#1 HTTPBLTestingURL does not follow directive

[Eric Langheinrich]

After setting the HTTPBLTestingURL directive at the server level, visiting the page produces 404s. If you visit the default value page the diagnostics page is displayed.

For example:

If your server has the ip 1.1.1.1 and you have the directive set as:

HTTPBLTestingURL /httpbl_test/

visiting http://1.1.1.1/httpbl_test/ produces a 404.

visiting http://1.1.1.1/httpbl_diagnostics/ displays the diagnostics page.

[James Beckett]

Logged In: YES
user_id=922047
Originator: NO

Pending an actual fix, can we get this updated in the example config in the welcome email? New beta testers are asking the same question.

[James Beckett]

Logged In: YES
user_id=922047
Originator: NO

It's just occurred to me that having this page at a fixed address would make it very easy for the ne'er-do-wells to scan sites for http:BL installations, which might make it more important to fix.

I've tried configuring apache to deny access to the location from outside my network, but it can still be seen to exist (403 forbidden instead of 404 not found).

<Location /httpbl_diagnostics>
Order deny,allow
Deny from all
Allow from 192.168 127
</Location>

[Murz]

At now I can't set the HTTPBLTestingURL param:
Syntax error on line 5 of /etc/apache2/mods-enabled/httpbl.conf:
The directive is temporarily disabled. The default URL ("/httpbl_diagnostics") is hardcoded and can not be altered (in this version).

You must use the default url.