|
From: David W. <djw...@gm...> - 2007-08-28 01:30:37
|
mod_httpbl beta testers,
Revision 1.5 deals with changes to the HTTPBLTestingURL directive. It seemed
to cause confusion and certainly didn't work as intuition would lead you to
expect.
I have disabled the HTTPBLTestingURL directive. This change removes a
directive previously found in this Apache module... so when starting your
Apache server, you will see an error message if you do not comment out all
instances of the HTTPBLTestingURL directive.
At this point, implementing the HTTPBLTestingURL directive correctly will
take too much time and not add any significant utility. The only 3 enabled
tests do not pose any significant security risk so there is not much of a
need to hide the URL which shows their results.
If anyone would like to see a way to disable the diagnostics page as a
future feature, please use the SourceForge requested feature system.
This DOES NOT MEAN that the diagnostics page is no longer available. It is
now only available from the default URL ("/httpbl_diagnostics"). I also
fixed the issue with the URL returning a 404 if the user did not use a
trailing slash.
Please direct any questions or concerns about the change to the mailing
list.
Dave
P.S. The next feature I plan on implementing involves using Apache 2.0's
shared memory libraries to allow the child processes to share information.
This will allow us to "unlock" the rest of the functionality built into the
module which is not currently enabled. With any luck, I will be able to
find more time to work on features and fixes in the future.
|