Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

log question

 
   Web Hosting and Web Master Forums (Home) -> Apache RSS
Next:  need advise: apache tree  
Author Message
r_buecheler

External


Since: Jun 26, 2003
Posts: 17



(Msg. 1) Posted: Tue Aug 26, 2003 2:23 pm
Post subject: log question
Archived from groups: alt>apache>configuration (more info?)

I have set up a log "environment" which sends different "stuff" into different logfiles:

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%h %l %u %t \"%r\" %s %>s %b \"%{worm}e\" \"%{Referer}i\" \"%{User-Agent}i\"" worm

# Worm calls are handled separately
# check for a worm call
<IfModule mod_setenvif.c>
SetEnv envlog log
SetEnvIf Request_URI "default\.ida" dontlog worm=CodeRed
SetEnvIf Request_URI "cmd\.exe" dontlog worm=Nimda,CodeRed
SetEnvIf Request_URI "shell\.exe" dontlog worm=Nimda,CodeRed,(Indy Library-back orifice?)
SetEnvIf Request_URI "root\.exe" dontlog worm=Nimda
SetEnvIf Request_URI "Admin\.dll" dontlog worm=Nimda
SetEnvIf Request_URI "nsiislog\.dll" dontlog worm=IIS vulnerability

SetEnvIf Request_URI "robots\.txt" dontlog

</IfModule>

ErrorLog logs/web1.error.log
CustomLog logs/web1.referrals.log combined
CustomLog logs/web1.access.log common env=!dontlog

<IfModule mod_setenvif.c>
SetEnvIf Request_URI "default\.ida" wormlog worm=CodeRed
SetEnvIf Request_URI "cmd\.exe" wormlog worm=Nimda,CodeRed
SetEnvIf Request_URI "shell\.exe" wormlog worm=Nimda,CodeRed,(Indy Library-back orifice?)
SetEnvIf Request_URI "root\.exe" wormlog worm=Nimda
SetEnvIf Request_URI "Admin\.dll" wormlog worm=Nimda
SetEnvIf Request_URI "nsiislog\.dll" wormlog worm=IIS vulnerability
SetEnvIf Request_URI "robots\.txt" robotlog
</IfModule>

CustomLog logs/peg_seti.robots.log combined env=robotlog
CustomLog logs/peg_seti.worm.log worm env=wormlog

Thus far everything works purrfectly, but now I added a "deny" to certain hosts.
I want to log them into a different logfile "logs/web1.denied.log" and keep them
from appearing in my "referrals" and "access" logs.

Is there a way to check the return-status 403 in httpd.conf?
something like
SetEnvIf return-status "403" denied

looking through the docs, I can't find anything helpful.


pointers or help are greatly appreciated.

--
Robi

 >> Stay informed about: log question 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
htaccess question - Hi, I'm quite new with Apache (1.3.27), so this might be a simple question. I want to restrict the access to a directory using htaccess. A user from the local net (192.168.xxx.xxx) should be able to access this directory without any login, any other user...

mod_rewrite question - I compiled Apache 2 with mod rewrite and i want to redirect all url's starting with www.server.mydomain.com to server.mydomain.com Can anyone help me with a regular expression for this task? tnx Thiadmer

mod_rewrite question - I have two domain names pointed to the same document root. www.domain1.com and www.domain2.com what I want to do is have www.domain2.com be rewrote/redirected to dom2.domain1.com. I have tried the following RewriteEngine On RewriteCond %{HTTP_HOST}..

Security Question??? - Hello all, I've recently installed Apache.(just a few days ago) Today I looked at my logs to find some unusual queries. I run SuSE Linux 8.2, Apache 2.0.4.7. #1---> ((( the hostname ))) - - [30/Jul/2003:11:50:52 -0500] "GET /default.ida?XXXXX...

mod rewrite question - I'm hoping I can get an answer to one of the 4 questions I've posted to this group over the last couple of months, so here goes. I'm serving XHTML files as application/xhtml+xml as they should be. But IE doesn't like this. What I wanted to do was us...
   Web Hosting and Web Master Forums (Home) -> Apache All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]