Uncategorized

Recent package updates are making me nervous (Snort and Mod_Security)

A few weeks ago, I saw that snort needs to update to 2.8.4.1 (up from 2.6.1.3-r1), but with this update, it no longer has support for snortsam. This sucks! I posted a thread about this on the Gentoo forums, but no response yet. Because of this I’m not updating my production boxes, that use snortsam… Continue reading Recent package updates are making me nervous (Snort and Mod_Security)

Uncategorized

Potential DNS DDoS (query (cache) ‘./NS/IN’ denied)

I started getting a ton of these in my DNS logs a few days ago: Jan 19 05:33:47 comp named[4488]: client 76.9.31.42#55056: query (cache) './NS/IN' denied Jan 19 05:33:53 comp named[4488]: client 76.9.31.42#30931: query (cache) './NS/IN' denied Jan 19 05:33:59 comp named[4488]: client 76.9.31.42#31789: query (cache) './NS/IN' denied Jan 19 05:34:06 comp named[4488]: client 76.9.31.42#38458:… Continue reading Potential DNS DDoS (query (cache) ‘./NS/IN’ denied)

Uncategorized

Apache-2.2.10 / Chroot and cURL is giving me some grief (SOLVED)

So my woes with Apache-2.2.10 and chroot is continuing. Now I can start Apache in the chroot environment, and I thought all was well, but after additional testing, I found out that cURL does not work. Basically, cURL will return a empty string while it’s chroot’d. This is very weird to me, since the jail… Continue reading Apache-2.2.10 / Chroot and cURL is giving me some grief (SOLVED)

Uncategorized

Apache-2.2.10 and mod_chroot-0.5 – Issue is solved

I have it figured out! This is originally referencing the trouble I was having starting apache-2.2.10 and using mod_chroot-0.5 (http://www.uno-code.com/?q=node/155). You cannot use mod_chroot with apache-2.2.10. Apache-2.2.10 because apache has built in chroot support now. http://httpd.apache.org/docs/2.2/mod/mpm_common.html All you need to do is provide a ChrootDir variable in httpd.conf. The problem is that mod_chroot sets that… Continue reading Apache-2.2.10 and mod_chroot-0.5 – Issue is solved