You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Steve Smith <St...@SilsLendir.com> on 2003/12/05 08:51:24 UTC
[users@httpd] Default home page other than index.html
If I've read the docs correctly I need to use DirectoryIndex to define the
order of files that will be searched for, to represent the home page on a
site. Hence if I had "DirectoryIndex a.html b.shtml" it would execute a.html
unless it wasn't found then it would try b.shtml.
However I still find the site loads index.html so what am I missing?
TIA Steve
Re: [users@httpd] error messeges in my log
Posted by Joshua Slive <jo...@slive.ca>.
On Fri, 5 Dec 2003, Patrick O'Neal wrote:
> I am running Apache 2.0.47 on RH9 I have been getting these error
> messages in my log for quite some time but I haven't been too concerned
> about it because they seem to have to do with MSIIS vulnerabilities but
> is that actually true, with the new found attacks on the gentoo.org and
> gnu.org servers lately I am re-investigating this to see if it needs
> addressing. Have any of you found this problem as well, and if so what
> did you do if anything to make it stop?
>
> I have included a paste of my log to show you what I am talking about.
>
> 68.55.245.17 - - [05/Dec/2003:12:13:30 -0600] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1012
None of the recent attacks were on HTTP server software. From what I've
read, they were through a sniffed password, a hole in rsyncd, and a linux
kernel flaw.
This doesn't mean, of course, that flaws in apache are not possible. But
your log clearly shows an IIS attack, so there is no need to worry.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] error messeges in my log
Posted by Patrick O'Neal <pa...@oneal.net>.
To all:
I am running Apache 2.0.47 on RH9 I have been getting these error
messages in my log for quite some time but I haven't been too concerned
about it because they seem to have to do with MSIIS vulnerabilities but
is that actually true, with the new found attacks on the gentoo.org and
gnu.org servers lately I am re-investigating this to see if it needs
addressing. Have any of you found this problem as well, and if so what
did you do if anything to make it stop?
I have included a paste of my log to show you what I am talking about.
68.55.245.17 - - [05/Dec/2003:12:13:30 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1012
68.55.245.17 - - [05/Dec/2003:12:13:30 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1012
68.55.245.17 - - [05/Dec/2003:12:13:30 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1012
68.55.245.17 - - [05/Dec/2003:12:13:30 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1012
68.55.245.17 - - [05/Dec/2003:12:13:30 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 945
68.55.245.17 - - [05/Dec/2003:12:13:31 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 945
68.55.245.17 - - [05/Dec/2003:12:13:31 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1012
68.55.245.17 - - [05/Dec/2003:12:13:31 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1012
I know that the users just get a 404 error but is that all?
--
Patrick O'Neal
IT GURU
Email: patrick@oneal.net
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[users@httpd] Is this normal?
Posted by Kent Healey <kh...@email.com>.
I am just learning the ropes of Apache and have yet to configure my
httpd.conf sucsesfully.
So after I installed Indigoperl with Apache 2.something on my Windows XP
home box, a german "Succsesfull install" page loaded. Thats is not my
question though.
So I swaped out that and put in another file and called it index.html and
that loaded correctly. Good.
Now I nowticed that both of my domains load. I have both of my DNSs pointed
to my same IP. And I haven't set up virtual hosting yet, (thats my next
step) but without any configuration will apache serve up your pages to any
domain that is pointed to your IP?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Default home page other than index.html
Posted by Robert Andersson <ro...@profundis.nu>.
Steve Smith wrote:
> > -----Original Message-----
> > Then check that there isn't a more specific DirectoryIndex directive
> > overriding it.
>
> There wasn't one, but I appreciated the example as I learnt something.
You seem to have some subtile problem here, so you need to troubleshoot. Try
to remove the DirectoryIndex directive(s), or remove the argument list(s).
This should cause Apache to not deliver a document, but a listing or
forbidden, when a directory is requested. If that checks out, try adding
your "a.html" file, and make sure that works, then add "b.shtml".
As we're not familiar with your setup it's hard to say, but sometimes people
have weird stuff going on (like redirecting) that obscures issues. Try to
get back to the basics.
Regards,
Robert Andersson
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] Default home page other than index.html
Posted by Steve Smith <St...@SilsLendir.com>.
> -----Original Message-----
> Then check that there isn't a more specific DirectoryIndex directive
> overriding it.
There wasn't one, but I appreciated the example as I learnt something.
>
> In a case like this:
>
> <VirtualHost *>
> DirectoryIndex a.html b.shtml
> DocumentRoot /path/to/somewhere
> </VirtualHost>
>
> <Directory /path/to/somewhere>
> DirectoryIndex index.html
> </Directory>
>
> The last DirectoryIndex would apply to the doc root of the virtual host,
> because it is more specific.
As above that was new to me :)
>
> I would suggest putting the GUI tool in the trash can, and edit the
> configuration by hand, and specify the directive in the doc root's
> <Directory> block instead, which is generally a better idea.
Yes I can see, the GUI really does have a mind of its own so consider it
scrapped.
>
> Regards,
> Robert Andersson
Many thanks
Steve
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Default home page other than index.html
Posted by Robert Andersson <ro...@profundis.nu>.
Steve Smith wrote:
> > b) is the DirectoryIndex directive placed in the correct context, so
> > it applies to the directory in question?
>
> It was placed in the <VirtualHost> context by the GUI configuration tool.
Then check that there isn't a more specific DirectoryIndex directive
overriding it.
In a case like this:
<VirtualHost *>
DirectoryIndex a.html b.shtml
DocumentRoot /path/to/somewhere
</VirtualHost>
<Directory /path/to/somewhere>
DirectoryIndex index.html
</Directory>
The last DirectoryIndex would apply to the doc root of the virtual host,
because it is more specific.
I would suggest putting the GUI tool in the trash can, and edit the
configuration by hand, and specify the directive in the doc root's
<Directory> block instead, which is generally a better idea.
Regards,
Robert Andersson
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] Default home page other than index.html
Posted by Steve Smith <St...@SilsLendir.com>.
> -----Original Message-----
> From: Robert Andersson [mailto:robert@profundis.nu]
> > If I've read the docs correctly I need to use DirectoryIndex to
> > define the order of files that will be searched for, to represent the
> > home page on a site. Hence if I had "DirectoryIndex a.html b.shtml"
> > it would execute a.html unless it wasn't found then it would
> try b.shtml.
> >
> > However I still find the site loads index.html so what am I missing?
>
> a) you shouldn't post HTML to the list ;)
Agreed sorry it was the last thing I needed to do but I pressed the send a
bit too early :)
> b) is the DirectoryIndex directive placed in the correct context, so it
> applies to the directory in question?
It was placed in the <VirtualHost> context by the GUI configuration tool.
> c) make sure the filename placed before "index.html" in the list
Agreed it is.
> d) make sure you haven't misspelled the filename. It must match exactly;
> "a.html" won't match "a.htm" for example.
Agreed it is spelt OK
>
> Regards,
> Robert Andersson
Thanks for responding so quickly Robert
Steve
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Default home page other than index.html
Posted by Robert Andersson <ro...@profundis.nu>.
Steve Smith wrote:
> If I've read the docs correctly I need to use DirectoryIndex to
> define the order of files that will be searched for, to represent the
> home page on a site. Hence if I had "DirectoryIndex a.html b.shtml"
> it would execute a.html unless it wasn't found then it would try b.shtml.
>
> However I still find the site loads index.html so what am I missing?
a) you shouldn't post HTML to the list ;)
b) is the DirectoryIndex directive placed in the correct context, so it
applies to the directory in question?
c) make sure the filename placed before "index.html" in the list
d) make sure you haven't misspelled the filename. It must match exactly;
"a.html" won't match "a.htm" for example.
Regards,
Robert Andersson
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org