Re: Differences between different Apaches in file requests

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Me too.
So at least there is nothing special to your system.

I finished installing Apache 2.2.9 on my Windows XP SP2 (German) laptop.

I created a file called "valentín.jpg" in my document root and tried to access it with Firefox, and I get a 403 forbidden response.

I also get the same behaviour when, instead of a browser, I use the command-line program "lwp-request" that comes with perl.

lwp-request -Sed -m GET http://zaphod/valentín.jpg

GET http://zaphod/valent%EDn.jpg --> 403 Forbidden
Connection: close
Date: Wed, 24 Sep 2008 19:28:05 GMT
Server: Apache/2.2.9 (Win32) DAV/2 mod_perl/2.0.3 Perl/v5.8.8
Content-Length: 317
Content-Type: text/html; charset=iso-8859-1
Client-Date: Wed, 24 Sep 2008 19:28:05 GMT
Client-Peer: 192.168.245.129:80
Client-Response-Num: 1
Title: 403 Forbidden

More interesting even :

C:\WINDOWS>lwp-request -Sed -m GET http://zaphod/valentín.png

GET http://zaphod/valent%EDn.png --> 403 Forbidden
Connection: close
Date: Wed, 24 Sep 2008 19:34:47 GMT
Server: Apache/2.2.9 (Win32) DAV/2 mod_perl/2.0.3 Perl/v5.8.8
Content-Length: 317
Content-Type: text/html; charset=iso-8859-1
Client-Date: Wed, 24 Sep 2008 19:34:47 GMT
Client-Peer: 192.168.245.129:80
Client-Response-Num: 1
Title: 403 Forbidden

I get exactly the same response if I try to access a file that does not exist, but whose name contains an accented character.

So it would seem that Apache under Windows does something strange there.
I will now compare this to a Linux system.




#V[Á]lentín wrote:
I have just installed an Apache 2.2.9 and it has exactly the same
behavior...

2008/9/24 #V[Á]lentín <valentin@xxxxxxxxx>

"Accept-Charset", "Accept-Language", and "Content-Type" are the same in all
cases. Moreover, I think that is no related to the encoding supported by the
server, is about the encoding, languages and type of files supported -or
preferred- by the browser.

An example:

Host: localhost
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.9.0.1)
Gecko/2008070208 Firefox/3.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: es-es,es;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: dbx-pagemeta=grabit:0-|1-|2-|3-|4-|5-|6-|7-&advancedstuff:0-;
dbx-postmeta=grabit:0+|5+|1+|2+|3+|4+&advancedstuff:0-|1-|2-;
Autoescuela-Cesantes=1b37db2f26e6ef9a184a82a9d8a2c3e8;
Eventos=54414e45d6a1ef59736e088e70aef327;
Redondela-en-Foto=c49b771ebb3e75304f42087fc7d20664

HTTP/1.x 403 Forbidden
Date: Wed, 24 Sep 2008 08:49:17 GMT
Server: Apache/2.0.59 (Win32) PHP/5.2.4
Content-Length: 291
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


2008/9/23 André Warnier <aw@xxxxxxxxxx>

If you can, try using Firefox, with the "LiveHttpHeaders" add-on.

That is an add-on that will - if you ask it - capture the outgoing HTTP
request and all its headers, and the incoming response with all its headers.
In this case, I am curious about headers like "Accept-Charset",
"Accept-Language", and "Content-Type".
Also about how the browser really sends the request URLs "on the wire".

Now of course, another possibility is a bug in the particular Apache
version you are running. It happens sometimes.
You could try to install a slightly different version, just to check.





#V[Á]lentín wrote:

So I got it ;-)

I have nothing called mod_security in my httpd.conf, and I don't find
anything related to filesystem encoding or something like that... :S

2008/9/23 Eric Covener <covener@xxxxxxxxx>

 On Tue, Sep 23, 2008 at 9:50 AM, #V[Á]lentín <valentin@xxxxxxxxx>
wrote:

Err... I really don't understand the sentence "Nothing like
mod_security

in

the picture?"... but, well, I have nothing called mod_security in my
httpd.conf, so I suppose that the answer is no.

Sorry, I meant "in the picture" as an idiom for "involved"

--
Eric Covener
covener@xxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
 "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
 "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux