[B! apache] shoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sho id:sho

apacheã«é–¢ã™ã‚‹shoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (11)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

nginxã§ã‚‚apacheã§ã‚‚ä½¿ãˆã‚‹DoSçš„ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ¤œçŸ¥ã—ã¦ä»»æ„ã®åˆ¶å¾¡ã‚’ã™ã‚‹Webã‚µãƒ¼ãƒæ‹¡å¼µã‚’mrubyã§ä½œã£ãŸ - äººé–“ã¨ã‚¦ã‚§ãƒ–ã®æœªæ¥
github.com ä¼šç¤¾ã®é‹ç”¨ãƒ¡ãƒ³ãƒãƒ¼ã¨è‰²ã€…è°è«–ã—ã¦ã„ãŸä¸ã§ã€ã€Œã‚«ã‚¸ãƒ¥ã‚¢ãƒ«ã«Webã‚µãƒ¼ãƒã¸ã®DoSã¿ãŸã„ãªã‚¢ã‚¯ã‚»ã‚¹ãŒæ¥ãŸæ™‚ã«æ¤œçŸ¥ã—ã¦åˆ¶å¾¡ã—ãŸã„ã‚ˆããƒ¼ã€ã¨ã„ã†è©±ãŒä¸ŠãŒã£ãŸã®ã§ã€http-dos-detectorã¨ã„ã†nginxã§ã‚‚apacheã§ã‚‚ä½¿ãˆã‚‹Webã‚µãƒ¼ãƒæ‹¡å¼µã‚’mrubyã§æ›¸ãã¾ã—ãŸã€‚ ã‚‚ã¡ã‚ã‚“mrubyãªã®ã§ã€mod_mrubyã¨ngx_mrubyã‚’ä½¿ã£ã¦ã„ã¾ã™ã€‚ã®ã§ã€Rubyã‚³ãƒ¼ãƒ‰ã¯ãã®ã¾ã¾åŒã˜ã‚³ãƒ¼ãƒ‰ã‚’ã©ã¡ã‚‰ã®ãƒŸãƒ‰ãƒ«ã‚¦ã‚§ã‚¢ã§ã‚‚ä½¿ãˆã¾ã™ã€‚mod_mrubyã¨ngx_mrubyã‚’ä½¿ãˆã°ã€ã¡ã‚‡ã£ã¨ã—ãŸWebã‚µãƒ¼ãƒã®æ‹¡å¼µã¯ä¸¡æ–¹ã§åŒã˜å®Ÿè£…ã«è½ã¨ã—è¾¼ã‚ã‚‹ã®ã§ä¾¿åˆ©ã§ã™ãã€‚ ä½¿ã„æ–¹ ä¾‹ã®å¦‚ãã€GitHubã®READMEé€šã‚Šã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ä¸‹ã•ã„ã€‚Rubyã®ã‚³ãƒ¼ãƒ‰ã¯mod_mrubyã§ã‚‚ngx_mrubyã§ã‚‚æœ‰åŠ¹ãªã®ã§ã€ãã®ã‚³ãƒ¼ãƒ‰ã‚’èªã¿è¾¼ã‚€è¨å®šã‚’ãã‚Œãžã‚Œä»¥ä¸‹ã®ã‚ˆã†ã«è¨˜è¿°ã™ã‚‹ã ã‘ã§ã‚ˆã„ã§ã™ã€‚ a
sho 2015/06/09
mrubyã®é©ç”¨åˆ†é‡ŽãŒ(ã„ã‚ã‚†ã‚‹)çµ„è¾¼ã¿ã‹ã‚‰ã ã„ã¶ãšã‚Œã¦ãã¦ã‚‹ã®é¢ç™½ã„ã¨æ€ã†

mruby

nginx

apache
ãƒªãƒ³ã‚¯
ãƒãƒªãƒãƒƒãƒ—ã®ã‚µã‚¤ãƒˆæ”¹ã–ã‚“äº‹ä»¶ã«å¦ã¶ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯æ”»æ’ƒã®è„…å¨ã¨å¯¾ç–
æ—¢ã«å ±é“ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã«ã€ãƒãƒªãƒãƒƒãƒ—ï¼ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹æ”¹ã–ã‚“æ”»æ’ƒã«ã‚ˆã‚Šã€è¢«å®³ã‚’å—ã‘ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼æ•°ã¯8428ä»¶ã«ã®ã¼ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ã“ã“ã¾ã§å½±éŸ¿ãŒå¤§ãããªã£ãŸåŽŸå› ã¯ã€å ±é“ã«ã‚ˆã‚‹ã¨ã€(1)ã€ŒWordPressã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã‚„ãƒ†ãƒ¼ãƒžã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã€ã—ã€ä¸æ£ãªãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸã€(2)ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³è¨å®šã®ä¸å‚™ã‚’æ‚ªç”¨ã•ã‚Œã¦è¢«å®³ãŒæ‹¡å¤§ã—ãŸã€ã¨ã„ã†ã“ã¨ã®ã‚ˆã†ã§ã™ã€‚ 29æ—¥å¤œã®æ™‚ç‚¹ã§ã¯ã€æ”»æ’ƒè€…ã®æ”¹ã–ã‚“æ‰‹æ³•ã«ã¤ã„ã¦ã€ŒWordPressã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã‚„ãƒ†ãƒ¼ãƒžã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã€ã—ã€ä¸æ£ãªãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ã€Œwp-config.phpã®ã€ã®è¨å®šæƒ…å ±ãŒæŠœãå‡ºã•ã‚ŒãŸã¨èª¬æ˜Žã—ã¦ã„ãŸãŒã€30æ—¥åˆå¾Œ7æ™‚éŽãŽã®èª¬æ˜Žã§ã€ã“ã®è„†å¼±æ€§ãŒä¾µå…¥çµŒè·¯ã¨ãªã£ã¦åŒç¤¾ã®ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³è¨å®šã®ä¸å‚™ã‚’æ‚ªç”¨ã•ã‚ŒãŸã“ã¨ãŒåŽŸå› ã ã£ãŸã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ ã€Œãƒãƒªãƒãƒƒãƒ—ã€ã®WordPressã‚µã‚¤ãƒˆæ”¹ã–ã‚“è¢«å®³ã€åŽŸå› ã¯ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³è¨å®šä¸å‚™
sho 2013/09/02
ã™ã°ã‚‰ã—ãã‚ã‹ã‚Šã‚„ã™ã„

security

apache

symlink
ãƒªãƒ³ã‚¯
Hardening Your Web Serverâ€™s SSL Ciphers
There are many wordy articles on configuring your web serverâ€™s TLS ciphers. This is not one of them. Instead, I will share a configuration that scores a straight â€œAâ€ on Qualysâ€™s SSL Server Test in 2023. Disclaimer: Iâ€™m updating this post continually to represent what I consider the best practice at the moment â€“ there are way too many dangerously outdated articles about TLS-deployment out there alr
sho 2013/02/13
Webã‚µãƒ¼ãƒã®SSLè¨å®šã¾ã¨ã‚

security

ssl

apache

nginx
ãƒªãƒ³ã‚¯
http://www.machu.jp/posts/20090726/p01/
sho 2009/07/28
ã™ã’ãƒ¼ã€‚

amazon

apache
ãƒªãƒ³ã‚¯
void GraphicWizardsLair( void ); // wwwæŠœãã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’wwwä»˜ãã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹httpd.conf
sho 2008/06/17
apache

redirect
ãƒªãƒ³ã‚¯
IE6 ã§ Digest èªè¨¼ã‚’åˆ©ç”¨ã™ã‚‹ã¨ã‚¨ãƒ©ãƒ¼ã«ãªã‚‹ - SmallStyle(2008-03-28)
_ IE6 ã§ Digest èªè¨¼ã‚’åˆ©ç”¨ã™ã‚‹ã¨ã‚¨ãƒ©ãƒ¼ã«ãªã‚‹ æ™®æ®µã¯ Firefox ã‚’åˆ©ç”¨ã—ã¦ã„ã¦ IE ã‚’ä½¿ã†æ©Ÿä¼šã¯ã•ã»ã©ãªã„ã®ã§ã™ãŒï¼Œä»Šæ—¥ï¼ŒIE6 ã§ tDiary ã®ç®¡ç†ç”»é¢ã‚’é–‹ã„ãŸã‚‰ï¼Œ""HTTP 400 - æ£ã—ããªã„è¦æ±‚""ã¨ã‹ã§ã¦è¡¨ç¤ºã§ããªã„ï¼Žãªã‚“ã ã‚ã†ã¨ãƒã‚°ã‚’è¦‹ã‚‹ã¨ï¼Œä»¥ä¸‹ã®ãƒã‚°ãŒï¼Ž [Thu Mar 28 00:00:00 2008] [error] [client 192.168.0.10] Digest: uri mismatch - </update.rb> does not match request-uri </update.rb?conf=default>, referer: http://www.smallstyle.com/update.rb ã“ã‚Œï¼ŒIE6 ã®ãƒã‚°ãªã‚“ã§ã™ãï¼Žä»Šã¾ã§ã¾ã£ãŸãçŸ¥ã‚Šã¾ã›ã‚“ã§ã—ãŸï¼Žã§ï¼Œã“ã‚Œã‚’å›žé¿ã™ã‚‹ã«ã¯ä»¥ä¸‹ã‚’ï¼Œhttpd.conf
sho 2008/03/29
å‰ã«ã‚‚clipã—ãŸã‚ˆã†ãªæ°—ãŒã™ã‚‹ãªâ€¦â€¦

apache

digest
ãƒªãƒ³ã‚¯
AddDefaultCharset(core - Apache HTTP ã‚µãƒ¼ãƒ)
This directive enables operating system specific optimizations for a listening socket by the Protocol type. The basic premise is for the kernel to not send a socket to the server process until either data is received or an entire HTTP Request is buffered. Only FreeBSD's Accept Filters, Linux's more primitive TCP_DEFER_ACCEPT, and Windows' optimized AcceptEx() are currently supported. Using none fo
sho 2008/02/25
ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒœãƒ‡ã‚£ã‚µã‚¤ã‚ºã«åˆ¶é™ã‚’åŠ ãˆã‚‹LimitRequestBodyãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–

apache
ãƒªãƒ³ã‚¯
HTTP ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’ä½œã£ã¦ã¿ã‚ˆã†(6) - Digest èªè¨¼ç·¨ -
Digest èªè¨¼ (ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆèªè¨¼) å‰ãƒšãƒ¼ã‚¸ã§ã¯ Basic èªè¨¼ã‚’ç´¹ä»‹ã—ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã§å•é¡ŒãŒã‚ã‚‹ã“ã¨ã‚’ç¤ºã—ã¾ã—ãŸã€‚ ãã®æ¬ ç‚¹ã‚’è§£æ¶ˆã—ãŸã®ãŒ Digest èªè¨¼ã§ã™ã€‚ ä»¥ä¸‹ã® URL ã§ã¯ Digest èªè¨¼ã‚’è¡Œã£ã¦ã„ã¾ã™ã€‚ ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰æ“ä½œã™ã‚‹åˆ†ã«ã¯ Basic èªè¨¼ã¨åŒºåˆ¥ãŒä»˜ã‹ãªã„ã§ã—ã‚‡ã†ãŒã€ èªè¨¼ã®ä»•çµ„ã¿ã¯ã¡ã‚‡ã£ã¨è¤‡é›‘ã«ãªã£ã¦ã„ã¾ã™ã€‚ãã®ã‹ã‚ã‚Šã€ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã‚’æµã‚Œã‚‹ãƒ‘ã‚±ãƒƒãƒˆã‚’è¦—ãè¦‹ã‚‰ã‚Œã¦ã‚‚ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒã°ã‚Œã‚‹ã“ã¨ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ä»¥ä¸‹ã€ä»•çµ„ã¿ã‚’ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ ã€Œãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã€ã®æ„å‘³ãŒã‚ˆãã‚ã‹ã‚‰ãªã‘ã‚Œã°ã€æš—å·åŒ–ã®ãŠè©± (3) ã‚’å‚ç…§ã—ã¦ãã ã•ã„ (ã€Œãƒãƒƒã‚·ãƒ¥ã€ã¨ã€Œãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã€ã¯åŒã˜ã‚‚ã®ã¨è€ƒãˆã¦ãã ã•ã„)ã€‚ ã¾ãšã€ã‚ã‚‰ã‹ã˜ã‚ã‚µãƒ¼ãƒå´ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã® MD5 ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã‚’ä¿å˜ã—ã¦ãŠãã¾ã™ (ãƒ¦ãƒ¼ã‚¶ç™»éŒ²ã«ç›¸å½“)ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒ Digest
sho 2007/12/20
>ã“ã‚Œã¯ IE ã®ãƒã‚°ã§ã™ãŒã€ã„ã¤ã¾ã§ãŸã£ã¦ã‚‚ä¿®æ£ã•ã‚Œãªã„ã®ã§ã€ Apache-2.0.51 ã‹ã‚‰ã‚µãƒ¼ãƒå´ã§ç„¡ç†çŸ¢ç†å¯¾å¿œã™ã‚‹ä»•çµ„ã¿ãŒè¨ã‘ã‚‰ã‚Œã¾ã—ãŸã€‚

auth

digest

apache

ie6
ãƒªãƒ³ã‚¯
Htaccess File Sample - AskApache
An attempt to create a default skeleton .htaccess file with the very best apache htaccess examples... Updated semi-frequently based on detailed info from the Apache htaccess tutorial. NOTE: Check out and use the Google 404 Error Page. Sample Htaccess File If you see any room for improvement, or if you can add something than go ahead and comment and I will definately give it a look for possible inc
sho 2007/09/01
apache

.htaccess
ãƒªãƒ³ã‚¯
livedoor Techãƒ–ãƒã‚° : DB(MySQL)ã‚’ãƒ•ã‚¡ã‚¤ãƒ«ã‚·ã‚¹ãƒ†ãƒ ã®ã‹ã‚ã‚Šã«ã™ã‚‹ Apache ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«
ã“ã‚“ã«ã¡ã¯æ± é‚‰ã§ã™ã€‚ ä»Šå›žã¯å®Ÿé¨“çš„ãªApacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’å…¬é–‹ã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ã€‚ ã©ã†ã„ã†äº‹ã‚’ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‹ã¨ã„ã†ã¨ã€ã‚ã‚‰ã‚†ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’ MySQL ã«å…¥ã‚Œã¦ãŠãã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚·ã‚¹ãƒ†ãƒ ã®ã‹ã‚ã‚Šã«ä½¿ã£ã¦ã—ã¾ã†ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã™ã€‚ ä»¥ä¸‹ã®ã‚ˆã†ãªãƒ†ãƒ¼ãƒ–ãƒ«ã‚’ç”¨æ„ã—ã¾ã™ã€‚ CREATE TABLE vfs ( id INT UNSIGNED NOT NULL PRIMARY KEY AUTO_INCREMENT, path CHAR(100) NOT NULL, type CHAR(32) DEFAULT 'text/plain' NOT NULL, content MEDIUMBLOB, created_on DATETIME NOT NULL, updated_on TIMESTAMP, UNIQUE KEY(path) ) ENGINE=InnoDB; Apache ã® httpd.conf
sho 2007/08/14
apache

mysql

filesystem
ãƒªãƒ³ã‚¯
ãŸã£ãŸ2è¡Œã§ã§ãã‚‹Webã‚µãƒ¼ãƒé˜²å¾¡ã®ã€Œå¿ƒç†æˆ¦ã€ âˆ’ ï¼ IT
é«˜ã„å£ã‚’ä½œã‚‹ã ã‘ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ãªã„ã€‚æ”»æ’ƒè€…ã®å¿ƒç†ã‚’è€ƒãˆã€å½¼ã‚‰ã«é¸ã°ã‚Œãªã„ã‚·ã‚¹ãƒ†ãƒ ä½œã‚Šã‚‚å¤§ããªåŠ¹æžœãŒæœ›ã‚ã‚‹ã®ã§ã¯ãªã„ã ã‚ã†ã‹ã€‚æœ¬é€£è¼‰ã§ã¯è¦–ç‚¹ã‚’å¤‰ãˆã€æ”»æ’ƒè€…ã«é¸ã°ã‚Œãªã„ãŸã‚ã«ã§ãã‚‹ã€ã»ã‚“ã®ã¡ã‚‡ã£ã¨ã—ãŸå¯¾ç–ã‚’å–ã‚Šä¸Šã’ã‚‹ã€‚ï¼ˆç·¨é›†éƒ¨ï¼‰ å¯¾ç–ã‚’ã‚‚ã†ä¸€æ©é€²ã‚ã‚‹ãŸã‚ã®æ–°ãŸãªè¦–ç‚¹ã‚’æŒã¨ã† ã‚·ã‚¹ãƒ†ãƒ ã¯å‹•ãã ã‘ã§ã¯ãªãã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãŒãªã•ã‚Œã¦ã„ãªã‘ã‚Œã°ã„ã‘ãªã„ã¨ã„ã‚ã‚Œå§‹ã‚ã¦ä¹…ã—ã„ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ã„ã†è¨€è‘‰ã‚’èžãã¨ã€ç‰©ç†çš„ãªã‚‚ã®ã ã‘ã§ã¯ãªãã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’é€£æƒ³ã™ã‚‹ã»ã©ã®èªçŸ¥åº¦ã‚‚å¾—ã¦ã„ã‚‹ã®ã§ã¯ãªã„ã ã‚ã†ã‹ã€‚ å€‹äººå®…ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç’°å¢ƒã«ã‚‚ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«æ©Ÿèƒ½ã‚’æè¼‰ã—ãŸãƒ«ãƒ¼ã‚¿ãŒã‚ã‚Šã€PC1å°1å°ã«ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚½ãƒ•ãƒˆãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã€‚ã„ã¾ã¨ãªã£ã¦ã¯çã—ããªãã€ã‚€ã—ã‚å½“ãŸã‚Šå‰ã¨ã‚‚æ€ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚ ä¸€æ–¹ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«å˜åœ¨ã™ã‚‹è„…å¨ã¨ã„ã†ã¨ã€ã‚¦ã‚¤ãƒ«ã‚¹ã€ãƒ¯ãƒ¼ãƒ ã€ãƒœãƒƒãƒˆã€ã‚µã‚¤ãƒˆã®æ”¹ã–ã‚“ã€å€‹äººæƒ…å ±
sho 2007/07/20
ãˆãƒ¼ã€ã„ã¾ã©ããƒãƒŠãƒ¼éš ã—ãƒã‚¿!?

security

apache

banner
ãƒªãƒ³ã‚¯
1