day.</div><div class=3D""><br class=3D""></div><div =
class=3D"">Angel</div><div class=3D"">Scotland</div><div class=3D""><br =
class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On 1 Jul 2020, at 19:05, Wendell Hatcher &lt;<a =
href=3D"mailto:wendellhatcher1074@gmail.com" =
class=3D"">wendellhatcher1074@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><meta =
http-equiv=3D"content-type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><div dir=3D"auto" class=3D"">Angel, you are the man what you =
did in your solution is exactly what we are trying to do block certain =
countries. I am leaning towards using Perl to loop through the bad ips =
list on a text file and then take the blocked ip match blocking similar =
to the solution in the link below. &nbsp;Can you please take a look and =
provide me with a high-level code set of how you completed this and got =
it working with Apache?<div class=3D""><br class=3D""></div><div =
class=3D""><a =
href=3D"https://www.ispcolohost.com/2017/02/03/keeping-amazon-ec2-crap-off=
-your-website/" =
class=3D"">https://www.ispcolohost.com/2017/02/03/keeping-amazon-ec2-crap-=
off-your-website/</a><br class=3D""><br class=3D""><div dir=3D"ltr" =
class=3D"">Wendell</div><div dir=3D"ltr" class=3D""><br =
class=3D""><blockquote type=3D"cite" class=3D"">On Jul 1, 2020, at 1:42 =
PM, angel Hall-Coulston &lt;<a href=3D"mailto:rammsteinium@me.com.invalid"=
class=3D"">rammsteinium@me.com.invalid</a>&gt; wrote:<br class=3D""><br =
class=3D""></blockquote></div><blockquote type=3D"cite" class=3D""><div =
dir=3D"ltr" class=3D"">=EF=BB=BF<meta http-equiv=3D"Content-Type" =
content=3D"text/html; charset=3Dutf-8" class=3D"">Depends on not =
=E2=80=99smarter thinking=E2=80=99 but 'out of the box' thinking=E2=80=A6 =
I can block a few hundred thousand IP=E2=80=99s with just THREE =
characters ! Not boasting but I have half of China and Russia blocked if =
not 3/4 with less than 30 characters=E2=80=A6 So I suggest (with the aid =
of the 'GREP' command) to ascertain which countries you won=E2=80=99t =
deal with and block whole IP blocks or domain suffixes=E2=80=A6. ONE =
possible solution and a LOT less work :) Anyone blocked can ALWAYS email =
me if they are a genuine customer and ask WHY they are blocked if they =
feel it=E2=80=99s a wrong decision, 99.99% don=E2=80=99t because MOST =
bad IP requests are automated, so no loss there=E2=80=A6.&nbsp;<div =
class=3D""><br class=3D""></div><div class=3D"">Angel</div><div =
class=3D"">Scotland.<br class=3D""><div class=3D""><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">On 1 Jul =
2020, at 15:33, Wendell Hatcher &lt;<a =
href=3D"mailto:wendellhatcher1074@gmail.com" =
class=3D"">wendellhatcher1074@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" =
class=3D""><div style=3D"box-sizing:border-box;font-family:&quot;Segoe =
UI&quot;,system-ui,&quot;Apple Color Emoji&quot;,&quot;Segoe UI =
Emoji&quot;,sans-serif;font-size:14px" class=3D""><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D"">Hello, I have a =
ipfileblocklist&nbsp;text file that has over 10,000 ip addresses that =
need to be matched against. We managed to do a&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D on the cdir ipmatch that comes back from the F5 but =
there are too many single rewrite cond exprs&nbsp;that are being called =
and it caused apache to slow down or lock&nbsp; due to each singular =
condition call within the file.&nbsp;</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D""><br class=3D""></span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">Over 60000 plus single condition calls in our =
separate&nbsp;ipblocking file. This causes a huge load on the apache =
server and locks the system.&nbsp;</span></p><p =
class=3D"">&nbsp;&nbsp;<span style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" =
class=3D"">&nbsp;&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">&nbsp; &nbsp;&nbsp;</span><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" =
class=3D"">&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">&nbsp;&nbsp;</span><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" =
class=3D"">&nbsp;&nbsp;</span></span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px;background-col=
or:rgb(252,209,22)" class=3D"">Rewri</span><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">teCond expr &nbsp;" (%{HTTP:x-etsc-client-ip} -ipmatch =
'X.X.X.X' )=E2=80=9D</span></p><p class=3D"">&nbsp;<span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D""><br class=3D""></span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D""><br class=3D""></span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" class=3D"">We=
want to load the ips into a rewritemap text or db and call them but the =
mapping condition on the CDIR seems to be off somewhat and doesn't =
work.&nbsp;</span></p><p class=3D""><span =
style=3D"font-family:Calibri,sans-serif;font-size:14.6667px" =
class=3D"">Also, as the file grows do you have any recommendations on =
iobuffering&nbsp;or slow down loading the data into a map?&nbsp; =
&nbsp;</span></p><p class=3D""><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" class=3D""><br =
class=3D""></span></span></p><p class=3D""><span style=3D"font-size:11pt" =
class=3D""><span style=3D"font-family:Calibri,sans-serif" class=3D"">Our =
file has a list of ips like to so. The condition will check each =
beginning and end with b$ </span></span></p><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"font-size:10pt" class=3D""><span =
style=3D"font-family:&quot;Courier New&quot;" class=3D""><a =
href=3D"http://142.255.85.0/17" class=3D"">142.255.85.0/17</a> =
&nbsp;&nbsp;b</span></span></span></span></p><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"font-size:10pt" class=3D""><span =
style=3D"font-family:&quot;Courier New&quot;" class=3D""><a =
href=3D"http://65.144.129.15/1" class=3D"">65.144.129.15/1</a>&nbsp; =
&nbsp;b</span></span></span></span></p><div class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" =
class=3D""></span></span>&nbsp;<br =
class=3D"webkit-block-placeholder"></div><p class=3D""><span =
style=3D"font-size:11pt" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"border:1pt none windowtext;padding:0in" class=3D"">RewriteMap =
ipblocklist =
=E2=80=9Ctxt:/path/to/ipblocklist.txt=E2=80=9D</span></span></span></span>=
</p><p class=3D""><span style=3D"background-color:rgb(0,255,0)" =
class=3D""><span style=3D"font-size:11pt" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D""><span =
style=3D"border:1pt none windowtext;padding:0in" =
class=3D""></span></span></span></span>&nbsp;=20
RewriteCond "${ipblocklist:% ({HTTP:x-etsc-client-ip} -ipmatch&nbsp; =
^b$)=E2=80=9D&nbsp; &nbsp;[NC]</span></p><p style=3D"margin-bottom:32px" =
class=3D""><span style=3D"font-size:11pt" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif;background-color:rgb(0,255,0)" =
class=3D"">&nbsp; RewriteCond ${ipblocklist:%{HTTP:x-etsc-client-ip} =
-ipmatch}} =
&nbsp;^b$&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
; [NC]</span></span></span></p><p style=3D"margin-bottom:32px" =
class=3D""><span style=3D"font-size:11pt" class=3D""><span =
style=3D"background-color:rgb(240,242,244)" class=3D""><span =
style=3D"vertical-align:baseline" class=3D""><span =
style=3D"font-family:Calibri,sans-serif" class=3D"">RewriteRule =
^/[^/]+/Main/ad/ - [F,L]</span></span></span></span></p></div></div>
</div></blockquote></div><br =
class=3D""></div></div></blockquote></div></div></div></blockquote></div><=
br class=3D""></div></body></html>=
--Apple-Mail=_B12EF420-D2C6-46B9-8127-65E70D10AD97--
--Apple-Mail=_37E3FA76-8317-4334-ABA8-A4681C650F5F
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP
-----BEGIN PGP SIGNATURE-----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=U1zv
-----END PGP SIGNATURE-----
--Apple-Mail=_37E3FA76-8317-4334-ABA8-A4681C650F5F--
From users-return-119666-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Thu Jul 2 15:27:37 2020
Return-Path: <users-return-119666-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 489A419DB3
for <apmail-httpd-users-archive@www.apache.org>; Thu, 2 Jul 2020 15:27:36 +0000 (UTC)
Received: (qmail 25165 invoked by uid 500); 2 Jul 2020 15:27:30 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 25127 invoked by uid 500); 2 Jul 2020 15:27:30 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 25111 invoked by uid 99); 2 Jul 2020 15:27:30 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jul 2020 15:27:30 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 780E01A41D2
for <users@httpd.apache.org>; Thu, 2 Jul 2020 15:27:29 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.249
X-Spam-Level:
X-Spam-Status: No, score=0.249 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=0.2,
RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=disabled
Authentication-Results: spamd2-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
with ESMTP id PwPAgbutJJvI for <users@httpd.apache.org>;
Thu, 2 Jul 2020 15:27:28 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.166.170; helo=mail-il1-f170.google.com; envelope-from=wendellhatcher1074@gmail.com; receiver=<UNKNOWN>
Received: from mail-il1-f170.google.com (mail-il1-f170.google.com [209.85.166.170])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 2C0EABC0B4
for <users@httpd.apache.org>; Thu, 2 Jul 2020 15:27:28 +0000 (UTC)
Received: by mail-il1-f170.google.com with SMTP id k6so24546117ili.6
for <users@httpd.apache.org>; Thu, 02 Jul 2020 08:27:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=25WywChqJ7U5JR4RCIWZPrAFzHp7n2TysTLZt+a3QNY=;
b=PmpM182O3mU7XmDQ1eSOqu4M3//v8vRLG9o8zdrd6pygVPO8+4aj7HkdlwbwAB/noN
qCo7fjlUX61cuLQLTMnvprtjWnrCFOIoMW7eE411hT8DtQUpuId8lTjBwhRmYGbt82pp
Yqkh7SZC2nIsJiZjqvkcorPEm5A3hLJGLogmSg0Lu2digXLV8mQWK65Xbnn3k+vovfO5
FPE7mAr5SiguSQ+AQQVDcfDceotusqbJp+BRfg61F0G18c6wWCOAnAKjeq9HEnCnmdJw
GCSEi5MH4DhwRus+QcqEKsvwqu/9uANc4Nfj59jjiawR/MzhzHnb5cuqELJRnecsMY4p
i4/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=25WywChqJ7U5JR4RCIWZPrAFzHp7n2TysTLZt+a3QNY=;
b=rOdaZ9ErIyrzU5whaKqtNOCBvnbPlHZMbr9DwLd3R2RSwyhaYTdkV4ZMrSr3drzNtf
kSa9Cf/joLnyJiyouWOT2rzUaHMoEVhSEq89cUKhaUBqKm3ofw7bW/SBrOTnxkObKn7b
crugP4y5wtwCVggi4GuDrjgVF0LrT3e6iMUDCGkOXK68OACg908kqwXQqhhiLGVz1gH+
l2V1Xqh/ReiNnQX3kTv8v7CalqkDPA3VIuBoV7i2OnLf+pMHs1VGV2e65tXc1v3VZDee
lM6MfvsbQrMH6+qqCo+5v8Pnhc0c9v9PzZFennZSoekIJA5xK+yOCHhchpHuIVHTUBox
YK2Q==
X-Gm-Message-State: AOAM532pEv0D45iHhy98J4NZ4lNmazQQPkgB1L6oXgd3GQDXhVuoIBwM
2b9YKsKpGCRstKobxrFcBoxlPAmG6DUhbCXAcxRZTtZ4GUY=
X-Google-Smtp-Source: ABdhPJxxVSDHeyR0vmJPTa/8es8B6XsjHLS+Jj3uHoBgBiZBQOzjJ7/grtXn7cLJftbDacp4+2UmGOOBmoHgt4a8+KQ=
X-Received: by 2002:a92:b001:: with SMTP id x1mr12084561ilh.18.1593703647424;
Thu, 02 Jul 2020 08:27:27 -0700 (PDT)
MIME-Version: 1.0
From: Wendell Hatcher <wendellhatcher1074@gmail.com>
Date: Thu, 2 Jul 2020 11:27:17 -0400
Message-ID: <CAKXhZzzP+_zyFopQAcfaoE2H2zMQEajzHS595XLPm9Vh_nO1Uw@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary="000000000000c8380c05a9770b96"
Subject: [users@httpd] Error on slotmem mod_proxy out of space.
--000000000000c8380c05a9770b96
Content-Type: text/plain; charset="UTF-8"
We are seeing the following out of space errors in our apache servers and
have the lastest apr and apr-util installed. [slotmem_shm:error] No space
left on device: AH02611: create:
apr_shm_create(/home/logs/slotmem-shm-p743569) failed.
Is there a fix for this or is the only option deleting the shared memory
segments with a separate script?
--000000000000c8380c05a9770b96
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><span style=3D"white-space:pre-wrap"><font face=3D"arial, =
sans-serif" style=3D"" color=3D"#000000" size=3D"4">We are seeing the follo=
wing out of space errors in our apache servers and have the lastest apr an=
d apr-util installed. [slotmem_shm:error] No space left on device: AH02611=
: create: apr_shm_create(/home/logs/slotmem-shm-p743569) failed.</font></sp=
an><div><font face=3D"arial, sans-serif" color=3D"#000000" size=3D"4"><br><=
/font></div><div><font face=3D"arial, sans-serif" color=3D"#000000" size=3D=
"4"><br></font></div><div><font face=3D"arial, sans-serif" color=3D"#000000=
" size=3D"4">Is there a fix for this or is the only option=C2=A0<span style=
=3D"background-color:rgb(244,245,247)">deleting the shared memory segments =
with a separate=C2=A0script?=C2=A0</span></font><br></div></div>
--000000000000c8380c05a9770b96--
From users-return-119667-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Thu Jul 2 20:09:12 2020
Return-Path: <users-return-119667-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 8C61F19978
for <apmail-httpd-users-archive@www.apache.org>; Thu, 2 Jul 2020 20:09:12 +0000 (UTC)
Received: (qmail 30237 invoked by uid 500); 2 Jul 2020 20:09:06 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 30216 invoked by uid 500); 2 Jul 2020 20:09:06 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 30206 invoked by uid 99); 2 Jul 2020 20:09:06 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jul 2020 20:09:06 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 05DBB1813FB
for <users@httpd.apache.org>; Thu, 2 Jul 2020 20:09:06 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.301
X-Spam-Level:
X-Spam-Status: No, score=0.301 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, JMQ_SPF_NEUTRAL=0.5, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamd3-us-west.apache.org (amavisd-new);
dkim=pass (1024-bit key) header.d=unclassified.de
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024)
with ESMTP id 1bBSsFIgmGap for <users@httpd.apache.org>;
Thu, 2 Jul 2020 20:09:01 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a01:4f8:161:40c9::2; helo=dotforward.de; envelope-from=nospam.list@unclassified.de; receiver=<UNKNOWN>
Received: from dotforward.de (dotforward.de [IPv6:2a01:4f8:161:40c9::2])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 43B0A7F5CF
for <users@httpd.apache.org>; Thu, 2 Jul 2020 20:09:01 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=unclassified.de; s=a; h=Content-Transfer-Encoding:Content-Type:MIME-Version
:Date:Message-ID:Subject:From:To;
bh=7P8e3isSvZnhiwE2ZbKCi+mizc4fkZFOc2ubSIEfc8E=; b=l159euQmCDHOSlCQlpQStsZhiF
uljLm/Cesm9cnJXMhxUtrqvrovoxbgD8ipXqlYOxMfKB+mN0wzToUq+iNil4/snkSjgj9DBRa52Jj
eUdo/pwkBBemWvNB4ukdVaDFvFMJ55q/zKGHzW1dThssgSwJ4DkxskSdvaFkTbM7LnHg=;
Received: from p200300d5071fa6005c3562f515d31581.dip0.t-ipconnect.de ([2003:d5:71f:a600:5c35:62f5:15d3:1581])
by dotforward.de with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
(Exim 4.86_2)
(envelope-from <nospam.list@unclassified.de>)
id 1jr5Vu-0005Wb-Oz
for users@httpd.apache.org; Thu, 02 Jul 2020 22:08:54 +0200
To: "List: Apache" <users@httpd.apache.org>
From: Yves Goergen <nospam.list@unclassified.de>
Message-ID: <fddf1e80-fa90-8121-0461-6d0a95ce0225@unclassified.de>
Date: Thu, 2 Jul 2020 22:08:54 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101
Thunderbird/60.9.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: de
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] Test an SSL certificate before installation
Hello,
I'd like to let my users install their own SSL certificates through a
web interface for self-management services. If a user provides a
malicious certificate, the entire server will fail to start and the
whole system is down. This is a bit hard but that's how it is.
So I'll have to make sure the certificate and key are usable by apache
before generating the config that will use it.
I could run basic checks like let openssl parse it. But I've managed to
break my test server by providing it a perfectly working certificate and
key - from an old domain from 2016. The server complained with this message:
> SSL Library Error: error:140AB18E:SSL
routines:SSL_CTX_use_certificate:ca md too weak
That's from my letsencrypt archives. A newer one of the same domain from
2018 works just fine on the same new dev server. So there are obviously
circumstances that let apache fail on the certificate that I can't fully
analyse.
Is there a method to have apache check that certificate and key in
advance, considering its usual configuration, before I expect it to use
the certificate? I don't want to let it try out the file on a production
system, and learn about an unsupported certificate by a web server
that's down. There has to be a smarter way to handle this.
-Yves
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
From users-return-119668-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Thu Jul 2 22:26:11 2020
Return-Path: <users-return-119668-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 2F11019E7A
for <apmail-httpd-users-archive@www.apache.org>; Thu, 2 Jul 2020 22:26:11 +0000 (UTC)
Received: (qmail 25730 invoked by uid 500); 2 Jul 2020 22:26:05 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 25675 invoked by uid 500); 2 Jul 2020 22:26:05 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 25665 invoked by uid 99); 2 Jul 2020 22:26:04 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jul 2020 22:26:04 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 508EF1813FB
for <users@httpd.apache.org>; Thu, 2 Jul 2020 22:26:04 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level:
X-Spam-Status: No, score=0.001 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_NONE=-0.0001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
Authentication-Results: spamd3-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024)
with ESMTP id DJuop_q9_DCe for <users@httpd.apache.org>;
Thu, 2 Jul 2020 22:26:02 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::f32; helo=mail-qv1-xf32.google.com; envelope-from=cifali.filipe@gmail.com; receiver=<UNKNOWN>
Received: from mail-qv1-xf32.google.com (mail-qv1-xf32.google.com [IPv6:2607:f8b0:4864:20::f32])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 941357F58D
for <users@httpd.apache.org>; Thu, 2 Jul 2020 22:26:01 +0000 (UTC)
Received: by mail-qv1-xf32.google.com with SMTP id t11so11404793qvk.1
for <users@httpd.apache.org>; Thu, 02 Jul 2020 15:26:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=9ST+Me9IIWTnFzNvV/WPKEwWEJNAwFmO61Y/OanQR8Y=;
b=SVbMzEkcnRZfvDGyupc32DhhGIS3ZJHTyEHPOjWhbuSLkK2EiLn5Yj2MYfCtS7e5hg
uDUCjAf5/Qsuv6JciM2tHOlojhPSrZXgNchXHs1ohp+21bhhg4y8uqULs2THM5vCUlPR
KI7+1axPQRgZknHdm0r1wwhS8yTXbL4L8CrVlyktNGUE3Z3qqH3etLV6pKkXtSqkFIgL
Sl5x/9Bpn0aioTQNyCGAUtb8CEGzQq2GTFbllMvmYXwgYeaQjroXTDqGzhFK1MOnTIXD
58D5clyxJa7lAuEVofEy9QAbqzXGQv4LXN4ySmkL77TrHi3ojiHy7cUsUNd+NbVrm+rG
mDaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=9ST+Me9IIWTnFzNvV/WPKEwWEJNAwFmO61Y/OanQR8Y=;
b=VQJk/ZxZsDG+rmlYuo1r7Oygs2zlg32Ls74Z9AdUC+bbTIDK42UDbNPwWiI40KyQpL
8srN23sHImSAjWVVQPF/1V3M+4tjugZvKyDFf9ORA5NmvqbYB5Ux+SLtxeq+R1+5QtzU
CylDgqFoas/7cs0fKlyj9OtxujB1ykWLu6TQThG22b4aZg3YQwuhFOMwH1l31IDwHIR+
xK/1fyINl9BYo58oCCNnATB7Sybh5Q3tBpG7wCemi8WxbzYcoJxwlWFlTmV3cqN4FL0O
9jaGSnqwcItiMAf2ynEjiIBf0GSzQL7HhKE0NvLSaBLZGxf6zLZTkscG3w0wS5hZJsBD
deLw==
X-Gm-Message-State: AOAM532FJ6F8X437xCDUxhUUODEugYeM5/Hc85voIVApem8EtE5q8w4g
MBVLr3TTHEbUuQznZU9EeEX8ck0HWm4ex8b8xauf7Zn/UJg=
X-Google-Smtp-Source: ABdhPJxYtBwUKGi0nAFIEC9it37a/8h1H4OBsSL5C/bNTCBKi2PXsjx8g6Yuj0EzDKgKeHgGNUV+3lqOMu1EVtWm2wM=
X-Received: by 2002:a0c:b315:: with SMTP id s21mr32200813qve.53.1593728753729;
Thu, 02 Jul 2020 15:25:53 -0700 (PDT)
MIME-Version: 1.0
References: <fddf1e80-fa90-8121-0461-6d0a95ce0225@unclassified.de>
In-Reply-To: <fddf1e80-fa90-8121-0461-6d0a95ce0225@unclassified.de>
From: Filipe Cifali <cifali.filipe@gmail.com>
Date: Thu, 2 Jul 2020 19:25:41 -0300
Message-ID: <CAB5KUKtbjdFYyCQ0MkcSOauFmzp5PuMDdVX42E7mWLKve+5KmQ@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary="0000000000003c047205a97ce4a6"
Subject: Re: [users@httpd] Test an SSL certificate before installation
--0000000000003c047205a97ce4a6
Content-Type: text/plain; charset="UTF-8"
Just an idea, run a separate stance locally on a random port (to avoid
collisions) with the certificate, if it fails to start bingo, if it doesn't
fail you are good to put the cert on the main instance.
On Thu, Jul 2, 2020 at 5:09 PM Yves Goergen <nospam.list@unclassified.de>
wrote:
> Hello,
>
> I'd like to let my users install their own SSL certificates through a
> web interface for self-management services. If a user provides a
> malicious certificate, the entire server will fail to start and the
> whole system is down. This is a bit hard but that's how it is.
>
> So I'll have to make sure the certificate and key are usable by apache
> before generating the config that will use it.
>
> I could run basic checks like let openssl parse it. But I've managed to
> break my test server by providing it a perfectly working certificate and
> key - from an old domain from 2016. The server complained with this
> message:
>
> > SSL Library Error: error:140AB18E:SSL
> routines:SSL_CTX_use_certificate:ca md too weak
>
> That's from my letsencrypt archives. A newer one of the same domain from
> 2018 works just fine on the same new dev server. So there are obviously
> circumstances that let apache fail on the certificate that I can't fully
> analyse.
>
> Is there a method to have apache check that certificate and key in
> advance, considering its usual configuration, before I expect it to use
> the certificate? I don't want to let it try out the file on a production
> system, and learn about an unsupported certificate by a web server
> that's down. There has to be a smarter way to handle this.
>
> -Yves
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
[ ]'s
Filipe Cifali Stangler
--0000000000003c047205a97ce4a6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><div>Just an idea, run a separate stance locally on a rand=
om port (to avoid collisions) with the certificate, if it fails to start bi=
ngo, if it doesn&#39;t fail you are good to put the cert on the main instan=
ce.</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gma=
il_attr">On Thu, Jul 2, 2020 at 5:09 PM Yves Goergen &lt;<a href=3D"mailto:=
nospam.list@unclassified.de">nospam.list@unclassified.de</a>&gt; wrote:<br>=
</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;b=
order-left:1px solid rgb(204,204,204);padding-left:1ex">Hello,<br>
<br>
I&#39;d like to let my users install their own SSL certificates through a <=
br>
web interface for self-management services. If a user provides a <br>
malicious certificate, the entire server will fail to start and the <br>
whole system is down. This is a bit hard but that&#39;s how it is.<br>
<br>
So I&#39;ll have to make sure the certificate and key are usable by apache =
<br>
before generating the config that will use it.<br>
<br>
I could run basic checks like let openssl parse it. But I&#39;ve managed to=
<br>
break my test server by providing it a perfectly working certificate and <b=
r>
key - from an old domain from 2016. The server complained with this message=
:<br>
<br>
=C2=A0&gt; SSL Library Error: error:140AB18E:SSL <br>
routines:SSL_CTX_use_certificate:ca md too weak<br>
<br>
That&#39;s from my letsencrypt archives. A newer one of the same domain fro=
m <br>
2018 works just fine on the same new dev server. So there are obviously <br=
>
circumstances that let apache fail on the certificate that I can&#39;t full=
y <br>
analyse.<br>
<br>
Is there a method to have apache check that certificate and key in <br>
advance, considering its usual configuration, before I expect it to use <br=
>
the certificate? I don&#39;t want to let it try out the file on a productio=
n <br>
system, and learn about an unsupported certificate by a web server <br>
that&#39;s down. There has to be a smarter way to handle this.<br>
<br>
-Yves<br>
<br>
---------------------------------------------------------------------<br>
To unsubscribe, e-mail: <a href=3D"mailto:users-unsubscribe@httpd.apache.or=
g" target=3D"_blank">users-unsubscribe@httpd.apache.org</a><br>
For additional commands, e-mail: <a href=3D"mailto:users-help@httpd.apache.=
org" target=3D"_blank">users-help@httpd.apache.org</a><br>
<br>
</blockquote></div><br clear=3D"all"><br>-- <br><div dir=3D"ltr" class=3D"g=
mail_signature">[ ]&#39;s<br><br>Filipe Cifali Stangler<br></div>
--0000000000003c047205a97ce4a6--
From users-return-119669-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Fri Jul 3 04:02:32 2020
Return-Path: <users-return-119669-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id B08CE1973A
for <apmail-httpd-users-archive@www.apache.org>; Fri, 3 Jul 2020 04:02:31 +0000 (UTC)
Received: (qmail 10475 invoked by uid 500); 3 Jul 2020 04:02:24 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 10429 invoked by uid 500); 3 Jul 2020 04:02:21 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 10414 invoked by uid 99); 3 Jul 2020 04:02:21 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 03 Jul 2020 04:02:21 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id A64871A322C
for <users@httpd.apache.org>; Fri, 3 Jul 2020 04:02:20 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.689
X-Spam-Level:
X-Spam-Status: No, score=-0.689 tagged_above=-999 required=6.31
tests=[KAM_DMARC_STATUS=0.01, RCVD_IN_DNSWL_LOW=-0.7,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
with ESMTP id Wd_c8Pk1KyfL for <users@httpd.apache.org>;
Fri, 3 Jul 2020 04:02:16 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=65.121.55.42; helo=mail.covisp.net; envelope-from=kremels@kreme.com; receiver=<UNKNOWN>
Received: from mail.covisp.net (mail.covisp.net [65.121.55.42])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 956877FB9C
for <users@httpd.apache.org>; Fri, 3 Jul 2020 04:02:12 +0000 (UTC)
From: "@lbutlr" <kremels@kreme.com>
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Thu, 2 Jul 2020 22:01:59 -0600
References: <fddf1e80-fa90-8121-0461-6d0a95ce0225@unclassified.de>
To: users@httpd.apache.org
In-Reply-To: <fddf1e80-fa90-8121-0461-6d0a95ce0225@unclassified.de>
Message-Id: <44E2E15D-A93B-47CB-9DFE-38A0CAFD9ED8@kreme.com>
X-Mailer: Apple Mail (2.3645.0.6.2.3)
Subject: Re: [users@httpd] Test an SSL certificate before installation
On 02 Jul 2020, at 14:08, Yves Goergen <nospam.list@unclassified.de> =
wrote:
> I'd like to let my users install their own SSL certificates through a =
web interface for self-management services.
WOuldn't it be simpler to just get a LE cert for those domains? What is =
the advantage to having them upload their own certs?
--=20
"Are you pondering what I'm pondering?"
"I think so, Brain. But will anyone other than Eskimos buy
blubber-flavored chewing gum?"=
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
From users-return-119670-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Fri Jul 3 08:49:25 2020
Return-Path: <users-return-119670-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id A994719EEB
for <apmail-httpd-users-archive@www.apache.org>; Fri, 3 Jul 2020 08:49:24 +0000 (UTC)
Received: (qmail 36216 invoked by uid 500); 3 Jul 2020 08:49:18 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 36187 invoked by uid 500); 3 Jul 2020 08:49:18 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 36153 invoked by uid 99); 3 Jul 2020 08:49:18 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 03 Jul 2020 08:49:18 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 499E8C0FB3
for <users@httpd.apache.org>; Fri, 3 Jul 2020 08:49:17 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.9
X-Spam-Level:
X-Spam-Status: No, score=-0.9 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=me.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id KKEnoUROB8Yk for <users@httpd.apache.org>;
Fri, 3 Jul 2020 08:49:15 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=17.58.6.57; helo=pv50p00im-ztbu10021601.me.com; envelope-from=rammsteinium@me.com; receiver=<UNKNOWN>
Received: from pv50p00im-ztbu10021601.me.com (pv50p00im-ztbu10021601.me.com [17.58.6.57])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id B34A3BC0B4
for <users@httpd.apache.org>; Fri, 3 Jul 2020 08:49:14 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=me.com; s=1a1hai;
t=1593766148; bh=4NFK0WCtFfpqmJHqWx0heo1RfjfP/Fst02FHurzhZFg=;
h=From:Content-Type:Subject:Date:To:Message-Id;
b=HBDUTfK0QgzRdFfKN2SUD0pkfM/ErXx6LC9Ib82EhWf+cX9aHrbTvVBc7tBh8ckiz
OWdGrBRhjhchWZzRU+Pb1SZ0zfuDpPBbXLilcZvzmdfUd6Ih56goa+IFinf4zUaQ0f
9DihnuHk3UUXR1KS39khHfJ4s9/Vu75/1yJS8HoT+Y4xvoNVEAAYK8OMAKQkNJgH/f
MTD5dT1RzkRxfI5VF3uGTq9kJdr78nVXbG7X5VN8FjFDzdxeaWYdvckofHTxwiLlNI
ncC9Cb26ovOkwc3T5At2TZ1I1LOKFeo0zjWY1qNTtIMDZjRoOaJvWxiRc2T+I9tnop
HPj8bG7pemNYA==
Received: from [192.168.1.83] (host81-143-199-113.in-addr.btopenworld.com [81.143.199.113])
by pv50p00im-ztbu10021601.me.com (Postfix) with ESMTPSA id 36E2C6E071B
for <users@httpd.apache.org>; Fri, 3 Jul 2020 08:49:05 +0000 (UTC)
From: angel Hall-Coulston <rammsteinium@me.com.INVALID>
Content-Type: multipart/signed;
boundary="Apple-Mail=_0F5A5832-F3AA-4295-9883-0276F72D0111";
protocol="application/pgp-signature";
micalg=pgp-sha256
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Fri, 3 Jul 2020 09:48:58 +0100
References: <fddf1e80-fa90-8121-0461-6d0a95ce0225@unclassified.de>
<44E2E15D-A93B-47CB-9DFE-38A0CAFD9ED8@kreme.com>
To: users@httpd.apache.org
In-Reply-To: <44E2E15D-A93B-47CB-9DFE-38A0CAFD9ED8@kreme.com>
Message-Id: <71DB10F8-4FA3-4494-B4A2-D8AE5FD8022D@me.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235,18.0.687
definitions=2020-07-03_02:2020-07-02,2020-07-03 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=4 malwarescore=0
phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 mlxscore=0
mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx
scancount=1 engine=8.0.1-2004280000 definitions=main-2007030066
Subject: Re: [users@httpd] Test an SSL certificate before installation
--Apple-Mail=_0F5A5832-F3AA-4295-9883-0276F72D0111
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
I agree=E2=80=A6 certs are all about trust and giving users carte =
blanche may not be such a great idea. LE certs are free to my current =
knowledge, and are building trust.
Angel
Scotland.
> On 3 Jul 2020, at 05:01, @lbutlr <kremels@kreme.com> wrote:
>=20
> On 02 Jul 2020, at 14:08, Yves Goergen <nospam.list@unclassified.de> =
wrote:
>> I'd like to let my users install their own SSL certificates through a =
web interface for self-management services.
>=20
> WOuldn't it be simpler to just get a LE cert for those domains? What =
is the advantage to having them upload their own certs?
>=20
> --
> "Are you pondering what I'm pondering?"
> "I think so, Brain. But will anyone other than Eskimos buy
> blubber-flavored chewing gum?"
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20
--Apple-Mail=_0F5A5832-F3AA-4295-9883-0276F72D0111
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP
-----BEGIN PGP SIGNATURE-----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=Dqko
-----END PGP SIGNATURE-----
--Apple-Mail=_0F5A5832-F3AA-4295-9883-0276F72D0111--
From users-return-119671-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Mon Jul 6 17:00:29 2020
Return-Path: <users-return-119671-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 499FC19B1F
for <apmail-httpd-users-archive@www.apache.org>; Mon, 6 Jul 2020 17:00:29 +0000 (UTC)
Received: (qmail 23124 invoked by uid 500); 6 Jul 2020 17:00:22 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 23098 invoked by uid 500); 6 Jul 2020 17:00:22 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 23088 invoked by uid 99); 6 Jul 2020 17:00:22 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 06 Jul 2020 17:00:22 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id BD2E8C20CA
for <users@httpd.apache.org>; Mon, 6 Jul 2020 17:00:21 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.252
X-Spam-Level:
X-Spam-Status: No, score=0.252 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=0.2,
RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001,
RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id VRvFaJ-hAmV4 for <users@httpd.apache.org>;
Mon, 6 Jul 2020 17:00:20 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.160.178; helo=mail-qt1-f178.google.com; envelope-from=mrumph68@gmail.com; receiver=<UNKNOWN>
Received: from mail-qt1-f178.google.com (mail-qt1-f178.google.com [209.85.160.178])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 23657BB91F
for <users@httpd.apache.org>; Mon, 6 Jul 2020 17:00:20 +0000 (UTC)
Received: by mail-qt1-f178.google.com with SMTP id x62so29500258qtd.3
for <users@httpd.apache.org>; Mon, 06 Jul 2020 10:00:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=0QoycTK3dy5Hq7gqIkIvIJ42uUVVfDZno8loTAh/xxo=;
b=cZ+1CXy5wNSrYnI8KpjizrMUM07madyRzQZh1VcusqcKKEMY8JOlEoFqK3OWHdMYi7
mtb3ANQmEFkn+AGySG6R3nx/+7fK/1Y7UBltCHP3qO87narvhY+15yxV7XPl5l8tSe4n
eCrsNWPbOTHTvZ1OhA3e9ZuUS2gzFeAPMNoutj+wHziCq2QSo8xwrK+zmz4eKU1fUUPb
KjSBFw7uknyzGqhntYQ3No8epxy5dx2QvkCvNmCYOvpcr3qRsBpzmF6kvhGWxuJOCT3A
9sHX4VqAlPLaFv6QUqDq+AZPA3J2Wgd3E7l2eG6fCe65TOmJNID74cjjwYVJSQfbJGpV
8bxw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=0QoycTK3dy5Hq7gqIkIvIJ42uUVVfDZno8loTAh/xxo=;
b=McvM73rlf2A6vQwrP1sMjjSahe3AEjDVYS+vo7DEWYnoZm9Tf5gS2TS9yRXsPtdYvt
bKpcgMOa2xIItebePPVYls6wisitM+s74/UoGgetahxAlNJRe3q76duQhAZ2K7nd95+d
CTxCLM6eS/Fv3jSXRnR+qeVe8n7I7CRiOlESwjqKnisFSytbO/zvou2WYMS3XykjIhpJ
h/2iDWfAnoqPXlgYFlDwoH/QGOXyAau/MrfV7xYTPPhtp2jGuuRhlNBqKojdl1uVBkfd
rwvRaIgotPuEEco1qOoeE+2H3DorXtKp8X2czvMJc7D6Z39QDe4VVis8TJ6mrfk8XAs0
HzcQ==
X-Gm-Message-State: AOAM5301X2/94XEHDyVbUogJLU6NmCf4AkMmY/ygKwQwjQ0nG/qwrcPl
IJIXw5uqc8je84MWs8Ilx7ghc8opOtkYIPi2l8z0C3r3
X-Google-Smtp-Source: ABdhPJzw3vSdgnQ/K+tvWO+5k0M2ZWh/TEDH0D97zXO8PjUT0nCvs4hk9Q6TGo8ngMBbBeDaTdxJlXEIAV+B3dkw/GQ=
X-Received: by 2002:ac8:464f:: with SMTP id f15mr48460939qto.211.1594054812242;
Mon, 06 Jul 2020 10:00:12 -0700 (PDT)
MIME-Version: 1.0
References: <CAEOpmvr_u_dF+fDUD0nOs8pa8K7fkczVea66FwkyU=vC7aX9Ew@mail.gmail.com>
<5310320F-A28D-4C86-9550-09840B074E10@me.com> <CAEOpmvq4CmOdsCxgL-WOvb5QsKE7kN6RD+7=YXjzEnN19BpLYA@mail.gmail.com>
<CE175A69-525C-4C19-921D-B2163D430322@me.com>
In-Reply-To: <CE175A69-525C-4C19-921D-B2163D430322@me.com>
From: Mike Rumph <mrumph68@gmail.com>
Date: Mon, 6 Jul 2020 10:00:00 -0700
Message-ID: <CAKkihnxhK7qiDdczk2PU=Mb7pzxnJeTMdytc_W=mXTQJ2E0T4A@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary="000000000000d615dd05a9c8ce1a"
Subject: Re: [users@httpd] Received 404 not found error on existing CGI script
--000000000000d615dd05a9c8ce1a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Try the following link for basic info on using CGI with Apache httpd:
- http://httpd.apache.org/docs/trunk/howto/cgi.html
On Fri, Jun 26, 2020 at 1:03 AM angel Hall-Coulston
<rammsteinium@me.com.invalid> wrote:
> Hi,
> Check your config file with the command 'httpd -V' but speaking from a
> 'Mac users' perspective it=E2=80=99s usually found here:
> /etc/apache2/httpd.conf
> About 3/4 down you=E2=80=99ll find log formats etc and several suggested =
log
> levels. You can change back after you have solved the issue because 'debu=
g'
> can/will fill your log files up pretty quickly with the extra info.
> Angel Hall-Coulston
> Scotland.
>
> On 25 Jun 2020, at 19:58, barry kimelman <perlmaster56@gmail.com> wrote:
>
>
> Hello,
>
> Thanks for your reply. I solved the not being able to run a Perl CGI
> script issue. I now have several of my old Perl CGI scripts up and runnin=
g.
>
> Now one of my other CGI scripts is failing badly. The mysql error log doe=
s
> not show anything useful. All I see on my screen is a '500 internal serve=
r
> error'. I checked the syntax of my perl script and it is ok.
>
> Your message stated that setting "my log file level to debug" was a good
> debugging idea. I have been trying to figure out how to accomplish this
> task with no success. Which config file do I need to change and what
> specific change do I need to make to the config file ?
>
> Thanks/
>
> On Wed, Jun 24, 2020 at 11:15 AM angel Hall-Coulston <
> rammsteinium@me.com.invalid> wrote:
>
>> Try setting your log file level to debug, you will get far more
>> information. Also at the end of the 'log format' code in your configurat=
ion
>> file (easy double check by command 'httpd -V' which will double check yo=
ur
>> conf file) add '%L' which when added to both access_log file formats AND
>> error_log formats will give matches between the two easily found with th=
e
>> 'grep' command 'grep
>> "[long-scrambled-unique-characters-for-that-particular-error] '*_log' .
>> Make sure you first are in the log directory.
>>
>> Another helpful tip=E2=80=A6 your apache comes with it=E2=80=99s VERY OW=
N manual pages
>> which when enabled in your 'includes' section of your config file, will
>> allow you to access MUCH quicker than going online, where you will find
>> everything you need to know.
>>
>> Angel Hall-Coulston
>> Scotland.
>>
>> On 24 Jun 2020, at 00:35, barry kimelman <perlmaster56@gmail.com> wrote:
>>
>> my system is an ubuntu 20.04 lts laptop.
>>
>> I successfully installed apache2. I verified the installation by visitin=
g
>> http://localhost:80 <http://localhost/>
>>
>> Now I am having problems trying to run a Perl CGI script which I had
>> running under Windows 10 on Apache 2.4
>>
>> I modified the sites-enabled/000-default.conf file by removing the '#'
>> from the start of the "Include conf-available/serve-cgi-bin.conf" line. =
I
>> then created the /usr/lib/cgi-bin directory. I next put a small Perl CGI
>> script named "printenv.cgi" under /usr/lib/cgi-bin. I then restarted the
>> apache2 server. When I attempted to run my newly created CGI script gy
>> visiting localhost:80/cgi-bin/printenv.cgi
>> <http://localhost/cgi-bin/printenv.cgi> all that happened was I received
>> a "404 Not Found" error. I looked at the apache logfile and it provided =
no
>> further info.
>>
>> I even tried using the "wget" command. same 404 error.
>>
>> What have I done wrong?
>>
>> --
>>
>> Barrry Kimelman
>> Winnipeg, Manitoba, Canada
>>
>>
>>
>
>
>
--000000000000d615dd05a9c8ce1a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Try the following link for basic info on using CGI with Ap=
ache httpd:<div>-=C2=A0<a href=3D"http://httpd.apache.org/docs/trunk/howto/=
cgi.html">http://httpd.apache.org/docs/trunk/howto/cgi.html</a>=C2=A0</div>=
</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">=
On Fri, Jun 26, 2020 at 1:03 AM angel Hall-Coulston &lt;rammsteinium@me.com=
.invalid&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1=
ex"><div style=3D"overflow-wrap: break-word;">Hi,<div>Check your config fil=
e with the command &#39;httpd -V&#39; but speaking from a &#39;Mac users&#3=
9; perspective it=E2=80=99s usually found here: =C2=A0 =C2=A0<font face=3D"=
SourceCodePro-Regular"><span style=3D"font-style:normal">/etc/apache2/httpd=
.conf</span></font><div>About 3/4 down you=E2=80=99ll find log formats etc =
and several suggested log levels. You can change back after you have solved=
the issue because &#39;debug&#39; can/will fill your log files up pretty q=
uickly with the extra info.</div><div>Angel Hall-Coulston</div><div>Scotlan=
d.</div><blockquote style=3D"margin:0px 0px 0px 40px;border:none;padding:0p=
x"><div><blockquote type=3D"cite"><div>On 25 Jun 2020, at 19:58, barry kime=
lman &lt;<a href=3D"mailto:perlmaster56@gmail.com" target=3D"_blank">perlma=
ster56@gmail.com</a>&gt; wrote:</div></blockquote></div></blockquote><div><=
blockquote type=3D"cite"><br><div><div dir=3D"ltr" style=3D"font-family:Ame=
ricanTypewriter;font-size:18px;font-style:normal;font-variant-caps:normal;f=
ont-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;te=
xt-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"=
><div>Hello,</div><div><br></div><div>Thanks for your reply. I solved the n=
ot being able to run a Perl CGI script issue. I now have several of my old =
Perl CGI scripts up and running.</div><div><br></div><div>Now one of my oth=
er CGI scripts is failing badly. The mysql error log does not show anything=
useful. All I see on my screen is a &#39;500 internal server error&#39;. I=
checked the syntax of my perl script and it is ok.</div><div><br></div><di=
v>Your message stated that setting &quot;my log file level to debug&quot; w=
as a good debugging idea. I have been trying to figure out how to accomplis=
h this task with no success. Which config file do I need to change and what=
specific change do I need to make to the config file ?</div><div><br></div=
><div>Thanks/<br></div></div><br style=3D"font-family:AmericanTypewriter;fo=
nt-size:18px;font-style:normal;font-variant-caps:normal;font-weight:normal;=
letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;=
white-space:normal;word-spacing:0px;text-decoration:none"><div class=3D"gma=
il_quote" style=3D"font-family:AmericanTypewriter;font-size:18px;font-style=
:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;t=
ext-align:start;text-indent:0px;text-transform:none;white-space:normal;word=
-spacing:0px;text-decoration:none"><div dir=3D"ltr" class=3D"gmail_attr">On=
Wed, Jun 24, 2020 at 11:15 AM angel Hall-Coulston &lt;<a href=3D"mailto:ra=
mmsteinium@me.com.invalid" target=3D"_blank">rammsteinium@me.com.invalid</a=
>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px=
0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><di=
v>Try setting your log file level to debug, you will get far more informati=
on. Also at the end of the &#39;log format&#39; code in your configuration =
file (easy double check by command &#39;httpd -V&#39; which will double che=
ck your conf file) add &#39;%L&#39; which when added to both access_log fil=
e formats AND error_log formats will give matches between the two easily fo=
und with the &#39;grep&#39; command &#39;grep &quot;[long-scrambled-unique-=
characters-for-that-particular-error] &#39;*_log&#39; . Make sure you first=
are in the log directory.<div><br></div><div>Another helpful tip=E2=80=A6 =
your apache comes with it=E2=80=99s VERY OWN manual pages which when enable=
d in your &#39;includes&#39; section of your config file, will allow you to=
access MUCH quicker than going online, where you will find everything you =
need to know.=C2=A0</div><div><br></div><div>Angel Hall-Coulston</div><div>=
Scotland.<br><div><br><blockquote type=3D"cite"><div>On 24 Jun 2020, at 00:=
35, barry kimelman &lt;<a href=3D"mailto:perlmaster56@gmail.com" target=3D"=
_blank">perlmaster56@gmail.com</a>&gt; wrote:</div><br><div><div dir=3D"ltr=
"><div>my system is an ubuntu 20.04 lts laptop.</div><div><br></div><div>I =
successfully installed apache2. I verified the installation by visiting<spa=
n>=C2=A0</span><a href=3D"http://localhost/" target=3D"_blank">http://local=
host:80</a></div><div><br></div><div>Now I am having problems trying to run=
a Perl CGI script which I had running under Windows 10 on=C2=A0 Apache 2.4=
</div><div><br></div><div><span>I modified the sites-enabled/000-default.co=
nf file by removing the &#39;#&#39; from the start of the &quot;Include con=
f-available/serve-cgi-bin.conf&quot; line. I then created the /usr/lib/cgi-=
bin directory. I next put a small Perl CGI script named &quot;printenv.cgi&=
quot; under /usr/lib/cgi-bin. I then restarted the apache2 server. When I a=
ttempted to run my newly created CGI script gy visiting<span>=C2=A0</span><=
a href=3D"http://localhost/cgi-bin/printenv.cgi" rel=3D"nofollow noreferrer=
" target=3D"_blank">localhost:80/cgi-bin/printenv.cgi</a><span>=C2=A0</span=
>all that happened was I received a &quot;404 Not Found&quot; error. I look=
ed at the apache logfile and it provided no further info.</span></div><div>=
<span><br></span></div><div><span>I even tried using the &quot;wget&quot; c=
ommand. same 404 error.<br></span></div><div><span><br></span></div><div><s=
pan>What have I done wrong?</span></div><div><br>--<span>=C2=A0</span><br><=
div dir=3D"ltr"><div dir=3D"ltr"><br><div>Barrry Kimelman</div><div>Winnipe=
g, Manitoba, Canada</div></div></div></div></div></div></blockquote></div><=
br></div></div></blockquote></div><br clear=3D"all" style=3D"font-family:Am=
ericanTypewriter;font-size:18px;font-style:normal;font-variant-caps:normal;=
font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;t=
ext-transform:none;white-space:normal;word-spacing:0px;text-decoration:none=
"><br style=3D"font-family:AmericanTypewriter;font-size:18px;font-style:nor=
mal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-=
align:start;text-indent:0px;text-transform:none;white-space:normal;word-spa=
cing:0px;text-decoration:none"></div></blockquote></div><br></div></div></b=
lockquote></div>
--000000000000d615dd05a9c8ce1a--
From users-return-119672-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Mon Jul 6 23:26:32 2020
Return-Path: <users-return-119672-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 9846D19D66
for <apmail-httpd-users-archive@www.apache.org>; Mon, 6 Jul 2020 23:26:32 +0000 (UTC)
Received: (qmail 4197 invoked by uid 500); 6 Jul 2020 23:26:26 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 4172 invoked by uid 500); 6 Jul 2020 23:26:26 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 4162 invoked by uid 99); 6 Jul 2020 23:26:25 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 06 Jul 2020 23:26:25 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 55D09C0315
for <users@httpd.apache.org>; Mon, 6 Jul 2020 23:26:25 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.003
X-Spam-Level:
X-Spam-Status: No, score=0.003 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key)
header.d=christopherschultz-net.20150623.gappssmtp.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id FHK47a0lRwqf for <users@httpd.apache.org>;
Mon, 6 Jul 2020 23:26:23 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.210.43; helo=mail-ot1-f43.google.com; envelope-from=chris@christopherschultz.net; receiver=<UNKNOWN>
Received: from mail-ot1-f43.google.com (mail-ot1-f43.google.com [209.85.210.43])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id E7F09BB91F
for <users@httpd.apache.org>; Mon, 6 Jul 2020 23:26:22 +0000 (UTC)
Received: by mail-ot1-f43.google.com with SMTP id d4so33005759otk.2
for <users@httpd.apache.org>; Mon, 06 Jul 2020 16:26:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=christopherschultz-net.20150623.gappssmtp.com; s=20150623;
h=to:from:autocrypt:subject:message-id:date:user-agent:mime-version
:content-language:content-transfer-encoding;
bh=xY45aD6q7FMJTsYAYC7l+ee3AApZyi5xA5T5UHa/pAQ=;
b=NZAtJ5wxiiJ2MfW2QfwWBcAcZ449DHndWWbBl9MJUxIHDOCnOoBX+BkTEHpblu5Rxc
zgjUgvfY0Rt0e82qvT2ZGhmNlEhPoA1VZG5oDpe09jZ3iClB5VIMypedNBbgkiXZ3rPw
O9AAOONBt9kEzomR2fYTMhAqYIMZNX27MjYQ8Dz0WvW+FbcSc66UdhyJQ1Cmp9YExNo5
70TLrFON061E9508jdIPg0yfqXg3MKRXfpFqXcrJvNzzLN5HhxfLaBt3XhRIv+I+0IoW
vTFsAAZp8N3znEOvuS35bVQF6OA3btIAKq2FK3v3+lJ+e/K+D7vfkMJO1aYffcRxl3Cf
PK6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:to:from:autocrypt:subject:message-id:date
:user-agent:mime-version:content-language:content-transfer-encoding;
bh=xY45aD6q7FMJTsYAYC7l+ee3AApZyi5xA5T5UHa/pAQ=;
b=Ep07DB/gTufEMPteLzvKaTk72KDQbkknplplbWhRu7yIrXwTKHOvlRrOrxrngYflx2
BMcDd35iDmpF3is2CuQURxc5qoG3of5nwpbBaHogKeN2MGN9tlfW6YHZjEIN7gm5elq4
Zm2u9pxE8+4d+OtyGT53+u8WgaI4ySYchLXisp+HxdN+heZPLpIqL9q5EQi4+45hy03F
V0WcbRK7BhBH3pC2rpgKYirBpmPl4MJnXJX56KCeaZbETGLsssQGnAHqt9I7WtroojJC
/nBIto7B14X+RmzgBphjZxkkCHUbLdhVyRZGEOl4xHPl3Nka/Bmq/jKHn7M0vz0aomwf
kfgA==
X-Gm-Message-State: AOAM530ImkqJkUgD9ObvKeKzXJCtvkNuqZXc4v6o4+SkoytyJpX7VIBd
npEqSkwPlEPFPSoS4qgHITWO/0PXDfM=
X-Google-Smtp-Source: ABdhPJx0wZXVItZb9Wun9kVYUOdruWFW0JSNR1AU4sMgWrpwGCkZszreoyv0Au5vej2O4rQVtpnXLg==
X-Received: by 2002:a9d:22aa:: with SMTP id y39mr45678702ota.153.1594077981942;
Mon, 06 Jul 2020 16:26:21 -0700 (PDT)
Received: from Christophers-MacBook-Pro-2.local (pool-108-48-175-111.washdc.fios.verizon.net. [108.48.175.111])
by smtp.gmail.com with ESMTPSA id y67sm437608oig.46.2020.07.06.16.26.20
for <users@httpd.apache.org>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Mon, 06 Jul 2020 16:26:21 -0700 (PDT)
To: "users@httpd.apache.org" <users@httpd.apache.org>
From: Christopher Schultz <chris@christopherschultz.net>
Autocrypt: addr=chris@christopherschultz.net; keydata=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Message-ID: <5fc5c3d0-721c-b6ae-7fcc-ecc69960160d@christopherschultz.net>
Date: Mon, 6 Jul 2020 19:26:19 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:68.0)
Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Subject: [users@httpd] Using Balancer Manager for fun and profit
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
All,
I'm looking at moving from mod_jk to mod_proxy and I need to migrate
my tooling for things like scripted worker-management. My existing
tool for mod_jk is on GitHub[1] for those interested in what it can do.
Mostly, I'm interested in fetching and setting the status(es) of a
worker. With mod_jk, status is one of Active, Disabled, Stopped. The
difference between Disabled and Stopped is that requests for
sticky-sessions pointing to a Disabled will still be routed to the
Disabled worker while a Stopped worker will never receive a request.
By looking at a little of the mod_proxy_balancer code and poking at
the interface a little bit, I have drawn these conclusions. Can anyone
confirm that they are accurate?
1. Nonce is required for many operations (but not status-fetch?)
2. Nonce is only available once an initial GET has completed succesfully
... by sniffing the nonce from an href URL
3. You can get XML details for the balancers ... but only with a nonce
and an "xml" parameter
4. You can change any individual flag, eg. "draining", by making a
POST request which includes a w_status_[F]=0|1 parameter where [F] is
one of several flag characters (e.g. N for "draiNing") along with a
"b" (balancer) and "w" (worker) parameter. Unspecified flags and other
settings will be unaffected. The nonce is required for these operations.
5. The "draiN" status of mod_proxy_balancer workers is analagous to
the "disabled" status of mod_jk, and both "Disabled" and "Stopped" in
mod_proxy are roughly equivalent to "Disabled" state for mod_jk.
Does all that sound right?
Would it be possible to query the status with XML-output *without* a
nonce? And could the nonce be added to the XML output?
Thanks,
- -chris
[1]
https://github.com/ChristopherSchultz/apache-tomcat-stuff/tree/master/bi
n/mod_jk
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/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=AfYi
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
From users-return-119673-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Tue Jul 7 13:37:14 2020
Return-Path: <users-return-119673-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 183AE19C17
for <apmail-httpd-users-archive@www.apache.org>; Tue, 7 Jul 2020 13:37:14 +0000 (UTC)
Received: (qmail 3252 invoked by uid 500); 7 Jul 2020 13:37:08 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 3217 invoked by uid 500); 7 Jul 2020 13:37:08 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 3206 invoked by uid 99); 7 Jul 2020 13:37:07 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 Jul 2020 13:37:07 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 2FBE21A3266
for <users@httpd.apache.org>; Tue, 7 Jul 2020 13:37:07 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.25
X-Spam-Level:
X-Spam-Status: No, score=0.25 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=0.2,
RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
autolearn=disabled
Authentication-Results: spamd2-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
with ESMTP id UAu8bSzFvbHI for <users@httpd.apache.org>;
Tue, 7 Jul 2020 13:37:05 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::f30; helo=mail-qv1-xf30.google.com; envelope-from=wendellhatcher1074@gmail.com; receiver=<UNKNOWN>
Received: from mail-qv1-xf30.google.com (mail-qv1-xf30.google.com [IPv6:2607:f8b0:4864:20::f30])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 3B8C17F65E
for <users@httpd.apache.org>; Tue, 7 Jul 2020 13:37:05 +0000 (UTC)
Received: by mail-qv1-xf30.google.com with SMTP id dm12so18793716qvb.9
for <users@httpd.apache.org>; Tue, 07 Jul 2020 06:37:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=content-transfer-encoding:from:mime-version:date:subject:message-id
:to;
bh=yhb0YUImTXlokl7T6NYdQl5keKrv8AbHYTWx6KquCj8=;
b=VMxsjlbSo/Q1pgQ1HztKAM1BaG+/Q/pRQTX9LvPSXY+lCdntlhEL8lCBNq2VbqRnEh
6uCZvCKfJOUmIQ+40wAN9R517Huctr+027ImeDjpsHFCMthSovR/n7TJHZZCS8sTl6Qa
gyyEUI7R7FbTNiA4L27Fg0gX4uyGQGVSk/SRaDxfXCjKnfjj2hhlwE5og4xApFswyPNJ
bunyluOZZ2q+lKSxxt14cURZ4avRd1wQHb7Ex77iOXX1hdbXVFrrIcjSjMei34lS2FJp
PuDxPFKpw0Vff/Pl0RoG+86RGNb//xNM+92nnrga/4yeCCnKyEzoHjkNIxElxL//7V2L
f7IA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:content-transfer-encoding:from:mime-version:date
:subject:message-id:to;
bh=yhb0YUImTXlokl7T6NYdQl5keKrv8AbHYTWx6KquCj8=;
b=VfgZurlx/CDsxbYrdw7cvSnHERGKDod+is2gAjFvFdCRZ8i/Da9yxsW5Trd76l8gZy
g3W7SIrBAXzrDTYGNchV+l7CxLqvRC3mohC5w652Kf6fpq/gkOudrxXSlgzdWrQronzx
DEkfv3ZtStzfnu5NIeIzjiH8sFFt9CG2iY49M7AET/dtqR98wJVGLGV/y2cyON6In7h+
Pnfdsa6/oM9gIOTh4+V32LgDoFfCqRKwfko2WXUZS0yCMy0sQG1XfCVmcB/DBAgxGHve
fb1lot7RB2GQvyRDi1qAbo9ONMC0DORucrv17KzpTcZ6dihc9YfmiDQsp4JiJs7DV9y6
7+Lw==
X-Gm-Message-State: AOAM530YaSn8y1kr07wFyEqTjUWJO+01wdzBgSVJ9SUYumm5V3K1+LOd
w5GLpys9nUFJvGqsC3/4oDuO2GIr
X-Google-Smtp-Source: ABdhPJxpKdM22ArmM2xDyxLHqIvrbHkQm8i3gN6o5lUZOcLUx/LzBmpeHeAYN21gpHf7iy6j07ffew==
X-Received: by 2002:ad4:42ad:: with SMTP id e13mr43085600qvr.89.1594129017558;
Tue, 07 Jul 2020 06:36:57 -0700 (PDT)
Received: from [192.168.1.52] (mobile-166-170-53-124.mycingular.net. [166.170.53.124])
by smtp.gmail.com with ESMTPSA id s128sm24013749qkd.108.2020.07.07.06.36.56
for <users@httpd.apache.org>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Tue, 07 Jul 2020 06:36:56 -0700 (PDT)
Content-Type: multipart/alternative; boundary=Apple-Mail-866B8E98-9EA3-4108-AF51-CB967D4F5949
Content-Transfer-Encoding: 7bit
From: Wendell Hatcher <wendellhatcher1074@gmail.com>
Mime-Version: 1.0 (1.0)
Date: Tue, 7 Jul 2020 09:36:56 -0400
Message-Id: <E4B431C6-DEF8-4F02-B468-70BE7E24B888@gmail.com>
To: users@httpd.apache.org
X-Mailer: iPhone Mail (17F80)
Subject: [users@httpd] Mod proxy balancer route length issue?
--Apple-Mail-866B8E98-9EA3-4108-AF51-CB967D4F5949
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: quoted-printable
How do I resolve this issue within my conf file?=20
ERR> ! AH00526: Syntax error on line 4 of /home/cqrobotallhanauser/archiv=
e/deployments/personal_cqrobotallhanauser/ssws/SSWSRel-RH6-190/config/cluste=
r-ss-testserver.conf:
! BalancerMember Route length must be < 64 characters
Wendell=
--Apple-Mail-866B8E98-9EA3-4108-AF51-CB967D4F5949
Content-Type: text/html;
charset=utf-8
Content-Transfer-Encoding: 7bit
<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>How do I resolve this issue within my conf file?&nbsp;</div><div><br></div><p class="MsoNormal" style="font-size: 16px; margin: 0in 0in 0.0001pt 0.5in; font-family: Calibri, sans-serif; -webkit-text-size-adjust: 100%;"><span style="font-size: 11pt; background-color: yellow; line-height: 22px;">ERR&gt;&nbsp;&nbsp;&nbsp; ! AH00526: Syntax error on line 4 of /home/cqrobotallhanauser/archive/deployments/personal_cqrobotallhanauser/ssws/SSWSRel-RH6-190/config/cluster-ss-testserver.conf:</span></p><p class="MsoNormal" style="font-size: 16px; margin: 0in 0in 0.0001pt 0.5in; font-family: Calibri, sans-serif; -webkit-text-size-adjust: 100%;"><span style="font-size: 11pt; background-color: yellow; line-height: 22px;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ! BalancerMember Route length must be &lt; 64 characters</span></p><br><div dir="ltr">Wendell</div></body></html>
--Apple-Mail-866B8E98-9EA3-4108-AF51-CB967D4F5949--
From users-return-119674-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Tue Jul 7 16:42:56 2020
Return-Path: <users-return-119674-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id CD64E195FE
for <apmail-httpd-users-archive@www.apache.org>; Tue, 7 Jul 2020 16:42:55 +0000 (UTC)
Received: (qmail 5231 invoked by uid 500); 7 Jul 2020 16:42:49 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 5205 invoked by uid 500); 7 Jul 2020 16:42:49 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 5195 invoked by uid 99); 7 Jul 2020 16:42:49 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 Jul 2020 16:42:49 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 512D91A318B
for <users@httpd.apache.org>; Tue, 7 Jul 2020 16:42:48 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.7
X-Spam-Level:
X-Spam-Status: No, score=-0.7 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_LOW=-0.7,
RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamd2-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=me.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
with ESMTP id zJ2B93hEWKh8 for <users@httpd.apache.org>;
Tue, 7 Jul 2020 16:42:46 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=17.58.6.43; helo=pv50p00im-hyfv10011601.me.com; envelope-from=rammsteinium@me.com; receiver=<UNKNOWN>
Received: from pv50p00im-hyfv10011601.me.com (pv50p00im-hyfv10011601.me.com [17.58.6.43])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id A07A6BC1AE
for <users@httpd.apache.org>; Tue, 7 Jul 2020 16:42:46 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=me.com; s=1a1hai;
t=1594140158; bh=iAgYaCTkYhLMJ9wdVrbLIwdqMPEMZun9WyJiIcrR670=;
h=From:Content-Type:Subject:Date:To:Message-Id;
b=WoehPnbP4vNe3Aee/WGApc3kCYGbseiXztfMA/es8iA4Dcmdo2ILxHlXbqdn23JTX
QjTk3QunAFHLYIXE3EyHgBD/IqLe5O2Ho2OG7OeOUMeKH0MZx3aEC9QmdjdKOb4tim
hAiwttE6bn9QJefrM9u3WvVTSSk/0ntlG8x90Rgh/fckQAvqGIxY4co2qTPVhQNGEB
6B694XPyGFYeVB9O2LjLQxkS632mIbfs4yx9QuetGQe7n6eaI/D4vkRXjjYc8UBz64
8vICz8OGVV/T0RsyhGli+nFQfF5GsBXKF8uxji4O4DLT/yyuUoKG8cJ0VLnMzyyNlt
nfq1EkEWg/tiA==
Received: from [192.168.1.83] (host81-143-199-113.in-addr.btopenworld.com [81.143.199.113])
by pv50p00im-hyfv10011601.me.com (Postfix) with ESMTPSA id 1EF39380674
for <users@httpd.apache.org>; Tue, 7 Jul 2020 16:42:33 +0000 (UTC)
From: angel Hall-Coulston <rammsteinium@me.com.INVALID>
Content-Type: multipart/signed;
boundary="Apple-Mail=_F75B043F-A7D4-4D1E-A63D-24CBFB18F12A";
protocol="application/pgp-signature";
micalg=pgp-sha256
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Tue, 7 Jul 2020 17:42:20 +0100
References: <E4B431C6-DEF8-4F02-B468-70BE7E24B888@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <E4B431C6-DEF8-4F02-B468-70BE7E24B888@gmail.com>
Message-Id: <CC43B293-8538-48E4-85D4-6002A3D13341@me.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235,18.0.687
definitions=2020-07-07_09:2020-07-07,2020-07-07 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=1 malwarescore=0
phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 mlxscore=0
mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx
scancount=1 engine=8.0.1-2004280000 definitions=main-2007070118
Subject: Re: [users@httpd] Mod proxy balancer route length issue?
--Apple-Mail=_F75B043F-A7D4-4D1E-A63D-24CBFB18F12A
Content-Type: multipart/alternative;
boundary="Apple-Mail=_3B60A4D4-21C4-47C1-97E4-6CA737F47209"
--Apple-Mail=_3B60A4D4-21C4-47C1-97E4-6CA737F47209
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
There are far too many characters. There has to be less than (the =
mathematical '<' less-than character) 64 characters. So some shortening =
of directory names called for there.
Angel
Scotland.
"Those that never give, but always take, are common thieves=E2=80=A6 "
> On 7 Jul 2020, at 14:36, Wendell Hatcher =
<wendellhatcher1074@gmail.com> wrote:
>=20
> How do I resolve this issue within my conf file?
>=20
> ERR> ! AH00526: Syntax error on line 4 of =
/home/cqrobotallhanauser/archive/deployments/personal_cqrobotallhanauser/s=
sws/SSWSRel-RH6-190/config/cluster-ss-testserver.conf:
> ! BalancerMember Route length must be < 64 characters
>=20
> Wendell
--Apple-Mail=_3B60A4D4-21C4-47C1-97E4-6CA737F47209
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">There=
are far too many characters. There has to be less than (the =
mathematical '&lt;' less-than character) 64 characters. So some =
shortening of directory names called for there.&nbsp;<div class=3D""><br =
class=3D""></div><div class=3D"">Angel</div><div =
class=3D"">Scotland.</div><div class=3D""><br class=3D""></div><div =
class=3D"">"Those that never give, but always take, are common =
thieves=E2=80=A6 "<br class=3D""><div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D"">On 7 Jul 2020, at 14:36, =
Wendell Hatcher &lt;<a href=3D"mailto:wendellhatcher1074@gmail.com" =
class=3D"">wendellhatcher1074@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div =
style=3D"caret-color: rgb(0, 0, 0); font-family: AmericanTypewriter; =
font-size: 18px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D"">How do I resolve this issue within my conf =
file?&nbsp;</div><div style=3D"caret-color: rgb(0, 0, 0); font-family: =
AmericanTypewriter; font-size: 18px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><br class=3D""></div><div =
style=3D"caret-color: rgb(0, 0, 0); font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none; font-size: 16px; margin: 0in 0in 0.0001pt 0.5in; =
font-family: Calibri, sans-serif;" class=3D""><span style=3D"font-size: =
11pt; background-color: yellow; line-height: 22px;" =
class=3D"">ERR&gt;&nbsp;&nbsp;&nbsp; ! AH00526: Syntax error on line 4 =
of =
/home/cqrobotallhanauser/archive/deployments/personal_cqrobotallhanauser/s=
sws/SSWSRel-RH6-190/config/cluster-ss-testserver.conf:</span></div><div =
style=3D"caret-color: rgb(0, 0, 0); font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none; font-size: 16px; margin: 0in 0in 0.0001pt 0.5in; =
font-family: Calibri, sans-serif;" class=3D""><span style=3D"font-size: =
11pt; background-color: yellow; line-height: 22px;" =
class=3D"">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ! BalancerMember =
Route length must be &lt; 64 characters</span></div><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: AmericanTypewriter; =
font-size: 18px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><div dir=3D"ltr" style=3D"caret-color: rgb(0, 0, 0); =
font-family: AmericanTypewriter; font-size: 18px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" =
class=3D"">Wendell</div></div></blockquote></div><br =
class=3D""></div></body></html>=
--Apple-Mail=_3B60A4D4-21C4-47C1-97E4-6CA737F47209--
--Apple-Mail=_F75B043F-A7D4-4D1E-A63D-24CBFB18F12A
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP
-----BEGIN PGP SIGNATURE-----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=wB98
-----END PGP SIGNATURE-----
--Apple-Mail=_F75B043F-A7D4-4D1E-A63D-24CBFB18F12A--
From users-return-119675-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 8 07:02:01 2020
Return-Path: <users-return-119675-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id B6F761A5A1
for <apmail-httpd-users-archive@www.apache.org>; Wed, 8 Jul 2020 07:02:00 +0000 (UTC)
Received: (qmail 71266 invoked by uid 500); 8 Jul 2020 07:01:55 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 71227 invoked by uid 500); 8 Jul 2020 07:01:54 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 71216 invoked by uid 99); 8 Jul 2020 07:01:54 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Jul 2020 07:01:54 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id D8014C02D1
for <users@httpd.apache.org>; Wed, 8 Jul 2020 07:01:53 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.001
X-Spam-Level:
X-Spam-Status: No, score=-0.001 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id Uc1Q8s6NVL-1 for <users@httpd.apache.org>;
Wed, 8 Jul 2020 07:01:52 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=74.6.131.40; helo=sonic303-1.consmr.mail.bf2.yahoo.com; envelope-from=nt_mahmood@yahoo.com; receiver=<UNKNOWN>
Received: from sonic303-1.consmr.mail.bf2.yahoo.com (sonic303-1.consmr.mail.bf2.yahoo.com [74.6.131.40])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 33FC0BE2A5
for <users@httpd.apache.org>; Wed, 8 Jul 2020 07:01:52 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1594191706; bh=8HgpiW9hhs73WdtysUiczbwA7zsZmo3bNaeEWYTbWFw=; h=Date:From:Reply-To:To:Subject:References:From:Subject; b=jZMgNj7hGM4C38w3moNIMEpvB4OwgIdouwFiD132Ep67FcsvJ6jPYRrApc7mibg86HGjJ5IdX89bDqo/q+nx4iXt5JY2zjMi1R0Sv+KMgqztH5ZdqNeIVJg4XsHRXSaOQdM+nAd1VEs23SYaMtz5NULSq7dbeJEMuKFKbaWQ/AJndDZrryBZGFc+mv8PA7gk1yLlPQoEePf4jNMnjB/M6x/mXmErVuDTtX+pOHhp7O9xOhwZ+qucWOgpbRPaNKXFQ8Ym/foBKxI+lFao4sOQsNqCTYYqnos3/ACCxXCQrQZlFiKAzc3QzYXhYHxdPBvsIH0ZQJ9zaWzV6ZTTQsu64g==
X-YMail-OSG: xwXRbz8VM1ng0PMBVd.y3VbWU75V3D1DyzsDSGnObgSjcLL5eJAYJ2_fH7_pvrG
j5Bt9VKVf5yrKrJp69YWm8a.UF6KoEmc8CSjQ2YmpYvPDOZIcxMhaSSabr1dJlcXXBQk9163SfrH
3HuVIpCHQfIL93bMg_S4Hs.LXZKqYWxFgIdQ6WYpPsoFejQmdHiLcvhT_kDWiRyJqOF0oz_pfZ1Y
mOrvA_fZtbE3lIl2_xvQagg9tFC2Ax3OiEzbpr0rZ3lglNzlUML3ATJcn6iVC7ZQ37YJtSgFRKVx
78xush75VOs7hIhzxOYRsVhlUGZlGfa6Ka9VBkyBqEpcYGcnPHEonewePwdKc6xcsRZR0.8O3NS.
IAuBWy8HbN4hshB4hQpY2gVOsiqvjyVG5bFBjotaJLXIk9_9jvSGuTr_6Iq1H1Ce7UCVlpslwYW1
Y8MGsrarfX_Fz2D_N5M1GWVBmU5QUXvTQorX2KD6kx0MOJ69ejO06K6FC4iUMGjOPspwdkJdaPhG
GORMWsoqweA4NBfwV.fbS0X5ccPJ17gkjTvubY9cA18Ajqbhb1yxnLX6.zn9epcVZHVtFLZNsCwi
BPvPP3cNNlsoycooOZoxFv2EDnrdTW9.X.DyFy0GfCnecfe9PGXHC.YSZkC0jZ_PD9Z4l9Fh4P_e
cYDoQC6v152NFvjKdqEvrUe7ibU4BXll4I_PCg.0noRfxvUXrUIXMhNIv2c4.WaIf6.htYlH0YD8
DibTkCLuo5rIMHHfNCh6lxh2AbuPcCJ09cZW2yfWoOWRn9qraXAIzuqRhgVeR5s35RRLVstgpnnt
BD6tVmVEwEOUiCIIHIWXxt095GBsBxuaZ6ueHkGzABSlhVJVPF_DsUwGY3gB4.B.d9xaPmQ1DgOq
O3rkcvqnLe7yq7TiKm1Jd1pTOhL9QY.pKnDSzSDuxWuFeqxQqrOJHLpHHo.vllL4ej60U2tGXhYG
3c6nBMZYX_7GdYTfnVF4c4Qx25y4A1N.Yzdxxgt66fG5FwxyDWJfoNIP1jJyJZGZBQM.MVMq4bQt
ikbK4u_YwgmnQEd5_YjPBOjMngelMSaoeu1XmVgSRmRWH4S9ReNHjqgQ7p7Zkd0IJ5cjGcKp5dsC
QP6Yb9kAofeuOSR1uWGGYecdX.6h8mnogXFDFoSkSuHMEXBrlXyFoXFNt.ooxNSJgkL0sU_LAffK
3E6nRESkIojY_RU17ncJDsPOyDShuD2o5.KHs4huAep62h1SW3A2fOrFRJ.QffRPruUIh31oa1d7
8NKh.2UZnycmKmDCmMUcLCJWfbWT39SJduQ2HHz5.oFN5fPmsoewV8f0TX9ZGflfDWXWf9JFLuxP
wYjk3
Received: from sonic.gate.mail.ne1.yahoo.com by sonic303.consmr.mail.bf2.yahoo.com with HTTP; Wed, 8 Jul 2020 07:01:46 +0000
Date: Wed, 8 Jul 2020 07:01:44 +0000 (UTC)
From: Mahmood Naderan <nt_mahmood@yahoo.com.INVALID>
Reply-To: Mahmood Naderan <nt_mahmood@yahoo.com>
To: "users@httpd.apache.org" <users@httpd.apache.org>
Message-ID: <623665695.2049389.1594191704169@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_2049388_1190851353.1594191704168"
References: <623665695.2049389.1594191704169.ref@mail.yahoo.com>
X-Mailer: WebService/1.1.16197 YMailNorrin Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Subject: [users@httpd] Tuning the number of connections and processes
------=_Part_2049388_1190851353.1594191704168
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Hello
When I count the number of apache2 processes, I get about 151, but when I check the number of connections, I get about 208 connections. I want to know if there is any relation between these two. Also, isn't 151 processes low? We have 32GB of RAM with 10 cores. We want to have a support for about 1000 users online, refreshing web pages at specific times. It is actually online exams on our Moodle web site.
# netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n | wc -l
208
# ps -A | grep apache | wc -l
151
Regards,
Mahmood
------=_Part_2049388_1190851353.1594191704168
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydp1ddda290yahoo-style-wrap" style=
=3D"font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px=
;"><div><div dir=3D"ltr" data-setdir=3D"false">Hello</div><div dir=3D"ltr" =
data-setdir=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"false">When=
I count the number of apache2 processes, I get about 151, but when I check=
the number of connections, I get about 208 connections. I want to know if =
there is any relation between these two. Also, isn't 151 processes low? We =
have 32GB of RAM with 10 cores. We want to have a support for about 1000 us=
ers online, refreshing web pages at specific times. It is actually online e=
xams on our Moodle web site.</div><div dir=3D"ltr" data-setdir=3D"false"><b=
r></div><div dir=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"ltr" d=
ata-setdir=3D"false"><div># netstat -ntu | awk '{print $5}' | cut -d: -f1 |=
sort | uniq -c | sort -n | wc -l<br>208<br><br></div><div dir=3D"ltr" data=
-setdir=3D"false"><br><div># ps -A | grep apache | wc -l<br>151<br><br></di=
v></div><div dir=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"ltr" d=
ata-setdir=3D"false"><br></div></div><div><br></div><div class=3D"ydp1ddda2=
90signature">Regards,<br>Mahmood</div></div></div></body></html>
------=_Part_2049388_1190851353.1594191704168--
From users-return-119676-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 8 09:44:19 2020
Return-Path: <users-return-119676-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id A6FDC1AC43
for <apmail-httpd-users-archive@www.apache.org>; Wed, 8 Jul 2020 09:44:18 +0000 (UTC)
Received: (qmail 58628 invoked by uid 500); 8 Jul 2020 09:44:12 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 58587 invoked by uid 500); 8 Jul 2020 09:44:12 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 58576 invoked by uid 99); 8 Jul 2020 09:44:12 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Jul 2020 09:44:12 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 6129A181446
for <users@httpd.apache.org>; Wed, 8 Jul 2020 09:44:11 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.001
X-Spam-Level:
X-Spam-Status: No, score=-0.001 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
autolearn=disabled
Authentication-Results: spamd3-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024)
with ESMTP id Sjh3Y4Kb_JdS for <users@httpd.apache.org>;
Wed, 8 Jul 2020 09:44:09 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=74.6.128.109; helo=sonic312-47.consmr.mail.bf2.yahoo.com; envelope-from=nt_mahmood@yahoo.com; receiver=<UNKNOWN>
Received: from sonic312-47.consmr.mail.bf2.yahoo.com (sonic312-47.consmr.mail.bf2.yahoo.com [74.6.128.109])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 37FD37DC9E
for <users@httpd.apache.org>; Wed, 8 Jul 2020 09:44:08 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1594201442; bh=3rJoo8ybLCygc2nf/Bi8dlaeDba2EQFGj2yTIcrRNKk=; h=Date:From:Reply-To:To:Subject:References:From:Subject; b=AFObJ6sTt6PNXItbBmA/Ood4100bESEYEJViWEFKb4RzAQtIemLDpqD+fXrbcG4Xip7VQp3HnYDPPLEvZyuu2UVu2JboCbPR62K7kfas4U8tJgyI83JsqdoJMT7vbrmzyOuDFw1+wDx+8l5sxe1PUj9Pvznq5T1BqkJbFSBIeRe2VWrEHLIUh3luz7bu8ovc90CfbDl6hEJjXMQvGQBDOxSXNjIi9LmYOFnjsKZ0ripHYdYoizf+V5d6sJ9dCVJibzPCnFGRo9hFlpm4Rhx6GZyeY2e335REyVuxjvho4y9qDqN1WtlbuiCdm6U0psexG0Z7V1j/vRhfCygSeFFu5g==
X-YMail-OSG: zYtZMGYVM1lFIjBiyT3yf3Yzn.OTC0Ldcz2SwBER7Iyth0UFpJLJ4AVsd8z1Lrq
vL4.mGDj1yD92uCEx9cbX2K8_PwfDbOJ3cHso4_ut08QRCXTeOP6ye6rDz3o.B0KunTjVsg97I4p
TQvb8CIZ8zrfIGDvLcnCycNn7V8WI6QnTFbdEHT7EXst1s.5AnYnKmVZvn.3nlFp0WIaf7d5tGqt
OY4y.9i0Rc4l9d2qlKpOTv8elxwSN1rkktQDwLbQDiTtCjTzgCax25V3jrX1pCQ6iEGnconzmQC2
s6cdjQfEMwt7urxFZTfJHATcMLnWB0yqgvC_li2xTf.t87o3Ag7wFOxd1.26Q0vWrmgDyKWMbxHb
Rg3DIwvdC7C4gWIOAHG7QvIJFdOYOWtPxK81cKPfAmLRoO84_SY3WashAVpdHbU3aHac32SJI7pE
KQUxCL1algOsB2BN2aKduqgDkzndLjRd0DxkMZjgLz2TO6msxRC4TLEj21MNwK_epoUXBKvBMlVd
bmhjyGJtB807X8v8MeK.PMPGh9rCdO5_VLnx3LrchjDQ6NOMT4cjyV8IbgL_L5PUzJDWlRvUUFC4
EiEdz6hzIRGCrZxz6K2vXDlqyzAZkPM_yU_D7kgFnrpqvc55UC52Zx.nZlNiu5a3UkvgBa2m82aQ
EPSaBVHn7ijIWt6hhLwQxnTrDaaInzQFeUKWhpF3UIsHbSCKNWetaB5ItPmCfeAUr5djMPClNepq
r6JKhNUuWIVkeYXDegg7qeuG1ZM_GUqNF_gwYneNS0czjNcYoXvoNetJEC4G7RN.PKHzV3XSXWwQ
m9tvIQFEg03UijsyJxlkZgfrgkx4TyMinEomqK9x18V1gY.pC0loMKhfibdUcY6ALQHuRdWoXGe4
hcGs2oSCHdxe_kWyxyhf9wKMwX0qrvVwRkBkG0g9DQ8aZalEqzLXo.8RgiwRco5rpdYpgAOMdvpP
Yr6CpGIbiibPCnCYEMPL4Ps5bgjEjdG1MHtPBBPziNJHVE2m5k1WgG55acmPEGy1q4mp1NpZOY7d
bHXxvzThvhbLU35spEebhTLocLJxsiAJi7XUnYqj1U9s2BRuyFlYxzRWxD78kygpZcRXdiZ0jQMk
f3PUSywob.NnabJq7.Icyre3dyP9ajkk8uVJcY4_O2ek0CSffKf2xtGjwJG5XVLnfVWVNpxMxFHk
vjXL9iaGJK52Lb.DNxMkhTdvVpuERv6lQcqDrsCDUSb1uqqJsR.JcvVKff8oDR9fylne_pv8bgAF
wX3cBXHq7fo86Q6LgGM4mMvMbQ8673Zio5M11F3VAG4YejLQJjwLbUubxXXY2nZWPqqadS4G6aeC
iGpKdfgZjMDaC2acCuzZ23_fwZM1CZy0IXKdOEaFh1kS2gDcavwlfi4ceHpN1qkMqdQpKRpho6XX
QOohIiAGxMWbGvcE-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic312.consmr.mail.bf2.yahoo.com with HTTP; Wed, 8 Jul 2020 09:44:02 +0000
Date: Wed, 8 Jul 2020 09:42:01 +0000 (UTC)
From: Mahmood Naderan <nt_mahmood@yahoo.com.INVALID>
Reply-To: Mahmood Naderan <nt_mahmood@yahoo.com>
To: Httpd Users List <users@httpd.apache.org>
Message-ID: <225131299.2033432.1594201321692@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_2033431_1182227857.1594201321691"
References: <225131299.2033432.1594201321692.ref@mail.yahoo.com>
X-Mailer: WebService/1.1.16197 YMailNorrin Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Subject: [users@httpd] About ServerLimit
------=_Part_2033431_1182227857.1594201321691
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hello
When I set ServerLimit to 500, does that include all TCP connection states?=
I mean=20
are all these counted by ServerLimit? Or just ESTABLISHED is counted?
tcp6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 =
192.168.168.91:443=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 X:18212=C2=A0=C2=A0=C2=A0=
=C2=A0 FIN_WAIT2=C2=A0=C2=A0 -
tcp6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 =
192.168.168.91:443=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 X:14756=C2=A0=C2=A0=C2=A0=
=C2=A0 TIME_WAIT=C2=A0=C2=A0 -
tcp6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 =
192.168.168.91:443=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 X:56033=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0 FIN_WAIT2=C2=A0=C2=A0 -
tcp6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 =
192.168.168.91:443=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 X:15956=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0 TIME_WAIT=C2=A0=C2=A0 -
tcp6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 =
192.168.168.91:443=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 X:49650=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 ESTABLISHED -
tcp6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 =
192.168.168.91:443=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 X:63982=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 TIME_WAIT=C2=A0=C2=A0 -
tcp6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 =
192.168.168.91:443=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 X:53249=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0 TIME_WAIT=C2=A0=C2=A0 -
Regards,
Mahmood
------=_Part_2033431_1182227857.1594201321691
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydp85c13d32yahoo-style-wrap" style=
=3D"font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px=
;"><div><div dir=3D"ltr" data-setdir=3D"false">Hello</div><div dir=3D"ltr" =
data-setdir=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"false">When=
I set ServerLimit to 500, does that include all TCP connection states? I m=
ean <br></div><div dir=3D"ltr" data-setdir=3D"false">are all these counted =
by ServerLimit? Or just ESTABLISHED is counted?</div><div dir=3D"ltr" data-=
setdir=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"false"><br></div=
><div dir=3D"ltr" data-setdir=3D"false"><div>tcp6&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 192.168.168.91:443&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp; X:18212&nbsp;&nbsp;&nbsp;&nbsp; FIN_WAIT2&nbsp;&nbsp; -<=
br>tcp6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
0 192.168.168.91:443&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; X:14756&nbsp;&nbsp;&nbs=
p;&nbsp; TIME_WAIT&nbsp;&nbsp; -<br>tcp6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 192.168.168.91:443&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp; X:56033&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; FIN_WAIT2&nbsp;&nbsp; -<br>=
tcp6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 =
192.168.168.91:443&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; X:15956&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp; TIME_WAIT&nbsp;&nbsp; -<br>tcp6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 192.168.168.91:443&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp; X:49650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ESTABLISHED -<br>t=
cp6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 1=
92.168.168.91:443&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; X:63982&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp; TIME_WAIT&nbsp;&nbsp; -<br>tcp6&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 192.168.168.91:443&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp; X:53249&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TIME_WAIT&nbsp;&nbs=
p; -<br><br></div><div><br></div><div><br></div></div><div class=3D"ydp85c1=
3d32signature">Regards,<br>Mahmood</div></div></div></body></html>
------=_Part_2033431_1182227857.1594201321691--
From users-return-119677-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 8 10:33:48 2020
Return-Path: <users-return-119677-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 73EF71AE26
for <apmail-httpd-users-archive@www.apache.org>; Wed, 8 Jul 2020 10:33:47 +0000 (UTC)
Received: (qmail 62323 invoked by uid 500); 8 Jul 2020 10:33:41 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 62296 invoked by uid 500); 8 Jul 2020 10:33:41 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 62280 invoked by uid 99); 8 Jul 2020 10:33:41 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Jul 2020 10:33:41 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 9B9BAC05D9
for <users@httpd.apache.org>; Wed, 8 Jul 2020 10:33:40 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.201
X-Spam-Level:
X-Spam-Status: No, score=-0.201 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id nODTYqK4z0Lk for <users@httpd.apache.org>;
Wed, 8 Jul 2020 10:33:39 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.208.47; helo=mail-ed1-f47.google.com; envelope-from=covener@gmail.com; receiver=<UNKNOWN>
Received: from mail-ed1-f47.google.com (mail-ed1-f47.google.com [209.85.208.47])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 3AB42BE2B1
for <users@httpd.apache.org>; Wed, 8 Jul 2020 10:33:39 +0000 (UTC)
Received: by mail-ed1-f47.google.com with SMTP id d18so35599269edv.6
for <users@httpd.apache.org>; Wed, 08 Jul 2020 03:33:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=MM8BuwQxEth8vAMcXqmcOH8dGF3SnQwDkg11X2wIiv8=;
b=CsWGZmMJf8djPFeLZARpAhvZ4yw/P83sPtPcHPgefvu23/gilxTFyzId7Y1atpHO1a
kkzDuGV9l6l2bhnNN6ETiwPHy+zlzVrGv0Qdi+fNp5NRj0itUelcR1RM/+2uQPlfWJ9i
cg+vSM4p750rcKvDy9p7awXS3384ZFATneH2HZQMucaRei/MgFlmtwONbi4UzC8NdcqI
c0cCVAj5lJUtO2JD3F0hjHztvj4pRzGp7/E7FGYEy+5oZLOo9bea+qOLRpZbRXG6mAwj
nMuWSGNeQiw24tTad1ZItlxBqbsrb/hzTGKWSTsJr/xi0zTzWnN9mMQ/Wz/hoYst6/Ao
eEtw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=MM8BuwQxEth8vAMcXqmcOH8dGF3SnQwDkg11X2wIiv8=;
b=hVHB+2MfnLueyxLbPECiYpbObs5WkAVT/OR3BU+BGq7SN/LDdp+BEBycKhnGrM/ciT
u3TCDfM1H5j+jdcG+zovMhwyvHV2UtKMpAML3DK/IwkFmWVeR2z7NKp/+Nwpw8qSPwMd
WdU9TOex1Trumw/isYyXp438JAHJ9H8AVDNd1UEkaIK/QZXaNz6B0Z188nUEssJX2oR1
2xgNPRyg1XV3rXbHsTYtMY/Ktdt/79ijhvGckmnccVbz8ou4d21cFesf1gkii7MV2JsL
w7wOrFIIBRmDNcMtSi7ad7HAQ3qUGnjh4ipkCfdwWYIxEG/0atFfLQg0R8s+zR9xVCiH
H0Xg==
X-Gm-Message-State: AOAM533ibGj6+z8+3gsoAEt9JfWlkZ4iWAhookYKxmh7+aAWx0+hMUwv
fnbY3qpKgbbvMVkkhpHEgLq8x+/U6VkAwkuWUUXKYhXJbow=
X-Google-Smtp-Source: ABdhPJzf8mrrKArSK9dbM0pGM3N7DLeILFKpQ4KmOqNcayP4O8edy4Ip6RSYadimECIhEwIwLYDUCs09E5wQHaBus4g=
X-Received: by 2002:a50:e689:: with SMTP id z9mr18796247edm.131.1594204417996;
Wed, 08 Jul 2020 03:33:37 -0700 (PDT)
MIME-Version: 1.0
References: <225131299.2033432.1594201321692.ref@mail.yahoo.com> <225131299.2033432.1594201321692@mail.yahoo.com>
In-Reply-To: <225131299.2033432.1594201321692@mail.yahoo.com>
From: Eric Covener <covener@gmail.com>
Date: Wed, 8 Jul 2020 06:33:27 -0400
Message-ID: <CALK=YjN6+1RWmnTLjv=XicUm6E9nGVxkHif0uf+OkLMk3k_kpg@mail.gmail.com>
To: users@httpd.apache.org, Mahmood Naderan <nt_mahmood@yahoo.com>
Content-Type: text/plain; charset="UTF-8"
Subject: Re: [users@httpd] About ServerLimit
On Wed, Jul 8, 2020 at 5:44 AM Mahmood Naderan
<nt_mahmood@yahoo.com.invalid> wrote:
>
> Hello
>
> When I set ServerLimit to 500, does that include all TCP connection states? I mean
> are all these counted by ServerLimit? Or just ESTABLISHED is counted?
>
>
> tcp6 0 0 192.168.168.91:443 X:18212 FIN_WAIT2 -
> tcp6 0 0 192.168.168.91:443 X:14756 TIME_WAIT -
> tcp6 0 0 192.168.168.91:443 X:56033 FIN_WAIT2 -
> tcp6 0 0 192.168.168.91:443 X:15956 TIME_WAIT -
> tcp6 0 0 192.168.168.91:443 X:49650 ESTABLISHED -
> tcp6 0 0 192.168.168.91:443 X:63982 TIME_WAIT -
> tcp6 0 0 192.168.168.91:443 X:53249 TIME_WAIT -
It's complicated and depends on the MPM used. When you see states
FIN_WAIT1 or FIN_WAIT2 or CLOSE_WAIT there will generally be a thread
tied up in the server still. TIME_WAIT does not.
But it's more straightforward to use /server-status if you care about
things like ServerLimit then trying to reverse engineer from netstat.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
From users-return-119679-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 8 11:56:53 2020
Return-Path: <users-return-119679-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 6289019247
for <apmail-httpd-users-archive@www.apache.org>; Wed, 8 Jul 2020 11:56:53 +0000 (UTC)
Received: (qmail 18245 invoked by uid 500); 8 Jul 2020 11:56:45 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 18209 invoked by uid 500); 8 Jul 2020 11:56:45 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 18199 invoked by uid 99); 8 Jul 2020 11:56:45 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Jul 2020 11:56:45 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id D13181A44D2
for <users@httpd.apache.org>; Wed, 8 Jul 2020 11:56:44 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.198
X-Spam-Level:
X-Spam-Status: No, score=-0.198 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001] autolearn=disabled
Authentication-Results: spamd2-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
with ESMTP id YFhpKr6yOkWJ for <users@httpd.apache.org>;
Wed, 8 Jul 2020 11:56:43 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.218.49; helo=mail-ej1-f49.google.com; envelope-from=covener@gmail.com; receiver=<UNKNOWN>
Received: from mail-ej1-f49.google.com (mail-ej1-f49.google.com [209.85.218.49])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 7FC98BE2A5
for <users@httpd.apache.org>; Wed, 8 Jul 2020 11:56:43 +0000 (UTC)
Received: by mail-ej1-f49.google.com with SMTP id dp18so50136888ejc.8
for <users@httpd.apache.org>; Wed, 08 Jul 2020 04:56:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=7yA0/Xir1fDeLW49BcEYROwL2mqmmz32BgcynzDs8Aw=;
b=BSO+Yy7Fk7wGPxYBpAZdCPI7w2buR3Tay85uE1b3GSmuFLLxMIvberfFkKhj3MnYpY
vP8ZnK0qDI26PMJ6ie8m/wp4gX/Z0OVgXHwsXp8afIG75qRgxyb1VMKFgjHLeK+G6KxZ
FhbgO6cysrB6tcGjxxuO59EDm6+FNDwUxj1pgpf2y8wdjvtdCpi4xzC6VT+jZQWFN90E
mRviifBnT1n71P0iR6mjptPFPqwGXOJ4+OwG91FzPtZwmsld2Ai0oG1AmyGVD2akn8e2
X1QLKbijRWSLrfC3OY3YBkK2uRf4tBtV4OAkB6RptXuiBbK57Av9mqFr/gI9aQKNtZF3
QwxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=7yA0/Xir1fDeLW49BcEYROwL2mqmmz32BgcynzDs8Aw=;
b=iBunyhZWaRlfipJQ5in23rZAzWFi92uqBYi5mDpPtjvVVX3Ldacr153Ditr2GqwWHn
wsQ7eH/H2FnDIk3MXsoceFz6uTHCTytWeJ5Mbb+9+K/umnjMsQXxDmA/riQVmjeZwijI
8LJyURYLN4FfmyhpWvE9tPOpJ8efOWr1YzPFJI54HgLkKorauaeo5Lce6IMFF1D+Z1OH
+Y0DZrALovzBxAdeuXpg3hoSlET5Oe6l7lvjvh+oG1iut1Sh6rljI4atBlIamrIjxszR
r2zPqCGTJCuLimgxzpAfKjbrblUrWFtycUs1tW83qfuFi3i/ikiABkeLhyMMEtPHW/La
eS9g==
X-Gm-Message-State: AOAM533/oPgvaRg9TRgvzkZ+62NyQKPrK2/mdD73iHS7uIu8wHsfMYUI
JM29KEG6BLDIk6aLFZpl8tIhDpPdNnmCXR+BYXfkGYkJ
X-Google-Smtp-Source: ABdhPJwFBlvGniVoTi9GVQ5SjEWARVxzZdvZQoOF5Q2nmD6CSxyW2CcBwVWswyz6cyyUzlvOAnN9xPhaz8m5+ijU7mI=
X-Received: by 2002:a17:906:95d9:: with SMTP id n25mr52945351ejy.437.1594209402226;
Wed, 08 Jul 2020 04:56:42 -0700 (PDT)
MIME-Version: 1.0
References: <225131299.2033432.1594201321692.ref@mail.yahoo.com>
<225131299.2033432.1594201321692@mail.yahoo.com> <CALK=YjN6+1RWmnTLjv=XicUm6E9nGVxkHif0uf+OkLMk3k_kpg@mail.gmail.com>
<727946651.2091014.1594208957697@mail.yahoo.com>
In-Reply-To: <727946651.2091014.1594208957697@mail.yahoo.com>
From: Eric Covener <covener@gmail.com>
Date: Wed, 8 Jul 2020 07:56:31 -0400
Message-ID: <CALK=YjM96+rB-pwWR2Tq31fUB==NXaPdym_HiN--=bPmA_FGcQ@mail.gmail.com>
To: users@httpd.apache.org, Mahmood Naderan <nt_mahmood@yahoo.com>
Content-Type: text/plain; charset="UTF-8"
Subject: Re: [users@httpd] About ServerLimit
On Wed, Jul 8, 2020 at 7:49 AM Mahmood Naderan
<nt_mahmood@yahoo.com.invalid> wrote:
>
>
> >But it's more straightforward to use /server-status if you care about
> >things like ServerLimit then trying to reverse engineer from netstat.
>
>
>
> OK I can see that report.
>
> It is saying that 109 requests currently being processed., 18 idle workers.
>
>
> Is that 109 the same as the number of apache2 process like below:
>
> ps aux | grep apache | wc -l
If you use prefork, you will see close to 109+18 processes.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
From users-return-119678-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 8 11:57:32 2020
Return-Path: <users-return-119678-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id AC29619250
for <apmail-httpd-users-archive@www.apache.org>; Wed, 8 Jul 2020 11:57:32 +0000 (UTC)
Received: (qmail 4780 invoked by uid 500); 8 Jul 2020 11:49:28 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 4732 invoked by uid 500); 8 Jul 2020 11:49:28 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 4722 invoked by uid 99); 8 Jul 2020 11:49:28 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Jul 2020 11:49:28 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 4BC2E181446
for <users@httpd.apache.org>; Wed, 8 Jul 2020 11:49:27 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.409
X-Spam-Level:
X-Spam-Status: No, score=0.409 tagged_above=-999 required=6.31
tests=[DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.2,
KAM_DMARC_STATUS=0.01, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
autolearn=disabled
Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=neutral
reason="invalid (public key: DNS error: query timed out)"
header.d=yahoo.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024)
with ESMTP id xuFY6B9Iz3S7 for <users@httpd.apache.org>;
Wed, 8 Jul 2020 11:49:23 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=74.6.134.123; helo=sonic315-13.consmr.mail.bf2.yahoo.com; envelope-from=nt_mahmood@yahoo.com; receiver=<UNKNOWN>
Received: from sonic315-13.consmr.mail.bf2.yahoo.com (sonic315-13.consmr.mail.bf2.yahoo.com [74.6.134.123])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id DA115BE2A5
for <users@httpd.apache.org>; Wed, 8 Jul 2020 11:49:22 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1594208962; bh=H2aksVLLfndBYcuhWXWiGD58Qz2SCXBMKuX/maWr4BQ=; h=Date:From:Reply-To:To:In-Reply-To:References:Subject:From:Subject; b=RkDDfNxBusneWv8xkECVEW4XR9BKaNJvraDYAYcgVgV2H3QB9viPqgv8/cUnoIqj5eH/w3Bew/WuobgTdFT6B6sU+zk3MibHbThQ/bTBzaCiOTx26p1z4mc7OiLToU8gpt5L/Ae4hxPrxCzgOs0TO5vHNlcF7oMZ2zltDPnXFFGxhl6NLZVeSEOim/1DhM+bewTnd8uUUt9F2+ig2Gsp/I3keVJA0XJvEpMoPmGu+8GU+gc2Hx19k2Slbt0vvctyGj6byBIZnK5SxsnJivcTcAO+eo4KRqnCzdDZkBMOkMrjFoMz+U/KddDQ4TAkVSSrzmDLxv3bsRNqf6RKTpfeMA==
X-YMail-OSG: ShJO1JEVM1myPz7nLyfMq.k3_vUiesGvyVcXMa79islRcAHg6vNEoS3f2l.qKIi
L.p8mssbcJ614UQ57ICxqEiw3VoW9sRgb7pz6R_8u_.h4M0MGy_po2MKq18ctR1bRWDiQRWGZ8Ei
Al2NKqWbcn1eW4a11Si4TI_60_Fd.Zv6xolO6B9zSWLJuoNuK8.ektJauxy1T5_q2jRTM1TryUFa
j20FYOSaS.b5N6fPVDYl_eYIWGx8IqdkgzeQtRw6pdc1IbDEf8J3rIAjsEopO4WZgA5_WXRZYToz
hhHJdZ0JXSGUrZTnhgjDeP_uhqYwO01pqM9ehDK0WZBawsQ4Y7QkkZFHJku1IBN48JlwVLN8wwt_
Xr6zFlyuARAivY3PqCR363BmwokLWiPFyNEqI_bDoiRAZkVuAisYasRQFR0uszosV19jw6TE5hAo
yxdsJdjOMuwhIY89TwqjVgKxLe9pZn8kJX8OEJDLqtzLbSavY9jM7DAmxjTINK0R7brbvRqx7wlc
pgmGSceFJ_indJxYZ32eYJ4wyUUzBR.Styl9RiENR8tk_mu92ujyKPjS_AxHQaRFd6NEm0ZI5Y2q
A8lUJRoEqTL2VE261NhSWVHxJBlkXElNbF0ui_oCoxZAdTl4xbep0eDbdTcIzuyDEkImSPlzkv8i
e3EiQ2KXExG3sN5Kvi_VG9NU6S5wteCZi9kEZFGUbcRx.SbZXcVYNw4XRjgZgR0SULsvi_EVgnaE
Fk9qROz66LBjAcPTJZnx0.4v59Cxs7RxxbixbahQOFep32m7bjjWi3s9pl3ZFO6WavxjDcNk0YOD
waY1BPobIgeIUBF56KeSYUQtQIojc4M.YGLYOfRmIWI1Tsm4yMtZaZcIWxH6wW.hCWXMlv8B_GQe
2zBqIAuoTqS6oZCV5FLqs5lmQlMx8.Ojn97Rf5kyPba2A6OtCAg5uycQ5Tk0HtmHqMl6gH8qoNcN
KGk98g6wFdVnyX_RE9Xc5TQ1zNoTg4NiZ0Rz6Ei5RkOxP9lmDZgZ27plVB6G3aWQ18KMGblgR2O5
3CYD_GpuW86ko4IXUsSB3bFn2FdDmrjC9bdsQoILBzDXgJe0C6j_gMYvzq7YFBgzJqR3ZA.ISrQR
yVDD4oZimv9Bh4gIEQdCC6ZUy4oNV.73H7kiyV3CG4IK83oPq59W4lcJ0uXO2VCGLJvguWeWn6a5
NnGg8M.SWXLgVlSBwEH2jHCOBbkpiaHBqDdjSv68WZp8scg5NHADIHQ2riIoruDNcvbdMexSBtrO
ndK3tJnrUssZ1rGv4Na_IPZ6xx1iS.nJkwI3_0uZs4KP.pn_yej0iJ6wQMHyXhijTjoe3cj6n
Received: from sonic.gate.mail.ne1.yahoo.com by sonic315.consmr.mail.bf2.yahoo.com with HTTP; Wed, 8 Jul 2020 11:49:22 +0000
Date: Wed, 8 Jul 2020 11:49:17 +0000 (UTC)
From: Mahmood Naderan <nt_mahmood@yahoo.com.INVALID>
Reply-To: Mahmood Naderan <nt_mahmood@yahoo.com>
To: users@httpd.apache.org
Message-ID: <727946651.2091014.1594208957697@mail.yahoo.com>
In-Reply-To: <CALK=YjN6+1RWmnTLjv=XicUm6E9nGVxkHif0uf+OkLMk3k_kpg@mail.gmail.com>
References: <225131299.2033432.1594201321692.ref@mail.yahoo.com> <225131299.2033432.1594201321692@mail.yahoo.com> <CALK=YjN6+1RWmnTLjv=XicUm6E9nGVxkHif0uf+OkLMk3k_kpg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_2091013_20508630.1594208957696"
X-Mailer: WebService/1.1.16197 YMailNorrin Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Subject: Re: [users@httpd] About ServerLimit
------=_Part_2091013_20508630.1594208957696
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
>But it's more straightforward to use /server-status if you care about
>things like ServerLimit then trying to reverse engineer from netstat.
OK I can see that report.
It is saying that 109 requests currently being processed., 18 idle workers.
Is that 109 the same as the number of apache2 process like below:
ps aux | grep apache | wc -l
?
Regards,
Mahmood
------=_Part_2091013_20508630.1594208957696
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydp6d9a85b6yahoo-style-wrap" style=
=3D"font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px=
;"><div><div><br></div><div><div>&gt;But it's more straightforward to use /=
server-status if you care about<br clear=3D"none">&gt;things like ServerLim=
it then trying to reverse engineer from netstat.</div><div><br></div><div><=
br></div><div><br></div><div>OK I can see that report.</div><div><br></div>=
<div dir=3D"ltr" data-setdir=3D"false">It is saying that 109 requests curre=
ntly being processed., 18 idle workers.</div><div dir=3D"ltr" data-setdir=
=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"false"><br></div><div =
dir=3D"ltr" data-setdir=3D"false">Is that 109 the same as the number of apa=
che2 process like below:</div><div dir=3D"ltr" data-setdir=3D"false"><br></=
div><div dir=3D"ltr" data-setdir=3D"false">ps aux | grep apache | wc -l</di=
v><div dir=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"ltr" data-se=
tdir=3D"false">?<br></div></div><div><br></div><div><br></div><div class=3D=
"ydp6d9a85b6signature">Regards,<br>Mahmood</div></div>
<div><br></div></div><div><br></div></body></html>
------=_Part_2091013_20508630.1594208957696--
From users-return-119680-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 8 12:01:12 2020
Return-Path: <users-return-119680-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id A2D4F192A7
for <apmail-httpd-users-archive@www.apache.org>; Wed, 8 Jul 2020 12:01:10 +0000 (UTC)
Received: (qmail 33264 invoked by uid 500); 8 Jul 2020 12:01:03 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 33123 invoked by uid 500); 8 Jul 2020 12:01:03 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 33098 invoked by uid 99); 8 Jul 2020 12:01:03 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Jul 2020 12:01:03 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 56DA6C21D5
for <users@httpd.apache.org>; Wed, 8 Jul 2020 11:53:46 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.79
X-Spam-Level:
X-Spam-Status: No, score=0.79 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_NONE=-0.0001,
RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
UPPERCASE_50_75=0.791] autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id looAvOmrz6S4 for <users@httpd.apache.org>;
Wed, 8 Jul 2020 11:53:42 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=74.6.130.40; helo=sonic308-1.consmr.mail.bf2.yahoo.com; envelope-from=nt_mahmood@yahoo.com; receiver=<UNKNOWN>
Received: from sonic308-1.consmr.mail.bf2.yahoo.com (sonic308-1.consmr.mail.bf2.yahoo.com [74.6.130.40])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id A8A4B7F674
for <users@httpd.apache.org>; Wed, 8 Jul 2020 11:53:41 +0000 (UTC)
X-ASF-DKIM-Sig: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1594209220; bh=p7iW4a/Owsbq2h06PjWyWA0WPi8x2mePVE2rmRCVsOI=; h=Date:From:Reply-To:To:In-Reply-To:References:Subject:From:Subject; b=gIBSOd++z6KOsvmK0JR9X+8bA7pHimgv/0PrisIbIAVYH8BQvMNKm+T3UMx8MBDhYRIkbvMABLgUYaEJ0lQt8BAeRtGj6POVeZzpdYPJUHpm+3npBaXXTolSFyb58x0tRVAqf9TNtCUyEH6Yn2rd2xgLV9F76fgaKA+PMYlS7VLc+S0UdaXci+HAq4RTBGiIfRkUyY5XYo7Jh6hEjyjihRBYNwl2ncVAGVjQ/xW8ZJ47XY9xkpiZo5JNwEl1/PCyrQ/o2yXL5nM90mK+QZ/hbulOFJMjfQ6QWATcNspU8PiYk6KnsLFONMnTCqprKFDCIi9flYpnkICvd0wxDA6n3A==
X-YMail-OSG: .g820nkVM1kXYf0DoMUIBZ4eh7vuJPwiz42y.ApqAZicRz4cWxVCMN3Md9JypdI
l2tAtHM4VzfrOr.CD016sR2uU9b9uAZODv1X1739xbv2bmQXOGIGlij_E6xxgp.hSt1qvEC.7wH5
gyemohSB8E4aBk6nEOF624TQoR7xuRmrblvQsYCG0N_TJG24VGB3LNtMCDbGFisP0asfUxfJzB2O
Fztze0EjL_w25QhpKoxiyGFKCnBft653IpYdF3rgUcjy3yF44YAS9RZWRIyxkj3n8nnxn6HJqQnd
J1BxNk25NkNNdx6375LLnyoMYyE20tmsun0PwzzwlA2yphC60GTva3j9MKxgVoA0mec6ABLf7a8q
Jl7yBjKLGAkIf_zWMrXAwaWb2kzaqpgxRJj93_NofE_3rZqA6Xkk0rq0Ix160RNHZxeCIXyyDbRY
jhCFcSS9QgWkk_rF.6WQSdN6tKGtiSssXIWUqOaQ5sWpRD_WWVGXzF.JfKlgztmNF79f8LAOKBpr
kJew5Q2hjbtov58wuLoF6bvU.qde31E46eEgIgMo6K_B4D9myJFBrKR3kD1CpJfogu4A0ofiTLq5
zInhUGQBk.uVln65.sQrA2dk22LX7.kge..eyDqQBCCkhJ1K6_5oOLKEATiOEdaWZqntDoifo82C
0b.Kx2NteRSyL8sY98yYLKJfMg.WKK60YbvBR_lmz2GCi_RxsPyNqx8MLwJeim7uu8OjmGX7Ix9Q
XU7lHlICoD376Qn0Ic_DngQVdIRQSu.33Hb0PrhtEEfsJy1ZScRsp_AeUptQPOvXCGzLSw0yEUpJ
wEJDOkOdhVx6ywQwYgOLlZ.Zrcs6wEiiWcWpBPPuG56pV0rVlwMX2chkOPA54nv_YTCzWLQfYtvO
TrWrJraeU_LAZ3WYq9P6Q0LhGal.fz79EfUk11UZyf9F5i.m1vE6xbhYhJsX0gkR39m4TySmgGWi
vUtG7vI.VpFpibCxaYD6ZMbe8y7iVhWuMp_WNBwuPvCApoD0rC1gNFif_VSYiYGYX1EnuI1iULX_
xd2lhWJiioKL_2e8dWKU.I5i4nmm4DWKEkdUj0VI11MGm9ylrsVOed5aQP82J80B.TFh_HC2BZn.
t8aettS4F1vfjEhVowdWfY7_V3.ZPE7_OLkakIrWtXsrLOCMlH9CbSjyGcYsObr0.mb5dNADS4Rw
KVR3ebczaMbNZNnQ0tXhvE5J28YCZwU3TKZpyCmCbdlDKs3vCOANYhYwDfzW9ejRPOvrUnXhUBEa
OXhKNo302T.naopoLlwN0Ef0nCvQGoiZK7EYeGd7ZgKYHFkxD58SUS2FooHJ0TqWwogkhItd.qVa
cAQ--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic308.consmr.mail.bf2.yahoo.com with HTTP; Wed, 8 Jul 2020 11:53:40 +0000
Date: Wed, 8 Jul 2020 11:53:35 +0000 (UTC)
From: Mahmood Naderan <nt_mahmood@yahoo.com.INVALID>
Reply-To: Mahmood Naderan <nt_mahmood@yahoo.com>
To: users@httpd.apache.org
Message-ID: <994727555.2099179.1594209215506@mail.yahoo.com>
In-Reply-To: <727946651.2091014.1594208957697@mail.yahoo.com>
References: <225131299.2033432.1594201321692.ref@mail.yahoo.com> <225131299.2033432.1594201321692@mail.yahoo.com> <CALK=YjN6+1RWmnTLjv=XicUm6E9nGVxkHif0uf+OkLMk3k_kpg@mail.gmail.com> <727946651.2091014.1594208957697@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_2099178_1775324342.1594209215505"
X-Mailer: WebService/1.1.16197 YMailNorrin Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Subject: Re: [users@httpd] About ServerLimit
------=_Part_2099178_1775324342.1594209215505
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
One more thing. With this output
WKWWKWRKKRKWWKWWRWWRRKWWKRWKKR.RWR._W_R.RKRKK.RCWWKW_R.W..KKWWK.
WCWKKK_KWWWRR.R.WWWW.WWKWWRK.WWWRRW.WWW.WRK_WR.R..KWWKKRW.KCWK.W
..R........_..WW................................................
................................................................
................................................................
................................................................
................................................................
....................................................
Should I worry about W which means sending reply?
Regards,
Mahmood
------=_Part_2099178_1775324342.1594209215505
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydp53ae0253yahoo-style-wrap" style=
=3D"font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px=
;"><div><div dir=3D"ltr" data-setdir=3D"false">One more thing. With this ou=
tput</div><div dir=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"ltr"=
data-setdir=3D"false"><div>WKWWKWRKKRKWWKWWRWWRRKWWKRWKKR.RWR._W_R.RKRKK.R=
CWWKW_R.W..KKWWK.<br>WCWKKK_KWWWRR.R.WWWW.WWKWWRK.WWWRRW.WWW.WRK_WR.R..KWWK=
KRW.KCWK.W<br>..R........_..WW.............................................=
...<br>................................................................<br>=
................................................................<br>.......=
.........................................................<br>..............=
..................................................<br>.....................=
...............................</div><div><br></div><div><br></div><div dir=
=3D"ltr" data-setdir=3D"false">Should I worry about W which means sending r=
eply?</div><div dir=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"ltr=
" data-setdir=3D"false"><br></div></div><div><br></div><div class=3D"ydp53a=
e0253signature">Regards,<br>Mahmood</div></div>
<div><br></div></div><div><br></div></body></html>
------=_Part_2099178_1775324342.1594209215505--
From users-return-119681-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Wed Jul 8 16:42:54 2020
Return-Path: <users-return-119681-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id 788F7191A3
for <apmail-httpd-users-archive@www.apache.org>; Wed, 8 Jul 2020 16:42:54 +0000 (UTC)
Received: (qmail 33065 invoked by uid 500); 8 Jul 2020 16:42:47 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 33038 invoked by uid 500); 8 Jul 2020 16:42:47 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 33028 invoked by uid 99); 8 Jul 2020 16:42:47 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Jul 2020 16:42:47 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 1A0EAC0BD3
for <users@httpd.apache.org>; Wed, 8 Jul 2020 16:42:47 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.25
X-Spam-Level:
X-Spam-Status: No, score=0.25 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=0.2,
RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
Authentication-Results: spamd1-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([10.40.0.8])
by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
with ESMTP id 1y2b7KsD0XT6 for <users@httpd.apache.org>;
Wed, 8 Jul 2020 16:42:45 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.166.182; helo=mail-il1-f182.google.com; envelope-from=wendellhatcher1074@gmail.com; receiver=<UNKNOWN>
Received: from mail-il1-f182.google.com (mail-il1-f182.google.com [209.85.166.182])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 26CCCBE2AF
for <users@httpd.apache.org>; Wed, 8 Jul 2020 16:42:45 +0000 (UTC)
Received: by mail-il1-f182.google.com with SMTP id o3so22246450ilo.12
for <users@httpd.apache.org>; Wed, 08 Jul 2020 09:42:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=wyp630RpC7G0TmQbq1a6BecPpsZLfReRL/84NaHw+Q0=;
b=HBk716CFMGbEb5al+FrI0Tb8jlt/C3O3E2/g1jUYPGaqjvfUjUBrGvEtlcdjkiXivg
D3MJ/sOrobwyEqc9B0Da1sw8/Pi25ilcrF/0C2WLZ6Uh+s3git1T5F25ZG0BLthetX2+
2LvtCucoLOm6SDPDc50J53GVqyoHsWTMSzTz1uGAXItyIqPaDYcim5iDdmERZVt8MfPG
bss60GOKPLwslRVcYjUcSjfAYU6fQDFBtyVEIqJwWLFDZDqIacbrLne0WvcKpY+WJb/p
Qn6zAaCje1kiR39NIRNpo4tqh/xFJZgfzY8Z5CmlI1eo3SuCzPemte2NRbj2rfhBweV1
2tfw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=wyp630RpC7G0TmQbq1a6BecPpsZLfReRL/84NaHw+Q0=;
b=mfCxJRl7RbrSshY7jAg3y1CYLLD4gmT76RDt8t67iMHvxDKqNq7mvGYn2LmMn2HHr+
5sLWD3MIN/YiY24RvEUCpYSntYPIN4YRTZrmf4Mdyd+mlmVSV8UeHzqSerIj63OhqmQQ
BJwtmOODcz65++3UQEfngrN9RWPUlPcJO0sdSR0eSH8MJ9ZvbcGcafpetp5cVkn64I9S
ymhJH6Mke1ovSe0GQg+5JUzQl/No/XAf6i5L20zxvZ6G18qYUxLuRlX52azIiyPvCW5/
Zso3N005YHxU1u395Rh7lzIWXVkncEMquxQmjiUmQ6qbcTya1D+849dGhoIuZcBB6K+/
h5Gw==
X-Gm-Message-State: AOAM5300Sxm4+oQRI/tJO982BCQ5/6ZnImh70JMh29SbyFbJBk6qCBC8
zwkcwBjflBT21Xz8M8OzOS6gk23q9E1fTRvjLknn71upbKI=
X-Google-Smtp-Source: ABdhPJyoujp9WzVTBWARhipGz7u7fZcj7D5ulJt4M93UqxWb8lIOBxAWExNae9Mm8XLcbgF24zzPBe/CG3JzG80lIXY=
X-Received: by 2002:a92:8b0e:: with SMTP id i14mr40494706ild.307.1594226564223;
Wed, 08 Jul 2020 09:42:44 -0700 (PDT)
MIME-Version: 1.0
From: Wendell Hatcher <wendellhatcher1074@gmail.com>
Date: Wed, 8 Jul 2020 12:42:33 -0400
Message-ID: <CAKXhZzzNcdh6LoMHB4CsZSFfojPD-LQnFEVEj3jMEs41StMjFg@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary="0000000000000d578605a9f0ccf2"
Subject: [users@httpd] File exists: AH01185: worker slotmem_create failed
--0000000000000d578605a9f0ccf2
Content-Type: text/plain; charset="UTF-8"
Hi, I am getting the following error within apache
[Sat Jun 20 07:27:13.280938 2020] [:emerg] [pid 6535:tid 47435645317568]
AH00020: Configuration Failed, exiting [Sat Jun 20 07:27:13.280932 2020]
[proxy_balancer:emerg] [pid 6535:tid 47435645317568] (17)File exists:
AH01185: worker slotmem_create failed [Sat Jun 20 07:27:13.280858 2020]
[slotmem_shm:error] [pid 6535:tid 47435645317568] (17)File exists: AH02611:
create: apr_shm_create(/var/log/apache/
s1.ariba.com/shm/slotmem-shm-p3696be5_s4ui_c138.shm) failed
is there a bug fix for this>
--0000000000000d578605a9f0ccf2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><div class=3D"gmail-kiwi-messagelist-item" style=3D"overfl=
ow:hidden;color:rgb(34,35,31);font-family:&quot;Source Sans Pro&quot;,Helve=
tica,sans-serif;font-size:14.4px"><div class=3D"gmail-kiwi-messagelist-mess=
age gmail-kiwi-messagelist-message--modern gmail-kiwi-messagelist-message--=
authorfirst gmail-kiwi-messagelist-message-privmsg gmail-kiwi-messagelist-m=
essage--own" style=3D"padding:15px 10px;border-left:7px solid transparent;o=
verflow:hidden;line-height:1.5em;margin:0px;display:flex;border-top-width:1=
px;border-top-style:solid;background-color:rgb(247,247,247)"><div class=3D"=
gmail-kiwi-messagelist-modern-right" style=3D"margin-left:5px;padding-top:0=
px;width:1369.86px"><div class=3D"gmail-kiwi-messagelist-body" style=3D"min=
-height:0px;line-height:1.5em;font-size:1.05em;margin:0px;padding:0px;white=
-space:pre-wrap">Hi, I am getting the following error within apache</div><=
/div></div></div><div class=3D"gmail-kiwi-messagelist-item" style=3D"overfl=
ow:hidden;color:rgb(34,35,31);font-family:&quot;Source Sans Pro&quot;,Helve=
tica,sans-serif;font-size:14.4px"><div class=3D"gmail-kiwi-messagelist-mess=
age gmail-kiwi-messagelist-message--modern gmail-kiwi-messagelist-message--=
authorrepeat gmail-kiwi-messagelist-message-privmsg gmail-kiwi-messagelist-=
message--own" style=3D"padding:0px 10px 15px;border-left:7px solid transpar=
ent;overflow:hidden;line-height:1.5em;margin:0px;border-top:none;display:fl=
ex;background-color:rgb(247,247,247)"><div class=3D"gmail-kiwi-messagelist-=
modern-left" style=3D"display:flex;width:50px"></div><div class=3D"gmail-ki=
wi-messagelist-modern-right" style=3D"margin-left:5px;padding-top:0px;width=
:1369.86px"><div class=3D"gmail-kiwi-messagelist-body" style=3D"min-height:=
0px;line-height:1.5em;font-size:1.05em;margin:0px;padding:0px;white-space:p=
re-wrap">[Sat Jun 20 07:27:13.280938 2020] [:emerg] [pid 6535:tid 474356453=
17568] AH00020: Configuration Failed, exiting
[Sat Jun 20 07:27:13.280932 2020] [proxy_balancer:emerg] [pid 6535:tid 4743=
5645317568] (17)File exists: AH01185: worker slotmem_create failed
[Sat Jun 20 07:27:13.280858 2020] [slotmem_shm:error] [pid 6535:tid 4743564=
5317568] (17)File exists: AH02611: create: apr_shm_create(/var/log/apache/<=
a href=3D"http://s1.ariba.com/shm/slotmem-shm-p3696be5_s4ui_c138.shm">s1.ar=
iba.com/shm/slotmem-shm-p3696be5_s4ui_c138.shm</a>) failed</div></div></div=
></div><div class=3D"gmail-kiwi-messagelist-item" style=3D"overflow:hidden;=
color:rgb(34,35,31);font-family:&quot;Source Sans Pro&quot;,Helvetica,sans-=
serif;font-size:14.4px"><div class=3D"gmail-kiwi-messagelist-message gmail-=
kiwi-messagelist-message--modern gmail-kiwi-messagelist-message--authorrepe=
at gmail-kiwi-messagelist-message-privmsg gmail-kiwi-messagelist-message--o=
wn" style=3D"padding:0px 10px 15px;border-left:7px solid transparent;overfl=
ow:hidden;line-height:1.5em;margin:0px;border-top:none;display:flex;backgro=
und-color:rgb(247,247,247)"><div class=3D"gmail-kiwi-messagelist-modern-lef=
t" style=3D"display:flex;width:50px"></div><div class=3D"gmail-kiwi-message=
list-modern-right" style=3D"margin-left:5px;padding-top:0px;width:1369.86px=
"><div class=3D"gmail-kiwi-messagelist-body" style=3D"min-height:0px;line-h=
eight:1.5em;font-size:1.05em;margin:0px;padding:0px;white-space:pre-wrap">i=
s there a bug fix for this&gt; </div></div></div></div></div>
--0000000000000d578605a9f0ccf2--
From users-return-119682-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org Thu Jul 9 14:52:51 2020
Return-Path: <users-return-119682-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [207.244.88.153])
by minotaur.apache.org (Postfix) with SMTP id D4E40193A7
for <apmail-httpd-users-archive@www.apache.org>; Thu, 9 Jul 2020 14:52:50 +0000 (UTC)
Received: (qmail 93319 invoked by uid 500); 9 Jul 2020 14:52:44 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 93255 invoked by uid 500); 9 Jul 2020 14:52:44 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 93245 invoked by uid 99); 9 Jul 2020 14:52:44 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Jul 2020 14:52:44 +0000
Received: from localhost (localhost [127.0.0.1])
by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 567C71A44F4
for <users@httpd.apache.org>; Thu, 9 Jul 2020 14:52:43 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level:
X-Spam-Status: No, score=0.001 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
Authentication-Results: spamd2-us-west.apache.org (amavisd-new);
dkim=pass (2048-bit key)
header.d=christopherschultz-net.20150623.gappssmtp.com
Received: from mx1-he-de.apache.org ([10.40.0.8])
by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
with ESMTP id ZNMyndd6aDt1 for <users@httpd.apache.org>;
Thu, 9 Jul 2020 14:52:42 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::72f; helo=mail-qk1-x72f.google.com; envelope-from=chris@christopherschultz.net; receiver=<UNKNOWN>
Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f])
by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 60F7E7F67C
for <users@httpd.apache.org>; Thu, 9 Jul 2020 14:52:41 +0000 (UTC)
Received: by mail-qk1-x72f.google.com with SMTP id l6so2016461qkc.6
for <users@httpd.apache.org>; Thu, 09 Jul 2020 07:52:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=christopherschultz-net.20150623.gappssmtp.com; s=20150623;
h=to:from:autocrypt:subject:message-id:date:user-agent:mime-version
:content-language:content-transfer-encoding;
bh=1GkdXHKXnkekSqhTDDOWRKJ9e+Jx9mRl2nXDwjRiSZw=;
b=Zau/SPFiEKKQXbRPf8Sgv1X+TTIXbQu1gs4FifIbw6C9R/HL6/dHkbi2lcRRQ9EIt2
d/AyATcXISbUxhQZUvZ+vF/T0i3YY+NlsBuftBWYLcsTvWEleibGhzCkhR0SNujA/Y/i
XuneMom43HB8DxNHcjkoeCQfDEDo5wG0u7/r4TTzXx4DKc+zZMEMIyiFrFB+2wkcDDpN
KUNrS3N8+oeO5e484yxpOHst+flNVG6CoDZ7STTd6xDxJYkqWFyrnbLOfHpWvr9HZytD
bHLESzERy3p/CJmEtN2fFK8V1F12tzCDhtBLitpQRqqKk83U9rdjDjrxtG1NVzcrban7
zvAg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:to:from:autocrypt:subject:message-id:date
:user-agent:mime-version:content-language:content-transfer-encoding;
bh=1GkdXHKXnkekSqhTDDOWRKJ9e+Jx9mRl2nXDwjRiSZw=;
b=ETi6Q0lWGvEwQEijUKVkwazs3X8EYDaUXmcePa8DVhNCVGYfgX+F02Dsy1ExicXhIw
gU1VbLxdIsSIJB/vBORI553WuGWno4J4Pk8d0NGNR9afQZ/2swGJk80wBm9RIeMIK7Yx
Fz4Ybvn1hXFzEPRuo2PwqRJJvr6l2j1+k1Prkn+lFRSuiLy/6n7AzycZh66BJcdQKBsb
zakWDda0mzKZGZ4/zS3DcfXs9rlbzJ3yYpNKAcid2IoI1l7y9IoSygD0s3WMw7bGQO/9
N2Yzp1PoeufmdSKr0E8qxw81i7uvIceJLhA4oxbD9luw96gZ2WzIx4w9iWpQtQEgvsap
RDeg==
X-Gm-Message-State: AOAM532cKA4zPySOWHtQya+H6TKoIlZpNbFaqfLRHVm7Xc10g+gkczvG
8zJqsGdkpjC/eKswAlxFN1HFwEOgxss=
X-Google-Smtp-Source: ABdhPJzuW9VjOlM18uCsO6BTI40Q3khw/5KxvRNSsCcdClUYbpzQy2d72riK/6kHSo4ybMtTs9v1iA==
X-Received: by 2002:ae9:c010:: with SMTP id u16mr60546580qkk.37.1594306353867;
Thu, 09 Jul 2020 07:52:33 -0700 (PDT)
Received: from Christophers-MacBook-Pro-2.local (pool-108-48-175-111.washdc.fios.verizon.net. [108.48.175.111])
by smtp.gmail.com with ESMTPSA id f22sm5321092qko.89.2020.07.09.07.52.33
for <users@httpd.apache.org>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Thu, 09 Jul 2020 07:52:33 -0700 (PDT)
To: "users@httpd.apache.org" <users@httpd.apache.org>
From: Christopher Schultz <chris@christopherschultz.net>
Autocrypt: addr=chris@christopherschultz.net; keydata=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