From owner-freebsd-questions Wed Apr 10 13:56:11 2002 Delivered-To: freebsd-questions@freebsd.org Received: from hitchcock.woahnelly.net (p69-157.acedsl.com [66.114.69.157]) by hub.freebsd.org (Postfix) with ESMTP id CFFFE37B416 for ; Wed, 10 Apr 2002 13:56:07 -0700 (PDT) Received: from localhost (wes@localhost) by hitchcock.woahnelly.net (8.11.6/8.11.6) with ESMTP id g3AKu5912358; Wed, 10 Apr 2002 16:56:06 -0400 (EDT) (envelope-from wes@woahnelly.net) Date: Wed, 10 Apr 2002 16:56:05 -0400 (EDT) From: wes chow To: freebsd-questions@freebsd.org Cc: Lord Raiden Subject: Re: Good spoof page for Apache?? In-Reply-To: Message-ID: <20020410165359.L12353-100000@hitchcock.woahnelly.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG what about running Apache on a non-standard port? On Wed, 10 Apr 2002, Matthew Emmerton wrote: > > Rather than going ot all the trouble of "spoofing", why not have Apache > return a 403 error (authorization required) for people accessing outside > of the office. You can do this based on IP (although I don't have any > examples handy.) > > > -- > Matthew Emmerton || matt@gsicomp.on.ca > GSI Computer Services || http://www.gsicomp.on.ca > > On Tue, 9 Apr 2002, Lord Raiden wrote: > > > Hi all. I'm looking at taking one of our servers that's supposed to be > > for office use only and open it up to the outside. There's nothing secure > > on it, but I don't want just anybody surfing to it and browsing around. So > > what I was thinking of doing was in order to fool the average joe who might > > get there by accident or intentionally, I want them to think they have > > recieved a standard browser error and then leave. > > > > I've thought about modifying the browser error that IE gives, but I'm not > > sure that will work. I want it to look like a legitimate client side error > > when they hit the website, yet I want those who know the proper access URL > > to still be able to access the site remotely. For example, "mydomain.com/" > > would show the mock error, yet "mydomain.com/login.cgi" would still get > > them to where they needed to go. I just need a way to spoof an error, not > > generate a real one to help keep out nosy bypassers. Any ideas? > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message