[Security-Discuss] Apache2 DirectoryIndex Problems

"Jordan T." <mandrake-discuss-c1zCYYqwkzUxGtLu5B1ANRCuuivNXqWP@public.gmane.org> Wed, 20 Jul 2005 11:31:44 +0800
Newsgroups gmane.linux.mandrake.security.general
Message-ID <[email protected]>
This probably isn't the right list, but I'm hoping someone somewhere knows an answer 
to this bizare problem. 
 
I have a MDK 10.1 machine with the following apache2 rpms installed: 
apache-conf-2.0.50-4mdk 
apache2-mod_suexec-2.0.50-3mdk 
apache2-2.0.50-7.2.101mdk 
apache2-modules-2.0.50-7.2.101mdk 
apache2-mod_disk_cache-2.0.50-7.2.101mdk 
apache2-mod_ssl-2.0.50-4.1.101mdk 
apache2-mod_php-2.0.50_4.3.8-2mdk 
apache2-common-2.0.50-7.2.101mdk 
apache2-mod_cache-2.0.50-7.2.101mdk 
apache2-mod_proxy-2.0.50-7.2.101mdk 
 
The problem im getting is clients are randomly receiving "Forbidden" messages when 
trying to access the root of the website (http://www.domain.com/), in the error log i 
see: "[Wed Jul 20 09:49:33 2005] [error] [client X.X.X.X] Directory index forbidden by 
rule: /var/www/vhosts/domain.com/html/" 
 
This error corrosponds to the DirectoryIndex rule in mod_dir, which is set to check 
for index.html first, and then a few others after that and then display directory 
listing however there IS an index.html (permissions are correct) and i have also made 
various symlinks to other files referenced in DirectoryIndex from commonhttpd.conf but 
this has not solved the problem. 
 
I stress this is _very_ random, it happens to around 1 in every 70-80 requests, but 
this is an extremely high traffic site so is occuring quite frequently through out the 
day 
 
Hoping someone can provide some insight, 
Jordan.
message.footer (text/plain, 232 B)
____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________