in This CIDR block are rejected.
③ Not set in deny and allow. check who is behind allow/deny and who has a high priority.
10. Log Settings
Log Type:
AccessLogs
ErrorLogs
ErrorLogs:
ErrorLog logs/error_log
LogLevel warn
Loglevel value options:
Debug, info, notice, warn, error
Crit, alert, emerg
Access log:Search:/LogForma
Define the access log format: LogFormat format strings,
LogFormat "% h % l % u % t
file
SRM. conf ------> Add Resource file
Access. conf ---> set Object Access Permissions
Note: Specific configuration can refer to: http://httpd.apache.org/docs/mod/core.html
(2) log files of the Apache server
We can use the log format command to control the information of log files. Use the logformat "% A % L" command to record the IP address and Host Name of the browser sending an HTTP request to the log file. For the sake of security, we should kn
: proxy_set_header
Syntax: proxy_set_header header valueDefault Value: Host and ConnectionField used: http, server, locationThis command allows you to redefine the request header sent to the proxy server or add some fields. This value can be a text, variable, or a combination of them. When the specified field is not defined, proxy_set_header inherits from its parent field.
In this way, each time I forward data to the backend, the backend will have a header named X-Real-IP, which will also be tr
control the information of log files. Use the LogFormat \ "% a % l \" command to record the IP address and host name of the browser sending an HTTP request to the log file. For security reasons, you should add the LogFormat \ "% 401u \" command in the http. conf file to at least those WEB users who failed verification. This command has many other parameters. you can refer to the Apache documentation. In ad
the request is successful or what kind of error is encountered. Most of the time this is 200, it indicates that the server has successfully responded to the browser request, everything is normal. (Status codes starting with 2 indicate success. Status codes starting with 3 indicate that user requests are redirected to other locations for different reasons, status Code starting with 4 indicates that the client has an error. Status Code starting with 5 indicates that the server has encountered an
Apache logs are automatically split first in apache httpd. enter 1 LogFormat quot; % h % l % u % t \ quot; % r \ quot; % gt; s % B \ quot; in the conf file; % {User-Agent} I \ quot; k686 NOTE: lt; IfModulelog_config_module g
Apache logs are automatically split first in apache httpd. write the following in the conf file: 1 LogFormat "% h % l % u % t \" % r \ "%> s % B \" % {User-Agent} I \ "" k686 n
The damn technology really shouldn't have done this. Nbsp; a virtual host, but only the first one takes effect. That's true. it must be that the variable value is not set correctly. Damn technology, it's time to vomit blood. Lt; VirtualHost nbsp; www.a.com: 80 gt; nbsp; ServerAdmin nbsp; webmaster@jicheke.com nbsp; nbs damn technology, I really shouldn't do this.
A virtual host, but only the first one takes effect. That's true. it must be that the variable value is not set correctly. Dam
The damn technology really shouldn't have done this. A virtual host, but only the first one takes effect. That's true. it must be that the variable value is not set correctly. Damn technology, it's time to vomit blood. Lt; VirtualHostwww.a.com: 80 gt; nbsp; ServerAdminwebmaster@jicheke.com nbsp; Docu damn technology, really shouldn't do this line.
A virtual host, but only the first one takes effect. That's true. it must be that the variable value is not set correctly. Damn technology, it's t
Damn technology, I really shouldn't have done this.
With a virtual host, but only the first one takes effect. The feeling is also right, must be actually that variable value is not set to. Damn technology, Fast TM is spitting blood.
ServerAdmin webmaster@jicheke.com
DocumentRoot "/var/www/sns/"
ServerName www.a.com
Adddefaultcharset UTF-8
Logformat "%h%l%u%t \"%r\ "%>s%b \"%{referer}i\ "\"%{user-agent}i\ "%I%O" Common1
Errorlog "/va
Nginx:
Log_format main '$ remote_addr-$ remote_user [$ time_local] "$ request "''$ Status $ body_bytes_sent "$ http_referer "''"$ Http_user_agent" $ request_time ';
Log format description:$ Remote_addr IP Address used for remote request$ Remote_user remote login name$ Time_local time, in common log time format (Standard English format)$ The first line of the request$ Status.$ Body_bytes_sent the number of bytes returned by the request, including the data in the request header.$ Http_referer cont
Configure Apache access logs and log cuts1. Open the Apache master configuration file, command:vim/usr/local/apache2/conf/httpd.conf, locate the Log_config_module module, You can see two logformat(log format) as shown in:650) this.width=650; "Src=" https://s3.51cto.com/wyfs02/M00/8E/5F/wKioL1i-xNOTigYyAAAdvEazfcE062.png-wh_500x0-wm_ 3-wmp_4-s_1863003497.png "title=" 11.PNG "alt=" Wkiol1i-xnotigyyaaadveazfce062.png-wh_50 "/>2. Add the Custom
Apache Security1, the right to minimizeApache users can only use Apache users to performView Ps-ef | grep http2.ensure that only the root user can modify files under the Web root directory Chown root:root/var/www/htmlFind/var/www/html-type f-exec chmod 644 {} \;Find/var/www/html –type d-exec chmod 755 {} \;3, open the Apache logging function, record the client IP, Access time, request page, send bytes,Agent and other information. Logformat "%h%l%u%t \
%{http_host} ^www.abc.net$Rewriterule ^/(.) $ http://www.123.com/$1 [r=301,l]Or:Rewriteengine onRewritecond%{http_host}!^www.123.com$Rewriterule ^/(. *) $ http://www.123.com/$1 [r=301,l]After restarting Apache, the browser access www.abc.com will jump directly to www.123.com.If you want to test the effect quickly, you can actually use the Curl command directly on the Linux command line.#curl-x127.0.0.1:80 Www.123.com/bbs/forum.php-Ihttp/1.1 301 Moved Permanentlyserver:nginx/1.0.15Connection:keep
1. Apache Access LogEnter command cat/usr/local/apache2.4/conf/extra/httpd-vhosts.conf, enter, see,The access log for this virtual machine is inside the/logs/111.com-access_log, enter the command ls/usr/local/apache2.4/logs/, you can see the access log file, see,You can use the command Cat/usr/local/apache2.4/logs/111.com-access_log to view the contents, enter, see,The log displayed here is too simple to see any important information, you can define the format of the log, open the main configura
format. The following I should mean ignoring the case. And then come to a solution:
Add a new Logformat information
Copy Code code as follows:
Logformat "%{cdn-src-ip}i%l%u%t/"%r/"%>s%b/"%{referer}i/"/"%{user-agent}i/"" Combinedcdn "
Add to the Web site configuration to record:
Copy Code code as follows:
Customlog "|/usr/local/sbin/cronolog/usr/local/apache/logs/
to another directory.The configuration file is the httpd.conf file in the Conf directory under the installation directory, the default configuration:ErrorLog "Logs/error.log"Logformat "%h%l%u%t \%r\"%>s%b "Commoncustomlog" Logs/access.log "common"If you modify the path directly, the date setting is problematic, and the methods found on the Web are as follows:ErrorLog "|bin/rotatelogs.exe e:/log/apache/error-%y-%m-%d.log 86400"
://httpd.apache.org/docs/2.2/ja/mod/mod_log_config.html
Adaptation situation:
Server exceptions caused by a particular request can be helpful. ③ use mod_security to record POST-delivered data
Configuration:
Http://www.modsecurity.org/documentation/index.html
Adaptation situation:
Enhance the security of Apache. ④ multiple file access log
Configuration:
Logformat "%h%l%u%t/"%r/"%>s%b" commonCustomlog Logs/access_log CommonCustomlog Logs/referer
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.