Im currently serving a web in apache2; no problems I recently set up squid to filter internet for my LAN users.
***i dont want squid to accelerate WEB requests in my apache2.
So the problem is that SQUID blocks my 192.168.1. LAN denied attemps, so far, its ok BUT IT ALSO BLOCKS ANY OF THE INTERNET USERS TRYING TO REACH MY HOSTED WEB.
Can i have both servers in the same box without interferring each other?
I have a server running both apache2 (default port) and squid (3128 port) I set an squid ACL so my LAN 192.168.1.0 gets filtered. ok all works fine except for external web petitions. When i try to access my web server from the outside, using my public ip, i get a SQUID DENIED. i guess that is because in squid ACL's there is something like: http_access all deny at the end of the file. How can i allow external petitions to my web?
View 4 Replies View RelatedI have suse10 64 bit installed. I am setting up a svn server on it. After installation and adding the modules ,while reloading the apache2 it's throwing the error as: HTML Code: httpd2-prefork: Syntax error on line 113 of /etc/apache2/httpd.conf: Syntax error on line 31 of /etc/apache2/sysconfig.d/loadmodule.conf: Cannot load /usr/lib64/apache2/mod_dav_svn.so into server: /usr/lib64/libsvn_subr-1.so.0: undefined symbol: apr_memcache_add_server
View 9 Replies View RelatedI am getting this error
Starting web server: apache2[Wed Dec 09 15:36:40 2009] [warn] NameVirtualHost XX.XX.XX.XXX:80 has no VirtualHosts(99)Cannot assign requested address: make_sock: could not bind to address 68.178.232.100:80
no listening sockets available, shutting down Unable to open logs failed!
also what is 68.178.232.100
My squid server works fine in fedora 11 system . Is there any web like interface for admins to create,change,modify users of squid and to view their logs.
View 1 Replies View RelatedI would like to ask some help and tutorial for setting up and how to configure squid proxy server in my (Home PC Server). I am a newbie in Linux Centos. I already installed in my system the CentOS 5.5 . Now, I want to configure it as my internet server, all of my 4 system running in Windows including the laptop I want to connect through my CentOS pc with username authentication. I assign all IP address by static. see tthe attachement in my set up. [url] I just want to know what I need to change and add in my squid config file. And how can I configure properly my CentOS with 2 LAN card as internet server.
View 1 Replies View Relatedwhat distro do you recomend to use creat a server to filter and cacheall internet activity?
this is for a cybercafe each pc will have some restritions others not
We have a CentOS server which has beed restarted due to some reason. Now we have ping to the server and we can reboot it via KVM, but the server loads to some messaageThis is filter.unknown_domain (Linux ...)Filter Login:and then it stops. Do you have an idea what might be the problem and how can we fix it?
View 2 Replies View RelatedWe use powerpath on RHEL servers, with at least 2 paths to each disk, as you know the powerpath creates a pseudo devices called emcpowerX. I was wondering if there is any overhead if we don't use the lvm.conf to filter out all sdX disks? Except the "duplicate PV found" messages on LVM, does it delays the boot of the server?
View 1 Replies View RelatedI have a very simple set up.With Network Manager I can have my laptop act as a router (sharing all connections).I also have apt-cacher-ng as a debian package cacher.I would like to set up iptables to filter only the urls that are meant for a debian package cacher.
For example:I could use a "forward all" rule:
Code:
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3142
Except then I would get a bunch of error pages every time I tried to do normal navigating.My question (again) is: Can iptables handle forwarding only on a specific url? If so how?Or is there another solution? (prferably without full fledged software like squid)
Where I work, the IT people have the systems setup (wrongly in my opinion) to require not just the user's username but to have the username pre-pended with regional info. Like this:Username: RegionName//UserNamePassword: ********The server I maintain doesn't require this (even though I have it authenticate through the same services as the rest of IT (active directory via ldap))The problem is I see lots of authentication errors in my apache error_log file because people are using the RegionName//UserName login
View 1 Replies View RelatedI'm trying to set up an mail filter for our domain. At the moment we're using ClearOS as the filter, works OK but I still get something through and the blacklist and whitelist doesn't seem to work. I was hoping to set up a mail filter on my own, using Spamassassin and/or something else. It seems I have to buy subscription at ClearOS to make it update better or something. I might just do that, it's just tempting to find a way to do it on "my own". I tried to follow these instructions but I don't seem to go anywhere... ...I began with setting up the base server as it is shown there. I've setup quite a few Linux servers, mainly as firewall/gateway kind of things but also some DNS servers, web servers and so on.
I have one mail server and the mail filter is supposed to be on the outside to filter mail before it hits the mail server.
I've got two files. They both contain package names. Is there any way I can go through the package list on one file, and search to see if each package exists in the other file? What I'd want to do, is if the package name is found in the the main file, then go to the next line. If its not found then print that package name to another file.
I know you can use diff, but it doesn't seem to be that straight forward. As I understand it diff searches line by line, so if line one doesn't match line one in another file, then it prints it out. That's not exactly what I want.
I just really need an easy way to filter out the additional packages that exist on a new server. If I have a list of packages that aren't on the original server, then i can just delete them.
Not sure if I've made any sense but there must be a quicker way to do what i need to. It would take me ages to scan manually through the package names in each list, and highlight the ones i dont need.
I want a mail server that can work just like MDaemon. The reason is, I want to have an email content filter rule that does some thing like this.
1. If the To Header contains "support@thisdomain" then run a program.
What this means is that, there is a program here in the office, and if some one sends an email to the support address, with an attachment of .exe and that person is a customer, then the program should be run. The only thing I need here is if there is a rule or script that can filter email header and run a program.
2. If the Exit Code from a previous 'Run program' rule is in the range of 1 to 100 and if the To Header contains "support@thisdomain" then send note1 "to<email address>" from <$SENDER$" "SUBJECT <AM ...>
and delete this message.
3. If the EXIT CODE from a previous 'Run program' rule is =0 and if the TO HEADER contains "support@thisdomain" then send note1 "to<email address>" from <$SENDER$" "SUBJECT <AM ...>
and delete this message.
I have a setup of squid3 with ntlm authen and I use squidGuard 1.5 to filter my web traffic. My squid3 is authenticating users properly and parsing all rules. The problem is with squidguard which doesn't seem to filter out users. below is my squidguard config.
Code:
dbhome /usr/local/squidGuard/db
logdir /usr/local/squidGuard/log
[code]....
Using Debian Lenny I'm getting the following message in my mail: /etc/cron.daily/logrotate:
Quote:
apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
I am new comer in this forum and the beginner on freeBsdI have a problem on how to implement the spam filter program on mail server, the problem is i have no idea on how to implement and test the spam filter program on the mail server and where should i put the program? is it in pop3?
View 3 Replies View RelatedPlease what will it take me to write a perl full functioning program to filter emails for specific rules? Will that be possible? The actual thing am trying to get is to write a perl program and attach to a mail server so that, when the mails come in, the perl script get call and then the perl program will let another external program that is not on the server run and check or filter the mails.
View 8 Replies View RelatedIm trying to get postfix to filter my outgoing mail and basically drop everything that is not in my hash table.
So far I managed to get this going
Code:
Code:
Unfortunately those rules also apply to incoming messages. My goal is to disallow users on my host to change their "MAIL FROM" to anything they like and restrict them to domains I specify. I'm aware that the local part still is variable and a user of domain "foo.com" could use a email of domain "bar.com", but still some of my troubles would be solved if I get this running.
I've been looking for a way to filter out emails on my postfix server by GeoIP data. I couldn't find anything that fitted the bill so wrote my own in Python as a postfix policy. Thought I'd post it here to see if it's of any use to anyone else. I've attached a tar of the files as the Python formatting will get mucked up by the forum code. Comments/improvements are welcome (be kind ) First file is : policyd-geoip which is owned by root:root and placed in /usr/bin with 755 perms
[Code]...
I want to filter and block failed attempt to access my proftp server. Here are few line from the /var/log/secure file:Quote:
Jan 2 18:38:25 server1 proftpd[17847]: server1.XYZ.com (93.218.93.95[93.218.93.95]) - Maximum login attempts (3) exceeded
Jan 2 18:38:27 server1 proftpd[17864]: server1.XYZ.com (93.218.93.95[93.218.93.95]) -
[code]....
We have MS Exchange email server with postfix/amavis on FreeBSD as proxy for anti-spam and anti-virus. We use our own developed CRM and trying to implement such functionality that when CRM manager send email to CRM client or vice versa through email client like Outlook (no plugins for CRM) this message would be shown in CRM. There is already a solution to parse emails from specific emailbox and show it in CRM.
What I need is to create postfix email filter to check if sender email is in file CRM_managers_emails and recipient email is in file CRM_clients_emails then forward that email to [URL] Filter should check both incoming and outgoing messages. I will auto generate CRM_managers_emails and CRM_clients_email files containing all such emails taken from CRM database. I know i should use something like Postfix After-Queue Content Filter but most of examples are for blocking emails.
I followed this How To (https://help.ubuntu.com/community/Postfix) in order to add smtp authentication to my Postfix installation used as spam filter for my exhange server, and it'seem all ok; the only thing that I don't understand is where I list all the users (with passwords) that I authorize to send mail through my server...
View 3 Replies View RelatedFilter access server through the net only to authenticated users from domain controller (Win2k). Server (Centos)(Firewall with 2 nic), which makes access to the net, with only 196MB RAM (PIII500Mhz), so I do not want a solution based on proxy or what resources it uses large I want a solution with a script that runs at login on windows this check series HDD and to communicate with Linux server that's open accessor another simple solutionNow just use only MAC filtering on
View 1 Replies View RelatedHere is my query:
Squid document says that Squid accepts only HTTP requests but speaks FTP on the server side when FTP object are requested.
We call Squid HTTP and FTP caching proxy server. Does it also caches FTP contents? Is it possible to configure FTP clients to use Squid cache? When we make an FTP request to an FTP site via Squid will it be bypassed?
I'm running 10.04 with Apache2/PHP5.x I wanted to test some basic cgi scripts, but my browser is displaying the code (#!...) If I run the scripts on the console, they work fine so CGI is not the problem, it's apache. To install the CGI module I ran sudo apt-get install libapache2-mod-perl2 with no problems. By the way, I installed Apache through apt-get instead of doing it manually, but it seems that the installation divides the conf file in different parts, so the regular apache2.conf has this:
Code:
# Include module configuration:
Include /etc/apache2/mods-enabled/*.load
Include /etc/apache2/mods-enabled/*.conf
# Include all the user configurations:
Include /etc/apache2/httpd.conf
# Include ports listing
Include /etc/apache2/ports.conf
[Code]....
I can't figure out what I need to do to get CGI working on my server.
I seem to be having a problem with mod_proxy and https websites. A simple connection to port 80 works fine but all calls to 443 fail.
I had a look at my firewall but can't see anything that would block port 443, although I get no tcpdump traffic on that port on the deb01 client when I try and connect to it. I disabled the firewall but still no luck.
My configuration consists of 3 VMs (KVM) each running a different website.
I get the following error when connecting to ssl deb01
Code: An error occurred during a connection to deb03.example.com.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)
The following is what can be found on the host
Code:
I am having some problems after installing apache2-mpm-itk on my Debian 5.4 server. From my understanding apache2-mpm-itk will run child processes as root until a http request is received. It then suid's to the username in the VirtualHost directive. This is all working fine, as I can see a few apache processes started by a specific user.
However, the problem is when I try to restart apache. It will kill all the processes running by root but wont kill any of the processes that have been suid'ed to another username.
When i attempt to restart I get this error:
Code:
charged:/etc/apache2# /etc/init.d/apache2 restart
Restarting web server: apache2 ... waiting (98)Address already in use: make_sock: could not bind to address [::]:80
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:80
[Code]....
If I do a "ps aux | grep apache" before and after I see all the root processes killed, but processes running as specified users from VritualHost directive remaining.
Now I am not an extreme linux power user, but I know a bit.
I downloaded grails [URL]... and installed it. Created a sample application hello world. It was running successfully. In browser [URL].. I was able to see grails running. Now comes the problem. To be able to always start the grails application running after boot I wrote a script in /etc/init.d/software_grails its contents are
[code]...
I have to open command prompt and go to /root/helloworld and then execute grails run-app. you dont have to write the name of application to run it. logging of boot messages is enabled /etc/default/bootlogd BOOTLOGD_ENABLE=Yes. then I opened /var/log/boot.
[code]...
But it does not work. If I am not wrong then above method will work ONLY WHEN some one Logs in not on boot time. Is there a way where I can embed grails in apache2 they [URL]... have not mentioned any thing about apache2 to deploy my applications.
I would like to ask how can I optimize apache2 load on my dedicated server. I am hosting Facebook applications on it, but most users will get a Timed Out message when they try to access it. I was tinkering with MaxClients directive in apache2 config, and it got better, but still it's not best. Programmers are trying their best to optimize the applications at their side, but I am afraid this is an server issue.
View 2 Replies View Related