[no subject]

Bob Toxen
bob at verysecurelinux.com               [Please use for email to me]
<a  rel="nofollow" href="http://www.verysecurelinux.com";>http://www.verysecurelinux.com</a>        [Network&amp;Linux/Unix security consulting]
<a  rel="nofollow" href="http://www.realworldlinuxsecurity.com";>http://www.realworldlinuxsecurity.com</a> [My book:&quot;Real World Linux Security 2/e&quot;]
Quality Linux &amp; UNIX security and SysAdmin &amp; software consulting since 1990.

&quot;Microsoft: Unsafe at any clock speed!&quot;
   -- Bob Toxen 10/03/2002

On Wed, Apr 13, 2005 at 04:46:04PM -0400, James P. Kinney III wrote:
&gt; Scenario:
&gt; 
&gt; apache server behind nat firewall.
&gt; Network changes just occurred.
&gt; Nat reconfigured to accept new external IP and redirect to DMZ apache
&gt; server.
&gt; 
&gt; Situation:
&gt; 
&gt; _partial_ connections. If login to web script with bad user name or
&gt; password, system returns the correct &quot;bad username or password. Login
&gt; failed&quot; error message from the login script.
&gt; 
&gt; Using a good combination, I get no response. It looks like a server hung
&gt; on connect. wget eventually times out. BUT! The person who wrote the app
&gt; on the server connects just fine with the SAME LOGIN THAT FAILS WITH
&gt; ME?!?!?!
&gt; 
&gt; Both of us see the same IP address. No errors in the log files.
&gt; 
&gt; If I try and access a perl script in cgi-bin called printenv with the
&gt; perms set to no execute, I get an apache arror message telling me it
&gt; can't be execute. If the perms are fixed, the server just sits and does
&gt; NOTHING.
&gt; 
&gt; I have never seen something like this before and am comletely perplexed.
&gt; 
&gt; The firewall now has old and new connections on it (i.e. old IP and new
&gt; IP) We are in the process of migrating to a new ISP/data line provider. 
&gt; 
&gt; If everything failed to go through, I could understand it being the
&gt; network change. But some stuff comes through. Static pages don't happen.
&gt; Error messages happen.
&gt; 
&gt; 
&gt; -- 
&gt; James P. Kinney III          \Changing the mobile computing world/
&gt; CEO &amp; Director of Engineering \          one Linux user         /
&gt; Local Net Solutions,LLC        \           at a time.          /
&gt; 770-493-8244                    \.___________________________./
&gt; <a  rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>
&gt; 
&gt; GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
&gt; &lt;jkinney at localnetsolutions.com&gt;
&gt; Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7



&gt; _______________________________________________
&gt; Ale mailing list
&gt; Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00287" href="msg00287.html">[ale] apache wierdness</a></strong>
<ul><li><em>From:</em> jkinney at localnetsolutions.com (James P. Kinney III)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00287.html">[ale] apache wierdness</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00289.html">[ale] apache wierdness</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00287.html">[ale] apache wierdness</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00289.html">[ale] apache wierdness</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00288"><strong>Date</strong></a></li>
<li><a href="threads.html#00288"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>