You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Ivan Montoro <ep...@yahoo.co.uk> on 2003/07/05 20:23:04 UTC

[users@httpd] ExtFilterDefine mode=input

Hi!,

Maybe this is not the list I should send this
question, but I rather prefer to send it here and not
to "devel"

I'm using Apache 2.0.45 as proxy for my LAN, with
mod_clamav for antivirus inspection. Now I would like
to add some of the features of junkbuster or privoxy
(privacy, but mostly URL filtering) to my server, but
instead to chaining with another proxy I would like to
keep all as one piece...

As far as my poor english tells me, the best way is to
use a filter for the proxy directive, as clamav does.
I could also use ProxyBlock (bad ideas, as I have tons
of forbidden URL's) or Rewrite rules to redirect
forbidden URL's to a custom error page.

Taking the Filter method, I cannot use mod_ext_filter
to take incoming request, as they will be implemented
in the future. Does anybody know when this features
would be implemented? The idea of writing my own
filter is nice, but I'm quite bad C programmer :)

Any ideas or directions will be realy apreciated...

Thanks!

Ivan

________________________________________________________________________
Want to chat instantly with your online friends?  Get the FREE Yahoo!
Messenger http://uk.messenger.yahoo.com/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


[users@httpd] Timestamps in Logs

Posted by Mario Antonio <di...@webjogger.net>.
Dear List,

I got one concern with my apache log entries.
I have seen a couple of times that my logs do not follow a sequence on time.
As you can see in my logs, after 04/Jul/2003 entries, I got some entries
from 20/Jun/2003.

Besides of being hacked, what could it be another cause for such an odd
behaivor in the logs?

Regards

Mario

161.114.64.72 - - [01/Jul/2003:13:20:22 -0400] "GET /AMARILLO.GIF HTTP/1.0"
200 3898
161.114.64.72 - - [01/Jul/2003:13:20:22 -0400] "GET /LIBRE.GIF HTTP/1.0" 200
17119
65.29.192.19 - - [04/Jul/2003:07:43:08 -0400] "GET / HTTP/1.1" 200 1991
65.29.192.19 - - [04/Jul/2003:07:43:08 -0400] "GET /AMARILLO.GIF HTTP/1.1"
200 3898
209.88.204.4 - - [20/Jun/2003:11:44:41 -0400] "GET /LIBRE.GIF HTTP/1.0" 200
17119
66.156.149.21 - - [21/Jun/2003:11:47:44 -0400] "GET / HTTP/1.0" 200 1991
65.29.192.19 - - [04/Jul/2003:07:43:08 -0400] "GET /LIBRE.GIF HTTP/1.1" 200
17119
65.29.192.19 - - [04/Jul/2003:16:48:18 -0400] "GET /LIBRE.GIF HTTP/1.1" 200
17119
65.29.192.19 - - [05/Jul/2003:16:25:49 -0400] "GET / HTTP/1.1" 200 1991
65.29.192.19 - - [05/Jul/2003:16:25:49 -0400] "GET /AMARILLO.GIF HTTP/1.1"
200 3898

---
[This e-mail was scanned for viruses by Webjogger's AntiVirus Protection System]


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] ExtFilterDefine mode=input

Posted by Joshua Slive <jo...@slive.ca>.
On Sat, 5 Jul 2003, Ivan Montoro wrote:

>  --- Joshua Slive <jo...@slive.ca> wrote: >
> http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/filters/mod_ext_filter.c

> Thanks Joshua for the info. You're right this would be
> like returning to the CGI era. If I want to CVS this
> to check it out, should I only download
> mod_ext_filter.c or should I do a complete checkout?
> (remember I'm a "compiler", not a "programmer" ;)

I'd start by just trying to replace mod_ext_filter.c with the updated one.
I don't myself recall whether there are changes required elsewhere in the
source.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] ExtFilterDefine mode=input

Posted by Ivan Montoro <ep...@yahoo.co.uk>.
 --- Joshua Slive <jo...@slive.ca> wrote: > 
> On Sat, 5 Jul 2003, Ivan Montoro wrote:
> > Taking the Filter method, I cannot use
> mod_ext_filter
> > to take incoming request, as they will be
> implemented
> > in the future. Does anybody know when this
> features
> > would be implemented? The idea of writing my own
> > filter is nice, but I'm quite bad C programmer :)
> 
> mod_ext_filter has the ability to act as an input
> filter already committed
> in the 2.1 (development) version.  It will probably
> get back-ported to
> 2.0, but not before the next release.  You may be
> able to use the updated
> version of mod_ext_filter in an older apache, but I
> haven't checked to see
> if there are any other necessary changes.  See:
>
http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/filters/mod_ext_filter.c
> 
> Certainly mod_ext_filter isn't going to be the most
> efficient way to do
> this, since it will be like running a cgi script on
> every request.
> mod_rewrite or a custom-written module would be more
> efficient.
> 
> Joshua.
> 
Hi,

Thanks Joshua for the info. You're right this would be
like returning to the CGI era. If I want to CVS this
to check it out, should I only download
mod_ext_filter.c or should I do a complete checkout?
(remember I'm a "compiler", not a "programmer" ;)

This question goes to everybody: what do you think in
an InputFilter based on ICAP or something like that?
Delivering the responsability of parsing and checking
the HTTP headers to a TCP/UDP service would be easier
than builing all logic in an Apache filter... I'm
thinking in a sort of server running in a central
machine with it's own database/pool and returning "OK,
get that resource for that guy" or "nonono, return
this HTTP/HTML error to requesting machine" (of course
I would take one of our programmers into filter code
:P)

Ivan

________________________________________________________________________
Want to chat instantly with your online friends?  Get the FREE Yahoo!
Messenger http://uk.messenger.yahoo.com/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] ExtFilterDefine mode=input

Posted by Joshua Slive <jo...@slive.ca>.
On Sat, 5 Jul 2003, Ivan Montoro wrote:
> Taking the Filter method, I cannot use mod_ext_filter
> to take incoming request, as they will be implemented
> in the future. Does anybody know when this features
> would be implemented? The idea of writing my own
> filter is nice, but I'm quite bad C programmer :)

mod_ext_filter has the ability to act as an input filter already committed
in the 2.1 (development) version.  It will probably get back-ported to
2.0, but not before the next release.  You may be able to use the updated
version of mod_ext_filter in an older apache, but I haven't checked to see
if there are any other necessary changes.  See:
http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/filters/mod_ext_filter.c

Certainly mod_ext_filter isn't going to be the most efficient way to do
this, since it will be like running a cgi script on every request.
mod_rewrite or a custom-written module would be more efficient.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org