[B! apache] ihagã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ihag id:ihag

apacheã«é–¢ã™ã‚‹ihagã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Apacheã®è¨å®šã‚’å¤‰æ›´ã—ã€å˜ä¸€IPã‚¢ãƒ‰ãƒ¬ã‚¹ä¸Šã§è¤‡æ•°ã®SSLã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ - builder by ZDNet Japan
Apacheã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.2.12ä»¥é™ã§ã¯ã€SNIï¼ˆServer Name Indicationï¼‰ã¨ã„ã†ã€SSLãƒ—ãƒãƒˆã‚³ãƒ«ã«å¯¾ã™ã‚‹æ‹¡å¼µæ©Ÿèƒ½ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ãŸã‚ã€åå‰ãƒ™ãƒ¼ã‚¹ã®HTTPã‚µã‚¤ãƒˆã‚’è¨å®šã™ã‚‹å ´åˆã¨åŒã˜ã‚ˆã†ã«åå‰ãƒ™ãƒ¼ã‚¹ã®HTTPSã‚µã‚¤ãƒˆã‚’è¨å®šã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã£ã¦ã„ã‚‹ã€‚æœ¬è¨˜äº‹ã§ã¯ã€Apacheã®ã“ã®æ©Ÿèƒ½ã«ã¤ã„ã¦ç´¹ä»‹ã™ã‚‹ã€‚ Apache Webã‚µãƒ¼ãƒãŒãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã—ã€æˆç†Ÿã—ã¦ã„ãã«ä¼´ã„ã€æ–°æ©Ÿèƒ½ã®è¿½åŠ ã‚„ãƒã‚°ã®ä¿®æ£ãŒè¡Œã‚ã‚Œã¦ãã¦ã„ã‚‹ã€‚ãã—ã¦ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.2.12ã§è¿½åŠ ã•ã‚ŒãŸæ©Ÿèƒ½ã®ã†ã¡ã€æœ€ã‚‚é‡è¦ãªã‚‚ã®ã¯ãŠãã‚‰ãã€å˜ä¸€IPã‚¢ãƒ‰ãƒ¬ã‚¹ä¸Šã§è¤‡æ•°ã®SSLã‚µã‚¤ãƒˆã‚’é‹ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã¨ã„ã†ã€é•·ã‚‰ãæŒã¡æœ›ã¾ã‚Œã¦ã„ãŸæ©Ÿèƒ½ã ã‚ã†ã€‚ ã“ã‚Œã¾ã§ã¯ã€ç‰¹å®šã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã«å¯¾ã—ã¦SSLå¯¾å¿œã®Webã‚µã‚¤ãƒˆã‚’å‰²ã‚Šå½“ã¦ãŸå ´åˆã€ãã®ã‚µã‚¤ãƒˆ1ã¤ã—ã‹SSLå¯¾å¿œã®Webã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ã“ã¨ãŒã§ããªã‹ã£ãŸã€‚ã¤ã¾ã‚Šã€IPã‚¢ãƒ‰ãƒ¬
ihag 2009/10/26
SSLStrictSNIVHostCheck off

Apache
ãƒªãƒ³ã‚¯
URLã®ãƒ‘ã‚¹éƒ¨åˆ†ã«%2Fã‚’å«ã‚€æ™‚ã®æ‰±ã„ - ã¾ã©ãŽã‚BLOG
ãŠçŸ¥ã‚Šåˆã„ã®ãƒšãƒ¼ã‚¸ã‚’è¦‹ã¦åˆã‚ã¦çŸ¥ã£ãŸã®ã§ã™ãŒã€Apacheã¯æ¨™æº–ã§ã¯ãƒ‘ã‚¹éƒ¨åˆ†ã« %2F(/ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ãŸã‚‚ã®) ã‚’å«ã‚€URLã«å¯¾ã—ã¦404ã‚’è¿”ã™ãã†ã§ã™ã€‚ ã“ã®ã¾ã¾ã ã¨ã€æœ€è¿‘æµè¡Œã‚Š(?)ã® "/" ã§ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’åŒºåˆ‡ã‚‹å ´åˆã«ã€"/" è‡ªä½“ã‚’å€¤ã«å«ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã€‚ãã“ã§Apacheã®è¨å®šã§ã€AllowEncodedSlashes ã‚’ On ã«ã™ã‚‹ã¨ã€URLä¸ã« %2F ã‚‚ä½¿ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ã¨ã„ã†ã®ãŒãƒ¡ã‚¤ãƒ³ãªéƒ¨åˆ†ãªã®ã§ã™ãŒã€ãã®ä¸ã§ã€ ã¨ã“ã‚ã§ã€RFCã¨ã‹è¦å‰‡ä¸Šã£ã¦ã€ã€Œ/ã€ã‚’URL encodeã—ã¦ã€Œ%2Fã€ã«ã—ã¦ã‚‚è‰¯ã„ã®ã‹ï¼Ÿ ãã‚Œã¨ã‚‚ã—ã¦ã¯ã„ã‘ãªã„ã®ã‹ã€‚ã“ã‚ŒãŒã‚ˆãåˆ†ã‹ã‚‰ã‚“ã€‚ AllowEncodedSlashes ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã¯ã¾ã‚‹ã€‚ ã¨ã„ã†ç–‘å•ãŒæ›¸ã‹ã‚Œã¦ã„ãŸã®ã§ã€RFCã§ã©ã†ãªã£ã¦ã„ã‚‹ã®ã‹ã¡ã‚‡ã£ã¨ã ã‘èª¿ã¹ã¦ã¿ã¾ã—ãŸã€‚ 3.2.3 URI Comparison Char
ihag 2008/09/08
Apache

WebApp
ãƒªãƒ³ã‚¯
Apacheã§çµ±åˆWindowsèªè¨¼ã‚’ä½¿ã† - daily dayflower
å‰æ›¸ã çµ±åˆ Windows èªè¨¼ã¨ã¯ï¼Œãƒ‰ãƒ¡ã‚¤ãƒ³ã®èªè¨¼æƒ…å ±ã‚’ä½¿ã£ã¦ HTTP ã‚µãƒ¼ãƒã«èªè¨¼ã—ã¦ã‚‚ã‚‰ã†æ–¹å¼ã§ã™ã€‚Windows ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãƒ‰ãƒ¡ã‚¤ãƒ³ã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ã‚Œã°ï¼Œèªè¨¼ãƒ€ã‚¤ã‚¢ãƒã‚°ãŒå‡ºç¾ã™ã‚‹ã“ã¨ãªãè‡ªå‹•çš„ã«èªè¨¼ã•ã‚Œã¾ã™ã€‚çµ±åˆ Windows èªè¨¼ã«ã¯ä»¥ä¸‹ã®2é€šã‚ŠãŒã‚ã‚Šã¾ã™ã€‚ NTLM èªè¨¼ SPNEGO èªè¨¼ï¼ˆActive Directory ç’°å¢ƒä¸‹ï¼›ã™ãªã‚ã¡ Kerberos GSSAPI ã‚’åˆ©ç”¨ï¼‰ ä»Šå›žã¯ã‚ã‘ã‚ã£ã¦ NTLM èªè¨¼ã‚’æ‰±ã„ã¾ã™ã€‚ Apache on Unix*1 ã§ NTLM èªè¨¼ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã‚‚ã®ã«ã¯ï¼Œæœ‰åãªã‚‚ã®ã§ä»¥ä¸‹ã®ç‰©ãŒã‚ã‚Šã¾ã™ã€‚ mod_ntlm Unofficial mod_ntlm modification mod_auth_ntlm_winbind å‰è€… 2 ã¤ã¯ã»ã¼åŒã˜ã‚‚ã®ï¼ˆ2 ã¤ã‚ãŒæ”¹è‰¯ç‰ˆã§ Apache 2.2 ã«ã‚‚å¯¾å¿œã—ã¦ã„ã‚‹ï¼‰ã§ã™ãŒï¼Œå¾Œè€…ã® m
ihag 2008/04/08
apache

windows

linux

Authentication
ãƒªãƒ³ã‚¯
mod_js - Lightwieght server-side JavaScript for Apache
JavaScript Projects: JSTT (JavaScript Template Toolkit) A more fully featured Template system than Trimpath Note:This project was never actively developed, and was only a toy. If you want something like this but actively developed, I suggest looking at Flusspferd or one of the projects from CommonJS. What? Are you mad? Yes, we quite probably are. But not as mad as some people. mod_js is a standalo
ihag 2008/01/31
Apache

WebApp

mod_js
ãƒªãƒ³ã‚¯
PPT: Bucket Brigades: Data Management for Apache 2.0 - so what
http://www.cs.virginia.edu/~jcw5q/talks/apache/bucketbrigades.ac2002.ppt
ihag 2008/01/31
Apache
ãƒªãƒ³ã‚¯
mod_securityæ—¥æœ¬èªž,å’Œè¨³ãƒžãƒ‹ãƒ¥ã‚¢ãƒ«
Introduction ModSecurityã¯ã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ä¾µå…¥æ¤œå‡ºãŠã‚ˆã³ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ç”¨é˜²æ¢ã‚¨ãƒ³ã‚¸ãƒ³ã§ã™ã€‚ãã‚Œã¯ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã¸åŸ‹ã‚è¾¼ã¾ã‚Œã¦å‹•ä½œã—ã¾ã™ã€‚å¼· åŠ›ãªå‚˜ã®ã‚ˆã†ã«æŒ¯èˆžã„-ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æ”»æ’ƒã‹ã‚‰é®æ–ã—ã¾ã™ã€‚ModSecurityã¯WEBã‚µãƒ¼ãƒãƒ¼ã¸ã®WEBæ”»æ’ƒã®å‡¦ç†èƒ½åŠ›ã‚’å¢—åŠ ã—çµ±åˆã—ã¾ã™ã€‚ è¨€åŠã™ã‚‹ä¾¡å€¤ãŒã‚ã‚‹ãã®ç‰¹å¾´ã¯æ¬¡ã®ã¨ãŠã‚Šã§ã™: Request filtering; å—ä¿¡ã¨å…±ã«ã€ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒãƒ¼ã‚ã‚‹ã„ã¯ä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã‚ˆã£ã¦æ‰±ã‚ã‚Œã‚‹å‰ã«ã€å…¥ã£ã¦æ¥ ãŸ ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒåˆ†æžã•ã‚Œã¾ã™ã€‚ Anti-evasion techniques;åˆ†æžãŒå›žé¿ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã¨æˆ¦ã†å‰ã«ã€ãƒ‘ã‚¹ã¨ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãŒæ¨™æº–åŒ–ã•ã‚Œã¾ã™ã€‚ Understanding of the HTTP protocol; ã‚¨ãƒ³ã‚¸ãƒ³ã¯HTTPã‚’ç†è§£ã—ã¾ã™ã€‚éžå¸¸ã«ç‰¹æœ‰ãªãã‚ç´°ã‹ã„ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã‚’å®Ÿè¡Œã—ã¾ã™ã€‚ã€€ POST
ihag 2008/01/17
apache

mod_security

WAF

WebApp
ãƒªãƒ³ã‚¯
ModSecurity (mod_security) - Open Source Web Application Firewall
The 1st Line of DefenseModSecurity is an open source, cross-platform web application firewall (WAF) module. Known as the â€œSwiss Army Knifeâ€ of WAFs, it enables web application defenders to gain visibility into HTTP(S) traffic and provides a power rules language and API to implement advanced protections. Get latest v2: 2.9.7 Get latest v3: 3.0.12 The most widespread open source WAFUsed by businesse
ihag 2007/08/21
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«

WebApp

security

WAF

Apache

mod_security
ãƒªãƒ³ã‚¯
1