RE: [LP8.6/Win] bloated apache error logs [solved]

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

RE: [LP8.6/Win] bloated apache error logs [solved]

Jon Harris
Hi Jason

Yes!!  Thanks, that has fixed it.

No public access to .inc files and no errors in the log files.

Regards
Jon




-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf Of Jason Huck
Sent: 03 March 2015 11:09
To: Lasso Talk
Subject: Re: [LP8.6/Win] bloated apache error logs

I don't recall who sorted this out originally, but we've had this in our vhost configurations for years. Seems to do the trick.

# disallow direct serving of .inc files
# this method should avoid cluttering up apache's # error logs with subrequests.
# -------------------------------------------------------------------
RewriteCond %{REQUEST_URI}  ^.*\.inc$  [NC] RewriteRule (.*)  - [L,NS,F]


(Of course, for this to work, you need to have mod_rewrite loaded and enabled with "RewriteEngine On".)

- jason



On Tue, Mar 3, 2015 at 5:46 AM, Jon Harris <[hidden email]>
wrote:

> Hi Mark
>
> Thanks. If I can't fix it -  I was actually considering just turning
> off the error logging.
>
> I was going to investigate associating the .inc files with Lasso, at
> least Apache won't serve them as .txt files, although I'm not sure
> what referencing footer.inc, etc will do.
>
> It's an odd problem. I have checked using the FF "tamper data" plug-in
> and there are no 404 errors for undelivered files, so why does apache
> think an error has occurred?
>
> If I find anything out, I'll post something back.
>
> Regards
> Jon
>
>
>
>
> -----Original Message-----
> From: [hidden email] [mailto:
> [hidden email]] On Behalf Of Mark Palmer
> Sent: 03 March 2015 10:10
> To: [hidden email]
> Subject: Re: [LP8.6/Win] bloated apache error logs
>
> You can just turn off logging, may not be a great idea but it's an option.
>
> In httpd.conf comment out
>
> #CustomLog logs/access_log common
> #ErrorLog logs/error_log
>
> Regards
>
> Mark Palmer
> E: [hidden email]
> T: 01902 620500 and 01285 610035
> W: www.pageworks.co.uk
> On 3 Mar 2015, at 8:08, Jon Harris wrote:
>
> > Hi List
> >
> > I noticed that my Apache error.log  is  getting pretty huge. Its
> > generating errors like this:
> >
> > [Tue Mar 03 07:55:01 2015] [error] [client 192.168.100.102] client
> > denied by server configuration:
> > C:/inetpub/wwwroot/site1/SiteSettings.inc
> >
> > This error is caused by simple includes and library commands:
> >
> > library('/sitesettings.inc') ;
> >
> > For security, I don't want apache to directly serve include files,
> > but clearly we need them to make the sites work.
> >
> > The odd thing is that the include (and library) commands are
> > actually working fine, the only issue is the error.log.
> >
> > In my httpd.conf file I have this block:
> >
> > <Files *.inc>
> > Order allow,deny
> > Deny from all
> > </Files>
> >
> > Should I remove this block and add .inc to the list of lasso
> > extensions?
> >
> > This is the block for Lasso:
> >
> > <Location ~ "^.*\.[Ll][Aa][Ss][Ss][Oo]$">
> >       SetHandler lasso8-handler
> > </Location>
> >
> > What is best practice on this?
> >
> > Any pointers appreciated.
> >
> > Jon Harris
> >
> >
> >
> > #############################################################
> >
> > This message is sent to you because you are subscribed to the
> > mailing list Lasso [hidden email] Official list archives
> > available at http://www.lassotalk.com To unsubscribe, E-mail to:
> > <[hidden email]>
> > Send administrative queries to  <[hidden email]>
>
> #############################################################
>
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email] Official list
> archives available at http://www.lassotalk.com To unsubscribe, E-mail
> to: < [hidden email]>
> Send administrative queries to  <[hidden email]>
>
> #############################################################
>
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email] Official list
> archives available at http://www.lassotalk.com To unsubscribe, E-mail
> to: <[hidden email]>
> Send administrative queries to  <[hidden email]>
>

#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email] Official list archives available at http://www.lassotalk.com To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>

#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

RE: [LP8.6/Win] bloated apache error logs [solved]

stevepiercy
"When in doubt, credit Bil."  :D
http://lasso.2283332.n4.nabble.com/Apache-config-tp3149220p3149227.html

--steve


On 3/3/15 at 12:01 PM, [hidden email] (Jon Harris) pronounced:

> Hi Jason
>
> Yes!!  Thanks, that has fixed it.
>
> No public access to .inc files and no errors in the log files.
>
> Regards
> Jon
>
>
>
>
> -----Original Message-----
> From: [hidden email] [mailto:[hidden email]] On
> Behalf Of Jason Huck
> Sent: 03 March 2015 11:09
> To: Lasso Talk
> Subject: Re: [LP8.6/Win] bloated apache error logs
>
> I don't recall who sorted this out originally, but we've had this in our vhost
> configurations for years. Seems to do the trick.
>
> # disallow direct serving of .inc files
> # this method should avoid cluttering up apache's # error logs with subrequests.
> # -------------------------------------------------------------------
> RewriteCond %{REQUEST_URI}  ^.*\.inc$  [NC] RewriteRule (.*)  - [L,NS,F]
>
>
> (Of course, for this to work, you need to have mod_rewrite loaded and enabled with
> "RewriteEngine On".)
>
> - jason
>
>
>
> On Tue, Mar 3, 2015 at 5:46 AM, Jon Harris <[hidden email]>
> wrote:
>
> > Hi Mark
> >
> > Thanks. If I can't fix it -  I was actually considering just turning
> > off the error logging.
> >
> > I was going to investigate associating the .inc files with Lasso, at
> > least Apache won't serve them as .txt files, although I'm not sure
> > what referencing footer.inc, etc will do.
> >
> > It's an odd problem. I have checked using the FF "tamper data" plug-in
> > and there are no 404 errors for undelivered files, so why does apache
> > think an error has occurred?
> >
> > If I find anything out, I'll post something back.
> >
> > Regards
> > Jon
> >
> >
> >
> >
> > -----Original Message-----
> > From: [hidden email] [mailto:
> > [hidden email]] On Behalf Of Mark Palmer
> > Sent: 03 March 2015 10:10
> > To: [hidden email]
> > Subject: Re: [LP8.6/Win] bloated apache error logs
> >
> > You can just turn off logging, may not be a great idea but it's an option.
> >
> > In httpd.conf comment out
> >
> > #CustomLog logs/access_log common
> > #ErrorLog logs/error_log
> >
> > Regards
> >
> > Mark Palmer
> > E: [hidden email]
> > T: 01902 620500 and 01285 610035
> > W: www.pageworks.co.uk
> > On 3 Mar 2015, at 8:08, Jon Harris wrote:
> >
> > > Hi List
> > >
> > > I noticed that my Apache error.log  is  getting pretty huge. Its
> > > generating errors like this:
> > >
> > > [Tue Mar 03 07:55:01 2015] [error] [client 192.168.100.102] client
> > > denied by server configuration:
> > > C:/inetpub/wwwroot/site1/SiteSettings.inc
> > >
> > > This error is caused by simple includes and library commands:
> > >
> > > library('/sitesettings.inc') ;
> > >
> > > For security, I don't want apache to directly serve include files,
> > > but clearly we need them to make the sites work.
> > >
> > > The odd thing is that the include (and library) commands are
> > > actually working fine, the only issue is the error.log.
> > >
> > > In my httpd.conf file I have this block:
> > >
> > > <Files *.inc>
> > > Order allow,deny
> > > Deny from all
> > > </Files>
> > >
> > > Should I remove this block and add .inc to the list of lasso
> > > extensions?
> > >
> > > This is the block for Lasso:
> > >
> > > <Location ~ "^.*\.[Ll][Aa][Ss][Ss][Oo]$">
> > >       SetHandler lasso8-handler
> > > </Location>
> > >
> > > What is best practice on this?
> > >
> > > Any pointers appreciated.
> > >
> > > Jon Harris
> > >
> > >
> > >
> > > #############################################################
> > >
> > > This message is sent to you because you are subscribed to the
> > > mailing list Lasso [hidden email] Official list archives
> > > available at http://www.lassotalk.com To unsubscribe, E-mail to:
> > > <[hidden email]>
> > > Send administrative queries to  <[hidden email]>
> >
> > #############################################################
> >
> > This message is sent to you because you are subscribed to
> >   the mailing list Lasso [hidden email] Official list
> > archives available at http://www.lassotalk.com To unsubscribe, E-mail
> > to: < [hidden email]>
> > Send administrative queries to  <[hidden email]>
> >
> > #############################################################
> >
> > This message is sent to you because you are subscribed to
> >   the mailing list Lasso [hidden email] Official list
> > archives available at http://www.lassotalk.com To unsubscribe, E-mail
> > to: <[hidden email]>
> > Send administrative queries to  <[hidden email]>
> >
>
> #############################################################
>
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email] Official list archives available at
> http://www.lassotalk.com To unsubscribe, E-mail to:
> <[hidden email]>
> Send administrative queries to  <[hidden email]>
>
> #############################################################
>
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Steve Piercy              Website Builder              Soquel, CA
<[hidden email]>               <http://www.StevePiercy.com/>


#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: [LP8.6/Win] bloated apache error logs [solved]

Bil Corry-3
Let's just say I've been around this block a few times.


- Bil

On Tue, Mar 3, 2015 at 1:17 PM, Steve Piercy - Website Builder <
[hidden email]> wrote:

> "When in doubt, credit Bil."  :D
> http://lasso.2283332.n4.nabble.com/Apache-config-tp3149220p3149227.html
>
> --steve
>
>
> On 3/3/15 at 12:01 PM, [hidden email] (Jon Harris) pronounced:
>
> > Hi Jason
> >
> > Yes!!  Thanks, that has fixed it.
> >
> > No public access to .inc files and no errors in the log files.
> >
> > Regards
> > Jon
> >
> >
> >
> >
> > -----Original Message-----
> > From: [hidden email] [mailto:
> [hidden email]] On
> > Behalf Of Jason Huck
> > Sent: 03 March 2015 11:09
> > To: Lasso Talk
> > Subject: Re: [LP8.6/Win] bloated apache error logs
> >
> > I don't recall who sorted this out originally, but we've had this in our
> vhost
> > configurations for years. Seems to do the trick.
> >
> > # disallow direct serving of .inc files
> > # this method should avoid cluttering up apache's # error logs with
> subrequests.
> > # -------------------------------------------------------------------
> > RewriteCond %{REQUEST_URI}  ^.*\.inc$  [NC] RewriteRule (.*)  - [L,NS,F]
> >
> >
> > (Of course, for this to work, you need to have mod_rewrite loaded and
> enabled with
> > "RewriteEngine On".)
> >
> > - jason
> >
> >
> >
> > On Tue, Mar 3, 2015 at 5:46 AM, Jon Harris <[hidden email]>
> > wrote:
> >
> > > Hi Mark
> > >
> > > Thanks. If I can't fix it -  I was actually considering just turning
> > > off the error logging.
> > >
> > > I was going to investigate associating the .inc files with Lasso, at
> > > least Apache won't serve them as .txt files, although I'm not sure
> > > what referencing footer.inc, etc will do.
> > >
> > > It's an odd problem. I have checked using the FF "tamper data" plug-in
> > > and there are no 404 errors for undelivered files, so why does apache
> > > think an error has occurred?
> > >
> > > If I find anything out, I'll post something back.
> > >
> > > Regards
> > > Jon
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: [hidden email] [mailto:
> > > [hidden email]] On Behalf Of Mark Palmer
> > > Sent: 03 March 2015 10:10
> > > To: [hidden email]
> > > Subject: Re: [LP8.6/Win] bloated apache error logs
> > >
> > > You can just turn off logging, may not be a great idea but it's an
> option.
> > >
> > > In httpd.conf comment out
> > >
> > > #CustomLog logs/access_log common
> > > #ErrorLog logs/error_log
> > >
> > > Regards
> > >
> > > Mark Palmer
> > > E: [hidden email]
> > > T: 01902 620500 and 01285 610035
> > > W: www.pageworks.co.uk
> > > On 3 Mar 2015, at 8:08, Jon Harris wrote:
> > >
> > > > Hi List
> > > >
> > > > I noticed that my Apache error.log  is  getting pretty huge. Its
> > > > generating errors like this:
> > > >
> > > > [Tue Mar 03 07:55:01 2015] [error] [client 192.168.100.102] client
> > > > denied by server configuration:
> > > > C:/inetpub/wwwroot/site1/SiteSettings.inc
> > > >
> > > > This error is caused by simple includes and library commands:
> > > >
> > > > library('/sitesettings.inc') ;
> > > >
> > > > For security, I don't want apache to directly serve include files,
> > > > but clearly we need them to make the sites work.
> > > >
> > > > The odd thing is that the include (and library) commands are
> > > > actually working fine, the only issue is the error.log.
> > > >
> > > > In my httpd.conf file I have this block:
> > > >
> > > > <Files *.inc>
> > > > Order allow,deny
> > > > Deny from all
> > > > </Files>
> > > >
> > > > Should I remove this block and add .inc to the list of lasso
> > > > extensions?
> > > >
> > > > This is the block for Lasso:
> > > >
> > > > <Location ~ "^.*\.[Ll][Aa][Ss][Ss][Oo]$">
> > > >       SetHandler lasso8-handler
> > > > </Location>
> > > >
> > > > What is best practice on this?
> > > >
> > > > Any pointers appreciated.
> > > >
> > > > Jon Harris
> > > >
> > > >
> > > >
> > > > #############################################################
> > > >
> > > > This message is sent to you because you are subscribed to the
> > > > mailing list Lasso [hidden email] Official list archives
> > > > available at http://www.lassotalk.com To unsubscribe, E-mail to:
> > > > <[hidden email]>
> > > > Send administrative queries to  <[hidden email]>
> > >
> > > #############################################################
> > >
> > > This message is sent to you because you are subscribed to
> > >   the mailing list Lasso [hidden email] Official list
> > > archives available at http://www.lassotalk.com To unsubscribe, E-mail
> > > to: < [hidden email]>
> > > Send administrative queries to  <[hidden email]>
> > >
> > > #############################################################
> > >
> > > This message is sent to you because you are subscribed to
> > >   the mailing list Lasso [hidden email] Official list
> > > archives available at http://www.lassotalk.com To unsubscribe, E-mail
> > > to: <[hidden email]>
> > > Send administrative queries to  <[hidden email]>
> > >
> >
> > #############################################################
> >
> > This message is sent to you because you are subscribed to
> >   the mailing list Lasso [hidden email] Official list
> archives available at
> > http://www.lassotalk.com To unsubscribe, E-mail to:
> > <[hidden email]>
> > Send administrative queries to  <[hidden email]>
> >
> > #############################################################
> >
> > This message is sent to you because you are subscribed to
> >   the mailing list Lasso [hidden email]
> > Official list archives available at http://www.lassotalk.com
> > To unsubscribe, E-mail to: <[hidden email]>
> > Send administrative queries to  <[hidden email]>
>
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> Steve Piercy              Website Builder              Soquel, CA
> <[hidden email]>               <http://www.StevePiercy.com/>
>
>
> #############################################################
>
> This message is sent to you because you are subscribed to
>   the mailing list Lasso [hidden email]
> Official list archives available at http://www.lassotalk.com
> To unsubscribe, E-mail to: <[hidden email]>
> Send administrative queries to  <[hidden email]>
>

#############################################################

This message is sent to you because you are subscribed to
  the mailing list Lasso [hidden email]
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>