When people visit my portal, I feel uneasy...

I do not know why they are doing in port 80 or 9090.
How do I know what they are doing ( browsing what)?
both port 80 is pointing to apache Solaris server and port 9090 is pointing to Linux 7.0 ( RH) ?


Is there a way to know what are they doing in httpd.conf setting?


This must be done real quick else they will deface me?


Jenny.

Check your Apche access log, not error log.

that they are browsing....etc. I have worked with Netscape entreprise server before. Can apache ( httpd.conf) be set with real time status reporting????




Thanks.


Jenny.

>> that they are browsing....etc

Yes, just check your access log before posting again. Your access log probably has far more info than what you expected.

>> Can apache ( httpd.conf) be set with real time status reporting????

Yes, but this is entirely a different story. There are ways too many www log analysing toos out there. Just to name a few: analog, webalizer, http-analyze and reportmagic.

<location /server-status>

.....

...

...


<location /server-info>




I declared Allow as 192.168.1.x after reading the text, then I gone through httpd.conf of rh 7.0 and began unmark certain. I got something when I did something like 192.168.1.x/server-status and refresh.

Now I can continue with solaris and continue my programming with php + mysql.

So no "master of internet in apache " can solve the .htaccess and .htpasswd problem ??????????????


where is the superman ?????




I wonder if I take away the allow from 192.168.1.x. I need to check the server status while I am away from office???

In the text explained, there is document root for server-status, it seem to be missing in httpd.conf----do not know how to use find in vi.

If I change "server-status" to "abc-status" , will it work????



Jenny.

>> I need to check the server status while I am away from office???

You can setup authentication if you don't have a static IP to be placed to the Allow from line.

>> there is document root for server-status

There really is no docroot for server-status. Instead, it's the uri path.

>> If I change "server-status" to "abc-status" , will it work????

You may change server-status within <Location> block but not the SetHandler line. That said, you can do this:
<Location "/private/path/to/status">
SetHandler server-status
Order deny,allow
Deny from all
Allow from your.static.ip.here or 192.168.0.0/24 for internal network
</Location>

>> solve the .htaccess and .htpasswd problem ?
>> where is the superman ?

Saying someone superman doesn't make one responsible to reply to your questions. I gave up on that thread because you haven't provided enough details. uFWjvligoOg36 worked fine for me. Keep in mind, there is no fixed salt substring, every system may vary.
If you still want me to continue that thread, please post more details like:
1) The output of ls -Al for /home, /home/jenny, /home/jenny/apache...and path to your .htpasswd
2) The real URL (no example) to your protected directory
3) System path to .htaccess
4) Full path of your docroot

Post followups to that thread.

I added Extendstatus on; it is much better!


I knew their IP address and what webpage they are reading.

Is it possible they are showing me a "false IP", is this they are
IP spoofing in hacker world.

New in linux,emails ....etc and just learn myself the stuff six month
I am a programmer working in office.
Jenny.