httpbl-beta Mailing List for mod_httpbl

Status: Alpha

Brought to you by: elanghe, oxyrubber

httpbl-beta — mod_httpbl Beta Testers

You can subscribe to this list here.

2007	_Jan	_Feb	_Mar	_Apr	_May (60)	_Jun (2)	_Jul (13)	_Aug (14)	_Sep (1)	_Oct	_Nov	_Dec
2008	_Jan	_Feb	_Mar	_Apr	_May	_Jun (1)	_Jul (2)	_Aug	_Sep	_Oct	_Nov	_Dec
2011	_Jan (2)	_Feb	_Mar	_Apr	_May	_Jun	_Jul	_Aug	_Sep	_Oct	_Nov	_Dec

Flat | Threaded

1 2 3 4 > >> (Page 1 of 4)

Re: [Httpbl-beta] httpbl on osx

From: David W. <djw...@gm...> - 2011-01-03 23:07:39

Fantastic!

If you'd like to contribute to the official tree, it's hosted on
SourceForge:
http://sourceforge.net/projects/httpbl/

David
-- 
---------
David Wortham
e: djw...@gm...



On Mon, Jan 3, 2011 at 2:33 PM, Bradley Giesbrecht <br...@pi...> wrote:

> I know this list is silent but I have been building a MacPorts port
> for httpbl and figured I'd post in case others look here.
>
> It's not published to the MacPorts system but it builds on my system
> and apache2 starts.
>
> --
> Brad
>
>
> ------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database environment,
> and,
> should the need arise, upgrade to a full multi-node Oracle RAC database
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> Httpbl-beta mailing list
> Htt...@li...
> https://lists.sourceforge.net/lists/listinfo/httpbl-beta
>

[Httpbl-beta] httpbl on osx

From: Bradley G. <br...@pi...> - 2011-01-03 22:52:14

I know this list is silent but I have been building a MacPorts port  
for httpbl and figured I'd post in case others look here.

It's not published to the MacPorts system but it builds on my system  
and apache2 starts.

--
Brad

Re: [Httpbl-beta] Long time no read

From: David W. <djw...@gm...> - 2008-07-01 21:19:04

Phillip (and others),

I purposely withheld my response for a day or two to see what kind of
feedback you received.

*http:BL*
http:bl is a finalized API, AFAIK.

*mod_httpbl*
No recent developments for mod_httpbl.  It lacks some features, but _it's
stable_.
If I see any feature requests which would add significant value to the
project, I will add them (I don't own a MS compiler, sorry).
Otherwise, I'm back in school for the time being.

*A side note:*
Keep in mind that mod_httpbl is only one interface to utilize the http:BL.
Anyone with intermediate understanding of PERL / PHP / ASP / .NET / etc.
languages could easily implement a web traffic filter using the mod_httpbl
model and an http:BL API key.
I am no longer an intergral developer at Project Honey Pot, but you should
drop them a line and ask if someone has developed an interface for the
language of your preference.

More info:
http://www.projecthoneypot.org/5days_wednesday.php

If you want assistance in developing your own variant (in another language
or compatible with another library than APR), drop me a line and I will do
what I can to help.

Regards,
David Wortham

On Mon, Jun 30, 2008 at 3:42 PM, Phillip
<zya...@zy...<zyanklee%2Bh...@zy...>>
wrote:

> Hey there,
>
> whats up with http:Bl?
> Any news?
>
> Phillip
>
>
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> _______________________________________________
> Httpbl-beta mailing list
> Htt...@li...
> https://lists.sourceforge.net/lists/listinfo/httpbl-beta
>

Re: [Httpbl-beta] Long time no read

From: Mark A. C. <mar...@gm...> - 2008-07-01 01:45:22

I've wondered the same myself every six months or so.  I asked this same 
question over a year ago, and it's still been dead ever since.  Yours is the 
first post in ages.

It's worse for me, since I have a WINDOWS Apache install, and they couldn't be 
bothered to release a version that worked in that environment.  I tried to 
compile it myself, but it failed BECAUSE they had made it totally dependent on 
Linux libraries.  I tried my best to work around it but lacked the experience, 
and even though I dutifully reported all this they've never done a thing to 
correct it.  So even though I have a honeypot making useful contributions, I've 
never been able to take advantage of HTTP:BL, for no other reason than that I 
happen to be grudgingly forced to use Windows at this point.

It seems totally back-burnered, if not outright abandoned, at this point.


-------- Original Message  --------
Subject: [Httpbl-beta] Long time no read
From: Phillip <zya...@zy...>
To: htt...@li...
Date: Monday, June 30, 2008 03:42:20 PM

> Hey there,
> 
> whats up with http:Bl?
> Any news?
> 
> Phillip

[Httpbl-beta] Long time no read

From: Phillip <zya...@zy...> - 2008-06-30 22:59:35

Hey there,

whats up with http:Bl?
Any news?

Phillip

Re: [Httpbl-beta] Missing /apsx/ directory

From: Mark A. C. <mar...@gm...> - 2007-09-09 10:05:49

It's been over two months since I signed up for the mod_httpBL beta, and 
then discovered that WAMP users need not apply.  I no longer have much 
personal need to be part of the beta now, because I've found a 
workaround to utilize http:BL in the meantime.  Since the only current 
purpose of my Apache server is to service my blog, and the authors of 
the blogging CMS I use are more proactive and have already produced an 
http:BL module for their software, I have begun using that to great 
effect.  It blocks at least 70% of the comment spammers now based on IP 
alone.

I suppose I will continue to occasionally monitor the progress of this 
WRT Apache and Windows, because I would prefer to do this at the server 
rather than site level for obvious reasons, but in the meantime I have 
had my immediate needs met.

Mark Craig

> -------- Original Message  --------
> Subject: Re: [Httpbl-beta] Missing /apsx/ directory
> From: Eric Langheinrich <er...@pr...>
> To: 'mod_httpbl Beta Testers' <htt...@li...>
> Date: Friday, July 06, 2007 09:01:20 PM
>
> After several hours working on getting mod_httpbl to compile using 
> apache from apache.org and apxs from apachelounge.com I've made it a 
> ways. For Visual Studio C++ I downloaded and installed Visual C++ 
> Express. I've gotten passed the missing windows.h file by downloading 
> and installing the Microsoft sdk. I'm now working on the missing 
> /sys/socket.h file. 
>  
> After I get this worked out I'll do a better write up. If anyone make 
> it through this before me, please feel free to post a procedure.
>  
> Thank you,
>  
> Eric 
>
>     ------------------------------------------------------------------------
>     *From:* htt...@li...
>     [mailto:htt...@li...] *On Behalf Of
>     *David Wortham
>     *Sent:* Friday, July 06, 2007 7:36 PM
>     *To:* mod_httpbl Beta Testers
>     *Subject:* Re: [Httpbl-beta] Missing /apsx/ directory
>
>     Mark,
>        It's come to my attention that the Windows Apache install
>     doesn't come with APXS.  It seems the only way to compile a module
>     for Windows is via Cygwin/mod_perl or using VIsual C++.
>
>        Eric L (who is the moderator of this SourceForge Project and
>     this mailing list) is looking into options for us to better
>     support the Windows folks.
>
>     Dave
>
>
>
>     On 7/6/07, *Mark A. Craig* <mar...@gm...
>     <mailto:mar...@gm...>> wrote:
>
>         Dave:
>
>         I don't see it in the /bin/ directory, either.  I grabbed my
>         install directly from the Apache Foundation site, no mucking
>         around with third parties.  I was more thorough this time, and
>         did a search of the entire tree for aspx*.*, and came up
>         empty.  I will pose the question in the Apache User listserv. 
>         This is supposed to be an EXE, right?
>
>         Mark
>
>>         -------- Original Message  --------
>>         Subject: Re:[Httpbl-beta] Missing /apsx/ directory
>>         From: David Wortham <djw...@gm...>
>>         <mailto:djw...@gm...>
>>         To: mod_httpbl Beta Testers
>>         <htt...@li...>
>>         <mailto:htt...@li...>
>>         Date: Friday, July 06, 2007 11:37:02 AM
>>
>>         Mark,
>>            I don't remember offhand if there is an APXS directory. 
>>         The important thing is to have an APXS binary file in the
>>         /bin/ directory.
>>
>>         I believe APXS comes with the standard Windows MSI installer
>>         from http://httpd.apache.org/
>>
>>         I could be completely wrong... it's been a while since I've
>>         installed Apache on a Windows machine.
>>
>>         How did you get the installer?  Was it from that website or
>>         some other way (packaged with some other software, etc.)?
>>
>>         Dave
>>
>>
>>
>>
>>         On 7/6/07, *Mark A. Craig* <mar...@gm...
>>         <mailto:mar...@gm...>> wrote:
>>
>>             My Windows install of Apache 2.24 doesn't seem to have
>>             the necessary
>>             /apsx/ directory.  Is this because a port of this module
>>             compiler to
>>             Windows is absent, or because I omitted components during
>>             the install of
>>             Apache?
>>
>>             Mark
>>

Re: [Httpbl-beta] Diagnostics Directive no longer works (for now)

From: Tom C. <pro...@fa...> - 2007-08-30 20:15:07

David Wortham wrote:
> Revision 1.5 deals with changes to the HTTPBLTestingURL directive. It
> seemed to cause confusion and certainly didn't work as intuition would
> lead you to expect.

Great, thank you :-)
Compiles and is running fine on FC5.

> If anyone would like to see a way to disable the diagnostics page as a
> future feature, please use the SourceForge requested feature system.

Done, #1785181.

-- 

Tom C
'Get your facts first, then you can distort them as you please.'
 - Mark Twain (1835-1910)

[Httpbl-beta] Diagnostics Directive no longer works (for now)

From: David W. <djw...@gm...> - 2007-08-28 01:30:37

mod_httpbl beta testers,

Revision 1.5 deals with changes to the HTTPBLTestingURL directive. It seemed
to cause confusion and certainly didn't work as intuition would lead you to
expect.

I have disabled the HTTPBLTestingURL directive.  This change removes a
directive previously found in this Apache module... so when starting your
Apache server, you will see an error message if you do not comment out all
instances of the HTTPBLTestingURL directive.

At this point, implementing the HTTPBLTestingURL directive correctly will
take too much time and not add any significant utility.  The only 3 enabled
tests do not pose any significant security risk so there is not much of a
need to hide the URL which shows their results.

If anyone would like to see a way to disable the diagnostics page as a
future feature, please use the SourceForge requested feature system.

This DOES NOT MEAN that the diagnostics page is no longer available.  It is
now only available from the default URL ("/httpbl_diagnostics").  I also
fixed the issue with the URL returning a 404 if the user did not use a
trailing slash.


Please direct any questions or concerns about the change to the mailing
list.

Dave


P.S. The next feature I plan on implementing involves using Apache 2.0's
shared memory libraries to allow the child processes to share information.
This will allow us to "unlock" the rest of the functionality built into the
module which is not currently enabled.  With any luck, I will be able to
find more time to work on features and fixes in the future.

Re: [Httpbl-beta] http method matching

From: David W. <djw...@gm...> - 2007-08-28 01:13:02

For those of you using the newest revision of the code (r1.5), mod_httpbl.c
now allows you to specify "ALL" instead of a 0-255 bitset.  Internally, this
is stored as the maximum value of a 64bit unsigned integer.

I have done minimal testing with these new changes on Apache 2.0 but
everything looks good.

See my other email(s) on this mailing list for other changes (one which
breaks backwards compatibility).

Regards,
Dave




On 5/30/07, David Wortham <djw...@gm...> wrote:
>
> James,
>    I'm looking into why only GETs and POSTs seem to be matching.
>
>    When we set out to create the module, our intention was to make it HTTP
> 1.0 compatible (which does not provide support for all of the 20-something
> HTTP "verbs" supported in newer versions of the HTTP protocol and in mode
> versatile ).
>
>    Off the top of my head, I would say that the best way to handle the
> plethora of other "verbs" (the lesser used ones) would be to throw them all
> in a catch-all bit.
> On the other hand, the "verb bitset" isn't required to be only 8 bits
> because it is not part of the httpBL system (it is used in mod_httpbl, not
> the underlying DNS system).  Perhaps making a larger bitset in a future
> version of the module is the way to go.
>
> Dave
>
>
> On 5/30/07, James Beckett <jmb...@ha...> wrote:
> >
> > My last email to list grew longer than planned, so I'll keep this one
> > short.
> >
> > The first parameter in a HTTPBLRBLReqHandler rule is for matching the
> > type
> > of the HTTP request - here's the code that makes that test:
> >
> > static int is_method_accepted_by_rbl_handler(const char* the_method,
> > const unsigned long the_verb_bs)
> > {
> >     return  ((httpbl_string_matches(the_method, "GET"    ) &&
> > (the_verb_bs & 0x0000001ul)) ||
> >              (httpbl_string_matches(the_method, "POST"   ) &&
> > (the_verb_bs & 0x0000010ul)) ||
> >              (httpbl_string_matches(the_method, "HEAD"   ) &&
> > (the_verb_bs & 0x0000100ul)) ||
> >              (httpbl_string_matches(the_method, "PUT"    ) &&
> > (the_verb_bs & 0x0001000ul)) ||
> >              (httpbl_string_matches(the_method, "DELETE" ) &&
> > (the_verb_bs & 0x0010000ul)) ||
> >              (httpbl_string_matches(the_method, "OPTIONS") &&
> > (the_verb_bs & 0x0100000ul)) ||
> >              (httpbl_string_matches(the_method, "TRACE"  ) &&
> > (the_verb_bs & 0x1000000ul)));
> > }
> >
> > Answers on a postcard please as to why only GET and POST ever match
> > when the_verb_bs has values from 0 to 255 ...
> >
> > This caused me much confusion while testing, as I typically make
> > HEAD requests by hand (using nc etc) to view HTTP responses and they
> > *never failed*.
> >
> > In similar vein to the category matching bitset problem, there's no way
> > to
> > have a catch-all for *all* methods not matched elsewhere. Apache 2.2 has
> > a list of 26 different methods that are recognized - we'll not be
> > fitting
> > those into our 0-255 bitset!
> >
> > -jmb
> > --
> > James Beckett <jm...@ha...> <http://www.hackery.net/jmb/>
> > F601 C085 1482 B92A C812  556C A985 1497 209B 4E65
> >
> >
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> > http://sourceforge.net/powerbar/db2/
> > _______________________________________________
> > Httpbl-beta mailing list
> > Htt...@li...
> > https://lists.sourceforge.net/lists/listinfo/httpbl-beta
> >
>
>