[Linux] Apache and security questions

Lawrence Kagan linux@flux.org
Wed, 9 Jan 2008 07:44:08 -0500


--Apple-Mail-8-384632851
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: 7bit

Could be that you have the same ServerAlias for both Virtual Hosts.

On Jan 8, 2008, at 11:16 PM, Steven Benmosh wrote:

> Ok, by now you know I am trying to set up a new web site. I have two  
> questions.
>
> 1. Here is my sites-available default file:
> ...
> default file that comes with the server
> ...
>
> <VirtualHost *>
>         ServerAdmin admin@words2u.net
>         ServerName www.words2u.net
>         ServerAlias words2u.net
>         DocumentRoot /home/words2u
> </VirtualHost>
>
> <VirtualHost *>
>         ServerAdmin admin@words2u.net
>         ServerName gpx.words2u.net
>         ServerAlias words2u.net
>         DocumentRoot /home/words2u/gpxwiki
> </VirtualHost>
>
> When I use www.words2u.net or words2u.net , I get the correct page.  
> When I use the IP address, I get /var/www default page, as expected.  
> But when I run gpx.words2u.net, I get an error message.
>
> Where am I going wrong? Do I have to run my own dns server to enable  
> urls other than www.words2u.net and words2u.net?
>
> 2.Security
>
> What is the best way to isolate my net server from the other  
> computers in my network, so if/when someone breaks in, the rest of  
> the network is safe? Use firewall on each computer to block access  
> to the web server? Any other idea?
>
> Thanks.
>
> Z.
>
> -- 
> Check out my web site - www.words2u.net


--Apple-Mail-8-384632851
Content-Type: text/html;
	charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; ">Could be that you have the same =
ServerAlias for both Virtual Hosts.<div><br><div><div>On Jan 8, 2008, at =
11:16 PM, Steven Benmosh wrote:</div><br =
class=3D"Apple-interchange-newline"><blockquote type=3D"cite">Ok, by now =
you know I am trying to set up a new web site. I have two =
questions.<br><br>1. Here is my sites-available default =
file:<br>...<br>default file that comes with the =
server<br>...<br><br>&lt;VirtualHost =
*&gt;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ServerAdmin <a =
href=3D"mailto:admin@words2u.net">admin@words2u.net</a><br>&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp; ServerName <a =
href=3D"http://www.words2u.net">www.words2u.net</a><br>&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp; ServerAlias <a =
href=3D"http://words2u.net">words2u.net</a><br>&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp; DocumentRoot /home/words2u =
<br>&lt;/VirtualHost&gt;<br><br>&lt;VirtualHost =
*&gt;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ServerAdmin <a =
href=3D"mailto:admin@words2u.net">admin@words2u.net</a><br>&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp; ServerName <a =
href=3D"http://gpx.words2u.net">gpx.words2u.net</a><br>&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp; ServerAlias <a =
href=3D"http://words2u.net">words2u.net</a><br>&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp; DocumentRoot =
/home/words2u/gpxwiki<br>&lt;/VirtualHost&gt;<br><br>When I use <a =
href=3D"http://www.words2u.net">www.words2u.net</a> or <a =
href=3D"http://words2u.net">words2u.net </a>, I get the correct page. =
When I use the IP address, I get /var/www default page, as expected. But =
when I run <a href=3D"http://gpx.words2u.net">gpx.words2u.net</a>, I get =
an error message. <br><br>Where am I going wrong? Do I have to run my =
own dns server to enable urls other than <a =
href=3D"http://www.words2u.net">www.words2u.net</a> and <a =
href=3D"http://words2u.net">words2u.net</a>?<br><br>2.Security<br><br>What=
 is the best way to isolate my net server from the other computers in my =
network, so if/when someone breaks in, the rest of the network is safe? =
Use firewall on each computer to block access to the web server? Any =
other idea? <br><br>Thanks.<br><br>Z.<br><br>-- <br>Check out my web =
site - <a =
href=3D"http://www.words2u.net">www.words2u.net</a></blockquote></div><br>=
</div></body></html>=

--Apple-Mail-8-384632851--