Received: (qmail 6767 invoked by uid 2012); 11 Jun 1999 17:27:58 -0000 Message-Id: <19990611172758.6766.qmail@hyperreal.org> Date: 11 Jun 1999 17:27:58 -0000 From: Jason Jenero Reply-To: jason_jenero@yahoo.com To: apbugs@hyperreal.org Subject: Even with HostNameLookups off, still get domain names in logs X-Send-Pr-Version: 3.2 >Number: 4570 >Category: mod_log-any >Synopsis: Even with HostNameLookups off, still get domain names in logs >Confidential: no >Severity: serious >Priority: medium >Responsible: apache >State: closed >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Fri Jun 11 10:30:02 PDT 1999 >Closed-Date: >Last-Modified: Sat Nov 18 12:00:43 PST 2000 >Originator: jason_jenero@yahoo.com >Release: 1.3.6 >Organization: >Environment: Solaris 2.7, gcc 2.8.1 >Description: Base config has HostNameLookups on VH has HostNameLookups off VH log file has MOSTLY IP names, but then will put a domain name. >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: State-Changed-From-To: open-feedback State-Changed-By: coar State-Changed-When: Mon Jun 21 12:22:04 PDT 1999 State-Changed-Why: What is your log format string? Please include a couple of excerpted lines showing the IP-only and domain-only output. Category-Changed-From-To: general-mod_log-any Category-Changed-By: coar Category-Changed-When: Mon Jun 21 12:22:04 PDT 1999 Comment-Added-By: coar Comment-Added-When: Wed Jun 7 12:00:33 PDT 2000 Comment-Added: [This is a standard response.] This Apache problem report has not been updated recently. Please reply to this message if you have any additional information about this issue, or if you have answers to any questions that have been posed to you. If there are no outstanding questions, please consider this a request to try to reproduce the problem with the latest software release, if one has been made since last contact. If we don't hear from you, this report will be closed. If you have information to add, BE SURE to reply to this message and include the apbugs@Apache.Org address so it will be attached to the problem report! State-Changed-From-To: feedback-closed State-Changed-By: slive State-Changed-When: Mon Oct 30 19:16:13 PST 2000 State-Changed-Why: [This is a standard response.] No response from submitter, assuming issue has been resolved. From: Jason Jenero To: coar@apache.org, apache-bugdb@apache.org Cc: apbugs@apache.org Subject: Re: mod_log-any/4570: Even with HostNameLookups off, still get domain names in logs Date: Fri, 17 Nov 2000 09:26:58 -0800 (PST) Still does it on Apache 1.3.14 The main server has "HostnameLookups On" and "HostNameLookups off" in the virtual host. JJ --- coar@apache.org wrote: > [In order for any reply to be added to the PR > database, you need] > [to include in the Cc line and > make sure the] > [subject line starts with the report component and > number, with ] > [or without any 'Re:' prefixes (such as > "general/1098:" or ] > ["Re: general/1098:"). If the subject doesn't match > this ] > [pattern, your message will be misfiled and ignored. > The ] > ["apbugs" address is not added to the Cc line of > messages from ] > [the database automatically because of the potential > for mail ] > [loops. If you do not include this Cc, your reply > may be ig- ] > [nored unless you are responding to an explicit > request from a ] > [developer. Reply only with text; DO NOT SEND > ATTACHMENTS! ] > > > Synopsis: Even with HostNameLookups off, still get > domain names in logs > > Comment-Added-By: coar > Comment-Added-When: Wed Jun 7 12:00:33 PDT 2000 > Comment-Added: > [This is a standard response.] > This Apache problem report has not been updated > recently. > Please reply to this message if you have any > additional > information about this issue, or if you have answers > to > any questions that have been posed to you. If there > are > no outstanding questions, please consider this a > request > to try to reproduce the problem with the latest > software > release, if one has been made since last contact. > If we > don't hear from you, this report will be closed. > If you have information to add, BE SURE to reply to > this > message and include the apbugs@Apache.Org address so > it > will be attached to the problem report! > __________________________________________________ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ From: Tony Finch To: Jason Jenero Cc: apbugs@apache.org Subject: Re: mod_log-any/4570: Even with HostNameLookups off, still get domain names in logs Date: Fri, 17 Nov 2000 21:42:48 +0000 This can happen if you have any access controls based on the remote domain name. Tony. -- en oeccget g mtcaa f.a.n.finch v spdlkishrhtewe y dot@dotat.at eatp o v eiti i d. fanf@covalent.net From: Jason Jenero To: Tony Finch Cc: apbugs@apache.org Subject: Re: mod_log-any/4570: Even with HostNameLookups off, still get domain names in logs Date: Sat, 18 Nov 2000 08:53:10 -0800 (PST) There are various .htaccess files on the domain, however the most involved they get are : order deny,allow deny from none allow from all require valid-user And its not like EVERY hit in a log shows the domain name. Some will show the IP, sometimes domain, FOR THE SAME DIRECTORY. JJ -- Tony Finch wrote: > This can happen if you have any access controls > based on the remote > domain name. > > Tony. > -- > en oeccget g mtcaa f.a.n.finch > v spdlkishrhtewe y dot@dotat.at > eatp o v eiti i d. fanf@covalent.net __________________________________________________ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ Comment-Added-By: slive Comment-Added-When: Sat Nov 18 12:00:43 PST 2000 Comment-Added: TaDum.... You found your problem. If you look through the official Apache documentation, you will find there is no such keyword as "none" in the Allow/Deny statements. Therefore, Apache is doing reverse lookups in an attempt to find a hostname "none". The presence of this, and the unnecessary and possibly dangerous lines, indicates that you are using a very bad set of documentation. I suggest you inform whoever wrote the docs that you are using that they should consult the official Apache docs to find their mistakes. Thanks for using Apache! >Unformatted: [In order for any reply to be added to the PR database, you need] [to include in the Cc line and make sure the] [subject line starts with the report component and number, with ] [or without any 'Re:' prefixes (such as "general/1098:" or ] ["Re: general/1098:"). If the subject doesn't match this ] [pattern, your message will be misfiled and ignored. The ] ["apbugs" address is not added to the Cc line of messages from ] [the database automatically because of the potential for mail ] [loops. If you do not include this Cc, your reply may be ig- ] [nored unless you are responding to an explicit request from a ] [developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]