Re: Apache hack attempts

From: Brian Clifton (brian@omegadm.co.uk)
Date: 08/17/01 

From: "Brian Clifton" <brian@omegadm.co.uk>
To: focus-linux@lists.securityfocus.com
Date: Fri, 17 Aug 2001 19:03:02 +0100
Subject: Re: Apache hack attempts
Message-ID: <3B7D6A66.19049.16C22CF@localhost>

OK, I have http://www.dasbistro.com's default.ida in my server root,
the file probulator one level above that (both 755), and I have added
to my httpd.conf file:
AddHandler cgi-script .ida

Is that it? Is there a way to test that this works? If I use a browser
I get:
'You don't have permission to access /default.ida on this server'

Will Code_Red attempts now be logged in the httpd_access log file
instead of error_log??

Thanks in advance, Brian

> > What is required in the httpd.conf file to parse .ida as a cgi?
> >
> > I am guessing at:
> > AddHandler server-parsed .ida
> > or
> > AddType text/html .ida
> > or both??
>
> You need
>
> AddHandler cgi-script ida
>
> You may also need
>
> Options +ExecCGI
>
> set in your server root directory.

=============================================================
Omega Digital Media Ltd

       I N T E G R A T E D W E B S O L U T I O N S

Phone: +44 (0) 1444 410202
Fax: +44 (0) 1444 412909

http://www.omegadm.co.uk
=============================================================
Cuckfield House, High Street, Cuckfield, West Sussex RH17 5EL