Topic: Apache DoS

[Nathan Fowler]

Nicely enough you can install the following RPMS for RH6.2 which work perfectly with E-Smith 4.1.2 (that is what I run).

http://rpms.arvin.dk

Install the Apache 1.3.36 updates in addition to installing the PHP updates.  These RPMS are compatible with E-Smith 4.1.2 and work with no problems.  I did find that for PHP to work correctly I had to uninstall the existing PHP RPMS before I did an rpm -Uvh.

Also, Dan Brown has created a nice FAQ on how to upgrade PHP on E-Smith 4.1.2

Hope this helped I'm using PHP 4.1.2 on Apache 1.3.36 on E-Smith 4.1.2,
Nathan

[Peter Hollandare]

robert :

no @!#$, its tragic to see, that we are forced to go "elsewhere" just to find important updates. I have no intentions to change, nor update my e.smith box from 4.12, to something i found to be working less good. With a little tweaks here and there from (users here that still are helping for non profit!).

My thanks goes to Dan and Darrel, for making this work at all.

My angryness goes to Mitel, shame on you guys, for beeing so ignorant, esp with a issue like this, you could have easy updated a few rpm's for us 4.12 users.
I often come to this page, and there are times when i often wonders - why does this page even still exists anymore????

Nathan :

Yes i visit arvins site freq to check for updates. Theres a BIG note to take when updating the latest Apache 1.3.26 from arvin. Make damn sure to save /var/www/icons - since arvins updated apache removes every singel icon.

Updated, and everything seeme to work perfect.

[Nathan Fowler]

Peter, next time you get a chance do a http://www.netcraft.com query on www.e-smith.org.  Make sure you're sitting down, if you have any animocity (spelling?) towards Mitel you'll really start laughing.

Like you, I have no intentions on updating past 4.1.2.

Don't you find it funny to have security posts pasted on the front page of a webserver exploitable by such posts?

The site www.e-smith.org is running Apache/1.3.12 (Unix) (Red Hat/Linux) PHP/4.0.1pl2 on Linux.

Sad.  I'm here to attempt to give back at least 5% of what the E-Smith community has given me.  Contributions from Darrel May, Dan Brown, and the countless others are the real reasons for the success with E-Smith.  Everyone give yourselves a pat on the back for a job well done, I could take or leave Mitel either way; I guess I'm a little biased not being on the payroll.

Nathan

[Dave Wyatt]

I just updated one of our 4.12 servers with these Apache RPMs and received these errors:

[root@abraF01 temp01]# rpm -Uvh *.rpm
error: failed dependencies:
        libexpat.so.0   is needed by apache-1.3.26-3.arvin.rh6.2
        libmm.so.1   is needed by apache-1.3.26-3.arvin.rh6.2
        make is needed by mod_ssl-2.8.10-2.arvin.rh6.2
[root@abraF01 temp01]#

I don't have make as I haven't needed to compile anything on this server and I guess that isn't installed with the normal installation.  
 
What about the dependencies?  Did I miss something? Was Apache 1.3.26 installed and how do I tell?

Thanks,
Dave

[Dave Wyatt]

>I just updated one of our 4.12 servers with these Apache RPMs and received >these errors:

>[root@abraF01 temp01]# rpm -Uvh *.rpm
>error: failed dependencies:
>libexpat.so.0 is needed by apache-1.3.26-3.arvin.rh6.2
>libmm.so.1 is needed by apache-1.3.26-3.arvin.rh6.2
>make is needed by mod_ssl-2.8.10-2.arvin.rh6.2
>[root@abraF01 temp01]#

>I don't have make as I haven't needed to compile anything on this server and I >guess that isn't installed with the normal installation.

I have since downloaded the libmm and libexpat rpms from Arvins' and I have installed them.  I still get the 'make is needed by mod ssl-2.8.10-2.arvin.rh6.2' error.  I can't find where to get make, it does not appear to be on the 4.1.2 iso. I burnt to a cd?  Is make enough or am I going to have to install a bunch of stuff to complie?

[Nathan Fowler]

Dave, keep in mind that 4.1.2 is based off RH6.2, therefore most RPMS are compatible.

http://www.rpmfind.net/linux/RPM/redhat/6.2/i386/make-3.78.1-4.i386.html

I recommend using RPMFIND.net to find the missing RPMs.

Hope this helped,
Nathan

[Dave Wyatt]

Thanks Nathan,

I knew about RPMFIND but I just didn't happen to think about looking there for it.  Too many brain cells gone I guess.  Thanks again,

Dave

[Nathan Fowler]

Dave, anytime.  Don't feel bad, it happens all the time

Nathan