[Linux] Apache and security questions
Lawrence Kagan
linux@flux.org
Wed, 9 Jan 2008 07:44:08 -0500
--Apple-Mail-8-384632851
Content-Type: text/plain;
charset=US-ASCII;
format=flowed;
delsp=yes
Content-Transfer-Encoding: 7bit
Could be that you have the same ServerAlias for both Virtual Hosts.
On Jan 8, 2008, at 11:16 PM, Steven Benmosh wrote:
> Ok, by now you know I am trying to set up a new web site. I have two
> questions.
>
> 1. Here is my sites-available default file:
> ...
> default file that comes with the server
> ...
>
> <VirtualHost *>
> ServerAdmin admin@words2u.net
> ServerName www.words2u.net
> ServerAlias words2u.net
> DocumentRoot /home/words2u
> </VirtualHost>
>
> <VirtualHost *>
> ServerAdmin admin@words2u.net
> ServerName gpx.words2u.net
> ServerAlias words2u.net
> DocumentRoot /home/words2u/gpxwiki
> </VirtualHost>
>
> When I use www.words2u.net or words2u.net , I get the correct page.
> When I use the IP address, I get /var/www default page, as expected.
> But when I run gpx.words2u.net, I get an error message.
>
> Where am I going wrong? Do I have to run my own dns server to enable
> urls other than www.words2u.net and words2u.net?
>
> 2.Security
>
> What is the best way to isolate my net server from the other
> computers in my network, so if/when someone breaks in, the rest of
> the network is safe? Use firewall on each computer to block access
> to the web server? Any other idea?
>
> Thanks.
>
> Z.
>
> --
> Check out my web site - www.words2u.net
--Apple-Mail-8-384632851
Content-Type: text/html;
charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; ">Could be that you have the same =
ServerAlias for both Virtual Hosts.<div><br><div><div>On Jan 8, 2008, at =
11:16 PM, Steven Benmosh wrote:</div><br =
class=3D"Apple-interchange-newline"><blockquote type=3D"cite">Ok, by now =
you know I am trying to set up a new web site. I have two =
questions.<br><br>1. Here is my sites-available default =
file:<br>...<br>default file that comes with the =
server<br>...<br><br><VirtualHost =
*><br> ServerAdmin <a =
href=3D"mailto:admin@words2u.net">admin@words2u.net</a><br> &nb=
sp; ServerName <a =
href=3D"http://www.words2u.net">www.words2u.net</a><br> &=
nbsp; ServerAlias <a =
href=3D"http://words2u.net">words2u.net</a><br> &nb=
sp; DocumentRoot /home/words2u =
<br></VirtualHost><br><br><VirtualHost =
*><br> ServerAdmin <a =
href=3D"mailto:admin@words2u.net">admin@words2u.net</a><br> &nb=
sp; ServerName <a =
href=3D"http://gpx.words2u.net">gpx.words2u.net</a><br> &=
nbsp; ServerAlias <a =
href=3D"http://words2u.net">words2u.net</a><br> &nb=
sp; DocumentRoot =
/home/words2u/gpxwiki<br></VirtualHost><br><br>When I use <a =
href=3D"http://www.words2u.net">www.words2u.net</a> or <a =
href=3D"http://words2u.net">words2u.net </a>, I get the correct page. =
When I use the IP address, I get /var/www default page, as expected. But =
when I run <a href=3D"http://gpx.words2u.net">gpx.words2u.net</a>, I get =
an error message. <br><br>Where am I going wrong? Do I have to run my =
own dns server to enable urls other than <a =
href=3D"http://www.words2u.net">www.words2u.net</a> and <a =
href=3D"http://words2u.net">words2u.net</a>?<br><br>2.Security<br><br>What=
is the best way to isolate my net server from the other computers in my =
network, so if/when someone breaks in, the rest of the network is safe? =
Use firewall on each computer to block access to the web server? Any =
other idea? <br><br>Thanks.<br><br>Z.<br><br>-- <br>Check out my web =
site - <a =
href=3D"http://www.words2u.net">www.words2u.net</a></blockquote></div><br>=
</div></body></html>=
--Apple-Mail-8-384632851--