From owner-freebsd-www@FreeBSD.ORG  Sun Sep  4 03:23:25 2011
Return-Path: <owner-freebsd-www@FreeBSD.ORG>
Delivered-To: freebsd-www@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id DF98F1065672
	for <freebsd-www@FreeBSD.org>; Sun,  4 Sep 2011 03:23:25 +0000 (UTC)
	(envelope-from gjb@FreeBSD.org)
Received: from glenbarber.us (onyx.glenbarber.us [199.48.134.227])
	by mx1.freebsd.org (Postfix) with SMTP id 622068FC13
	for <freebsd-www@FreeBSD.org>; Sun,  4 Sep 2011 03:23:25 +0000 (UTC)
Received: (qmail 94143 invoked by uid 0); 3 Sep 2011 23:23:23 -0400
Received: from unknown (HELO schism.local) (gjb@76.124.49.145)
	by 0 with SMTP; 3 Sep 2011 23:23:23 -0400
Message-ID: <4E62EF2B.70204@FreeBSD.org>
Date: Sat, 03 Sep 2011 23:23:23 -0400
From: Glen Barber <gjb@FreeBSD.org>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6;
	rv:6.0.1) Gecko/20110830 Thunderbird/6.0.1
MIME-Version: 1.0
To: Alvaro Castillo <gobledb@gmail.com>
References: <201108280102.p7S12ujx022732@red.freebsd.org>
	<4E5997E6.7040500@FreeBSD.org>
	<CADTnMhqsGKY9G=AcgfxMo=-rpz5Uu6RFv=m+_Kwu2Qzh+G8rOg@mail.gmail.com>
	<4E62B703.5020801@FreeBSD.org>
	<CADTnMhpMvb+rvQk6rX2mTSwfFn35t0VF_LS0TKx6oZ3Ge3QGEg@mail.gmail.com>
	<4E62E13D.6090209@FreeBSD.org>
	<CADTnMhqQQyd8x+nu1M0orUVyxUz+190qmH7Xvh+uZgG-Urpp9A@mail.gmail.com>
In-Reply-To: <CADTnMhqQQyd8x+nu1M0orUVyxUz+190qmH7Xvh+uZgG-Urpp9A@mail.gmail.com>
X-Enigmail-Version: 1.3.1
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: freebsd-www@FreeBSD.org, bug-followup@FreeBSD.org
Subject: Re: www/160247: Website vulnerability
X-BeenThere: freebsd-www@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: FreeBSD Project Webmasters <freebsd-www.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-www>,
	<mailto:freebsd-www-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-www>
List-Post: <mailto:freebsd-www@freebsd.org>
List-Help: <mailto:freebsd-www-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-www>,
	<mailto:freebsd-www-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Sep 2011 03:23:26 -0000

On 9/3/11 10:41 PM, Alvaro Castillo wrote:
> On Sun, Sep 4, 2011 at 3:23 AM, Glen Barber <gjb@freebsd.org> wrote:
>> On 9/3/11 9:35 PM, Alvaro Castillo wrote:
>>>>
>>>> Sorry, but www.freebsd.org does not use Apache.
>>>>
>>> How that not?
>>>
>>> Netblock Owner        IP address      OS      Web Server      Last changed
>>> 701 First Ave Sunnyvale CA US 94089   69.147.83.34    FreeBSD httpd/1.4.x
>>> LaHonda       27-Aug-2011
>>>
>>
>> Not Apache.
>>
>>> Netblock Owner        IP address      OS      Web Server      Last changed
>>> University of Alberta 352 General Services Building Edmonton AB CA
>>> T6G-2H1       142.244.12.42   unknow Apache    8-Aug-2011
>>>
>>
>> Not FreeBSD.
>>
>>> Netblock Owner        IP address      OS      Web Server      Last changed
>>> Internet Systems Consortium, Inc. 950 Charter Street Redwood City CA
>>> US 94063      204.152.190.12  NetBSD/OpenBSD  Apache/2.2.17 Unix      11-Aug-2011
>>>
>>
>> Not FreeBSD.
>>
> Sorry, the before script is contain issues.
> 
> perl killapache2.pl www.freebsd.org 1
> ### Request ###
> HEAD / HTTP/1.1
> Host: www.freebsd.org
> Range:bytes=0-100
> Accept-Encoding: gzip
> Connection: close
> ### returned Status Code ->
> ### Host does not seem vulnerable. Or Redirect. Or File not found. Or
> Bad Request.
> ### Exit.
> 
> So, if not Apache. What is?
> 

Sorry, you'll need to do your own homework here.

I'm closing this PR.

-- 
Glen Barber | gjb@FreeBSD.org
FreeBSD Documentation Project