403 errors when setting up Apache

Hello,


I'm trying to set up a backup webserver which has an IP visible to the outside world mapped to an interal IP by our router. We're having problems configuring the httpd.conf, specifically virtual hosts.

what's odd is that the default DocumentRoot displays fine whenever we try to view it from the server itself but not anywhere else, and only when we use 127.0.0.1 or localhost. if we use the internal IP (192.168.28.25) we get a 403 forbidden error.

similarly, any virtual hosts we set up get the same error. we have another server running apache and i've set up the virtual hosts exactly the same but no luck. could anyone recommend a few things that i should check that might be causing this nearly constant 403 error?

if you like, i'll post my httpd.conf file. thanks.

Yeah putting httpd.conf would help.

JD

P.S. : let me know when your hp is ready. its cool.

>> if you like, i'll post my httpd.conf file

Don't post it, attach it instead.

More than likely it's a router configuration problem. And when you test it, don't use IE.

here's the file, zipped, since it wouldn't let me attach the regular file.

What OS+dist are you running?
Your httpd.conf looks pretty ugly. At least 20 lines are misconfigured. In addition, files and dirs are all over the places. You should start it over from scratch and give FreeBSD a try, just to make your life easier.

1) ServerRoot /etc/httpd/ -> ServerRoot "/etc/httpd"

2) Uncomment the following lines:
#ServerName architect
#Listen *:80
#ScoreBoardFile /var/run/httpd.scoreboard #UserDir public_html
#IndexOptions FancyIndexing (don't define twice)

3) KeepAlive false -> KeepAlive on
There is no such option as false.

4) UseCanonicalName on -> UseCanonicalName off

5) TypesConfig /etc/mime.types
Your files are all over the places.

6) You don't need to define ScriptAlias /cgi-bin/ "/var/www/cgi-bin/" twice.
Additionally, a scriptalias'ed cgi-bin doesn't need any option. So change Options ExecCGI to Options None.

7) If php3+php4 coexist, don't put .php3 in x-httpd-php:

<IfModule mod_php4.c>
AddType application/x-httpd-php .php4 .php3 .phtml .php

Remove .php3

8) # The following is for PHP/FI (PHP2):

You don't need to redefine that.

9) mod_perl is not CGI, therefore you don't need Options +ExecCGI

10) Right above the line <IfDefine HAVE_SSL>, you left out NameVirtualHost *. Additionally, ssl's vhost should have lowest <VirtualHost> priority. You need to move it to the last <VirtualHost>.

11) You don't need Listen 443

12) You don't need this:

# Virtual host quinlanco_com
<VirtualHost >
ServerSignature email
</VirtualHost>

13) Just use <VirtualHost *>, not <VirtualHost 192.168.28.80>.

14) DocumentRoot /home/httpd/websites/hexoloy_com/web

Quote the path at all time.
You also need a <Directory> for that path.

15) Order first, then allow/deny

Allow from from all
Order Deny,Allow

change the line order. Additionally, you have two froms, you just need one.

16) Remove ExecCGI

<Directory "/var/www/cgi-bin">
Options ExecCGI -> Options None

thanks for the input.

i'm running Red Hat 7.1. a lot of these configuration options were untouched - ie, that was the default httpd.conf that was created after the default install.

i'll let you know how i make out.

>> these configuration options were untouched

That's why. Like I always said, Redhat people don't really have a clue what Apache is. In fact, they might be strong in marketing but definitely don't have any clue about any technical stuffs. To put it simple, Redhat sucks and is the worst Linux distribution. So why waste your time on this shi_tty Linux distribution?

Don't get me wrong, I'm not trying to put you Linux people down. BSD users are not always smarter. We are smarter because we made the right decision for using BSD.