>> Edit article
이름
제목
패스워드
글이 수정이 안되는것 같아서 ^^; 암튼 다시 올립니다. : ############################################################ : : NameVirtualHost 211.36.58.212 : : <VirtualHost 211.36.58.212> : DocumentRoot /var/www/html/ : ServerName www.myhome.com : </VirtualHost> : : <VirtualHost 211.36.58.212> : ServerAdmin webmaster@aaa.com : DocumentRoot /home/aaa/ : ServerName aaa.com : ServerAlias *.aaa.com : ErrorLog logs/aaa.com-error_log : CustomLog logs/aaa.com-access_log common : </VirtualHost> : : ############################################################ : : 순서를 이렇게 바꾸고 다시 한번 해보세요 : : : : : : : : : : 아파치웹서버에서 virtualhost 설정에 관한 겁니다.. : : : : 도메인이 두개가 있습니다. : : www.myhome.com : : www.aaa.com : : : : IP 는 고정 아이피 1개 있습니다. : : : : document 디렉토리는 : : : : /home/mycom/www : : /home/aaa/www : : 입니다.. : : : : Dns 설정 제대로 한거같고 : : httpd.conf 제대로 수정된거 같습니다.. : : : : 브라우저에서에서 www.myhome.com을 치면 메인 웹페이지가 나옴니다... : : 그런데... www.aaa.com 을 치면해당 페이지가 나오지 않고 : : www.myhome.com의 메인 페이지가 나옴니다... : : : : : : 즉 각기도메인을 치면 루트의 index.hmtl을 보여줍니다.. : : 루트 디렉토리==> /var/www/html : : : : 완전돌아버리고 있습니다..별짓을 다해봤습니다.. : : 최후의 방법입니다.. : : 고수님들 뭐가 틀렸나한번 봐주세요 : : 성공하면 한잔 삽니다.. : : : ----------------------------------------------------------------- ---- : : ====myhome 의 zone 파일======= : : : : $TTL 86400 : : @ IN SOA diablo2.myhome.com. webmaster.diablo2.myhome.com. ( : : 20020430 ; Serial : : 10800 ; Refresh : : 3600 ; Retry : : 432000 ; Expire : : 86400 ) ; Minimum (TTL) : : @ IN NS diablo2.myhome.com. : : @ IN MX 10 diablo2.myhome.com. : : myhome.com. IN A 211.36.58.212 : : www IN A 211.36.58.212 : : home IN A 211.36.58.212 : : webmail IN A 211.36.58.212 : : mail IN CNAME myhome.com. : : : : ====aaa 의 zone 파일========== : : : : : : $TTL 86400 : : @ IN SOA diablo2.myhome.com. webmaster.diablo2.aaa.com. ( : : 20020428 ; Serial : : 10800 ; Refresh : : 3600 ; Retry : : 432000 ; Expire : : 86400 ) ; Minimum (TTL) : : @ IN NS diablo2.myhome.com. : : @ IN MX 10 diablo2.myhome.com. : : aaa.com. IN A 211.36.58.212 : : www IN CNAME 211.36.58.212 : : : : =============httpd.conf 파일(좀 깁니다)=================== : : : : : : : : ### Section 1: Global Environment : : # : : # The directives in this section affect the overall operation of Apache, : : # such as the number of concurrent requests it can handle or where it : : # can find its configuration files. : : # : : : : # : : # ServerType is either inetd, or standalone. Inetd mode is only supported on : : # Unix platforms. : : # : : ServerType standalone : : : : # : : # ServerRoot: The top of the directory tree under which the server's : : # configuration, error, and log files are kept. : : # : : # NOTE! If you intend to place this on an NFS (or otherwise network) : : # mounted filesystem then please read the LockFile documentation : : # (available at <URL:http://www.apache.org/docs/mod/core.html#lockfile>); : : # you will save yourself a lot of trouble. : : # : : # Do NOT add a slash at the end of the directory path. : : # : : ServerRoot "/etc/httpd" : : : : # : : # The LockFile directive sets the path to the lockfile used when Apache : : # is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or : : # USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at : : # its default value. The main reason for changing it is if the logs : : # directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL : : # DISK. The PID of the main server process is automatically appended to : : # the filename. : : # : : LockFile /var/lock/httpd.lock : : : : # : : # PidFile: The file in which the server should record its process : : # identification number when it starts. : : # : : PidFile /var/run/httpd.pid : : : : # : : # ScoreBoardFile: File used to store internal server process information. : : # Not all architectures require this. But if yours does (you'll know because : : # this file will be created when you run Apache) then you *must* ensure that : : # no two invocations of Apache share the same scoreboard file. : : # : : ScoreBoardFile /var/run/httpd.scoreboard : : : : # : : # In the standard configuration, the server will process this file, : : # srm.conf, and access.conf in that order. The latter two files are : : # now distributed empty, as it is recommended that all directives : : # be kept in a single file for simplicity. The commented-out values : : # below are the built-in defaults. You can have the server ignore : : # these files altogether by using "/dev/null" (for Unix) or : : # "nul" (for Win32) for the arguments to the directives. : : # : : #ResourceConfig conf/srm.conf : : #AccessConfig conf/access.conf : : : : # : : # Timeout: The number of seconds before receives and sends time out. : : # : : Timeout 1200 : : : : # : : # KeepAlive: Whether or not to allow persistent connections (more than : : # one request per connection). Set to "Off" to deactivate. : : # : : KeepAlive On : : : : # : : # MaxKeepAliveRequests: The maximum number of requests to allow : : # during a persistent connection. Set to 0 to allow an unlimited amount. : : # We recommend you leave this number high, for maximum performance. : : # : : MaxKeepAliveRequests 1000 : : : : # : : # KeepAliveTimeout: Number of seconds to wait for the next request from the : : # same client on the same connection. : : # : : KeepAliveTimeout 300 : : : : # : : # Server-pool size regulation. Rather than making you guess how many : : # server processes you need, Apache dynamically adapts to the load it : : # sees --- that is, it tries to maintain enough server processes to : : # handle the current load, plus a few spare servers to handle transient : : # load spikes (e.g., multiple simultaneous requests from a single : : # Netscape browser). : : # : : # It does this by periodically checking how many servers are waiting : : # for a request. If there are fewer than MinSpareServers, it creates : : # a new spare. If there are more than MaxSpareServers, some of the : : # spares die off. The default values are probably OK for most sites. : : # : : MinSpareServers 5 : : MaxSpareServers 20 : : : : # : : # Number of servers to start initially --- should be a reasonable ballpark : : # figure. : : # : : StartServers 8 : : : : # : : # Limit on total number of servers running, i.e., limit on the number : : # of clients who can simultaneously connect --- if this limit is ever : : # reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW. : : # It is intended mainly as a brake to keep a runaway server from taking : : # the system with it as it spirals down... : : # : : MaxClients 150 : : : : # : : # MaxRequestsPerChild: the number of requests each child process is : : # allowed to process before the child dies. The child will exit so : : # as to avoid problems after prolonged use when Apache (and maybe the : : # libraries it uses) leak memory or other resources. On most systems, this : : # isn't really needed, but a few (such as Solaris) do have notable leaks : : # in the libraries. For these platforms, set to something like 10000 : : # or so; a setting of 0 means unlimited. : : # : : # NOTE: This value does not include keepalive requests after the initial : : # request per connection. For example, if a child process handles : : # an initial request and 10 subsequent "keptalive" requests, it : : # would only count as 1 request towards this limit. : : # : : MaxRequestsPerChild 100 : : : : # : : # Listen: Allows you to bind Apache to specific IP addresses and/or : : # ports, in addition to the default. See also the <VirtualHost> : : # directive. : : # : : #Listen 3000 : : #Listen 12.34.56.78:80 : : Listen 80 : : : : # : : # BindAddress: You can support virtual hosts with this option. This directive : : # is used to tell the server which IP address to listen to. It can either : : # contain "*", an IP address, or a fully qualified Internet domain name. : : # See also the <VirtualHost> and Listen directives. : : # : : BindAddress * : : : : # : : # Dynamic Shared Object (DSO) Support : : # : : # To be able to use the functionality of a module which was built as a DSO you : : # have to place corresponding `LoadModule' lines at this location so the : : # directives contained in it are actually available _before_ they are used. : : # Please read the file README.DSO in the Apache 1.3 distribution for more : : # details about the DSO mechanism and run `httpd -l' for the list of already : : # built-in (statically linked and thus always available) modules in your httpd : : # binary. : : # : : # Note: The order is which modules are loaded is important. Don't change : : # the order below without expert advice. : : # : : # Example: : : # LoadModule foo_module modules/mod_foo.so : : : : 중략 : : : : # : : # ExtendedStatus: controls whether Apache will generate "full" status : : # information (ExtendedStatus On) or just basic information (ExtendedStatus : : # Off) when the "server-status" handler is called. The default is Off. : : # : : #ExtendedStatus On : : : : ### Section 2: 'Main' server configuration : : # : : # The directives in this section set up the values used by the 'main' : : # server, which responds to any requests that aren't handled by a : : # <VirtualHost> definition. These values also provide defaults for : : # any <VirtualHost> containers you may define later in the file. : : # : : # All of these directives may appear inside <VirtualHost> containers, : : # in which case these default settings will be overridden for the : : # virtual host being defined. : : # : : : : # : : # If your ServerType directive (set earlier in the 'Global Environment' : : # section) is set to "inetd", the next few directives don't have any : : # effect since their settings are defined by the inetd configuration. : : # Skip ahead to the ServerAdmin directive. : : # : : : : # : : # Port: The port to which the standalone server listens. For : : # ports < 1023, you will need httpd to be run as root initially. : : # : : Port 80 : : : : # : : # If you wish httpd to run as a different user or group, you must run : : # httpd as root initially and it will switch. : : # : : # User/Group: The name (or #number) of the user/group to run httpd as. : : # . On SCO (ODT 3) use "User nouser" and "Group nogroup". : : # . On HPUX you may not be able to use shared memory as nobody, and the : : # suggested workaround is to create a user www and use that user. : : # NOTE that some kernels refuse to setgid(Group) or semctl (IPC_SET) : : # when the value of (unsigned)Group is above 60000; : : # don't use Group nobody on these systems! : : # : : User nobody : : Group nobody : : : : # : : # ServerAdmin: Your address, where problems with the server should be : : # e-mailed. This address appears on some server-generated pages, such : : # as error documents. : : # : : ServerAdmin webmaster@myhome.com : : : : # : : # ServerName: allows you to set a host name which is sent back to clients for : : # your server if it's different than the one the program would get (i.e., use : : # "www" instead of the host's real name). : : # : : # Note: You cannot just invent host names and hope they work. The name you : : # define here must be a valid DNS name for your host. If you don't understand : : # this, ask your network administrator. : : # If your host doesn't have a registered DNS name, enter its IP address here. : : # You will have to access it by its address (e.g., http://123.45.67.89/) : : # anyway, and this will make redirections work in a sensible way. : : : : ServerName www.myhome.com : : : : # : : # DocumentRoot: The directory out of which you will serve your : : # documents. By default, all requests are taken from this directory, but : : # symbolic links and aliases may be used to point to other locations. : : # : : DocumentRoot "/var/www/html/" : : : : # : : # Each directory to which Apache has access, can be configured with respect : : # to which services and features are allowed and/or disabled in that : : # directory (and its subdirectories). : : # : : # First, we configure the "default" to be a very restrictive set of : : # permissions. : : # : : <Directory /> : : Options FollowSymLinks : : AllowOverride None : : </Directory> : : : : # : : # Note that from this point forward you must specifically allow : : # particular features to be enabled - so if something's not working as : : # you might expect, make sure that you have specifically enabled it : : # below. : : # : : : : # : : # This should be changed to whatever you set DocumentRoot to. : : # : : <Directory "/var/www/html"> : : : : # : : # This may also be "None", "All", or any combination of "Indexes", : : # "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews". : : # : : # Note that "MultiViews" must be named *explicitly* --- "Options All" : : # doesn't give it to you. : : # : : Options Indexes Includes FollowSymLinks : : : : # : : # This controls which options the .htaccess files in directories can : : # override. Can also be "All", or any combination of "Options", "FileInfo", : : # "AuthConfig", and "Limit" : : # : : AllowOverride None : : : : # : : # Controls who can get stuff from this server. : : # : : Order allow,deny : : Allow from all : : </Directory> : : : : # : : # UserDir: The name of the directory which is appended onto a user's home : : # directory if a ~user request is received. : : # : : # The path to the end user account 'public_html' directory must be : : # accessible to the webserver userid. This usually means that ~userid : : # must have permissions of 711, ~userid/public_html must have permissions : : # of 755, and documents contained therein must be world-readable. : : # Otherwise, the client will only receive a "403 Forbidden" message. : : # : : # See also: http://httpd.apache.org/docs/misc/FAQ.html#forbidden : : # : : UserDir www : : : : # : : # Control access to UserDir directories. The following is an example : : # for a site where these directories are restricted to read-only. : : # : : <Directory /home/*/www> : : AllowOverride FileInfo AuthConfig Limit : : Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec : : <Limit GET POST OPTIONS PROPFIND> : : Order allow,deny : : Allow from all : : </Limit> : : <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK> : : Order deny,allow : : Deny from all : : </Limit> : : </Directory> : : : : # : : # DirectoryIndex: Name of the file or files to use as a pre- written HTML : : # directory index. Separate multiple entries with spaces. : : # : : DirectoryIndex index.html index.htm index.shtml index.php index.php4 index.php3 index.cgi : : : : # : : # AccessFileName: The name of the file to look for in each directory : : # for access control information. : : # : : AccessFileName .htaccess : : : : # : : # The following lines prevent .htaccess files from being viewed by : : # Web clients. Since .htaccess files often contain authorization : : # information, access is disallowed for security reasons. Comment : : # these lines out if you want Web visitors to see the contents of : : # .htaccess files. If you change the AccessFileName directive above, : : # be sure to make the corresponding changes here. : : # : : # Also, folks tend to use names such as .htpasswd for password : : # files, so this will protect those as well. : : # : : <Files ~ "^.ht"> : : Order allow,deny : : Deny from all : : </Files> : : : : # : : # CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each : : # document that was negotiated on the basis of content. This asks proxy : : # servers not to cache the document. Uncommenting the following line disables : : # this behavior, and proxies will be allowed to cache the documents. : : # : : #CacheNegotiatedDocs : : : : # : : # UseCanonicalName: (new for 1.3) With this setting turned on, whenever : : # Apache needs to construct a self-referencing URL (a URL that refers back : : # to the server the response is coming from) it will use ServerName and : : # Port to form a "canonical" name. With this setting off, Apache will : : # use the hostname:port that the client supplied, when possible. This : : # also affects SERVER_NAME and SERVER_PORT in CGI scripts. : : # : : UseCanonicalName On : : : : # : : # TypesConfig describes where the mime.types file (or equivalent) is : : # to be found. : : # : : TypesConfig /etc/mime.types : : : : # : : # DefaultType is the default MIME type the server will use for a document : : # if it cannot otherwise determine one, such as from filename extensions. : : # If your server contains mostly text or HTML documents, "text/plain" is : : # a good value. If most of your content is binary, such as applications : : # or images, you may want to use "application/octet-stream" instead to : : # keep browsers from trying to display binary files as though they are : : # text. : : # : : DefaultType text/plain : : : : # : : # The mod_mime_magic module allows the server to use various hints from the : : # contents of the file itself to determine its type. The MIMEMagicFile : : # directive tells the module where the hint definitions are located. : : # mod_mime_magic is not part of the default server (you have to add : : # it yourself with a LoadModule [see the DSO paragraph in the 'Global : : # Environment' section], or recompile the server and include mod_mime_magic : : # as part of the configuration), so it's enclosed in an <IfModule> container. : : # This means that the MIMEMagicFile directive will only be processed if the : : # module is part of the server. : : # : : <IfModule mod_mime_magic.c> : : MIMEMagicFile conf/magic : : </IfModule> : : : : # : : # HostnameLookups: Log the names of clients or just their IP addresses : : # e.g., www.apache.org (on) or 204.62.129.132 (off). : : # The default is off because it'd be overall better for the net if people : : # had to knowingly turn this feature on, since enabling it means that : : # each client request will result in AT LEAST one lookup request to the : : # nameserver. : : # : : HostnameLookups Off : : : : # : : # ErrorLog: The location of the error log file. : : # If you do not specify an ErrorLog directive within a <VirtualHost> : : # container, error messages relating to that virtual host will be : : # logged here. If you *do* define an error logfile for a <VirtualHost> : : # container, that host's errors will be logged there and not here. : : # : : ErrorLog /var/log/httpd/error_log : : : : # : : # LogLevel: Control the number of messages logged to the error_log. : : # Possible values include: debug, info, notice, warn, error, crit, : : # alert, emerg. : : # : : LogLevel warn : : : : # : : # The following directives define some format nicknames for use with : : # a CustomLog directive (see below). : : # : : LogFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User- Agent}i"" combined : : LogFormat "%h %l %u %t "%r" %>s %b" common : : LogFormat "%{Referer}i -> %U" referer : : LogFormat "%{User-agent}i" agent : : : : # : : # The location and format of the access logfile (Common Logfile Format). : : # If you do not define any access logfiles within a <VirtualHost> : : # container, they will be logged here. Contrariwise, if you *do* : : # define per-<VirtualHost> access logfiles, transactions will be : : # logged therein and *not* in this file. : : # : : # CustomLog /var/log/httpd/access_log common : : CustomLog /var/log/httpd/access_log combined : : : : # : : # If you would like to have agent and referer logfiles, uncomment the : : # following directives. : : # : : #CustomLog /var/log/httpd/referer_log referer : : #CustomLog /var/log/httpd/agent_log agent : : : : # : : # If you prefer a single logfile with access, agent, and referer information : : # (Combined Logfile Format) you can use the following directive. : : # : : #CustomLog /var/log/httpd/access_log combined : : : : # : : # Optionally add a line containing the server version and virtual host : : # name to server-generated pages (error documents, FTP directory listings, : : # mod_status and mod_info output etc., but not CGI generated documents). : : # Set to "EMail" to also include a mailto: link to the ServerAdmin. : : # Set to one of: On | Off | EMail : : # : : ServerSignature On : : : : # : : # Aliases: Add here as many aliases as you need (with no limit). The format is : : # Alias fakename realname : : # : : # Note that if you include a trailing / on fakename then the server will : : # require it to be present in the URL. So "/icons" isn't aliased in this : : # example, only "/icons/".. : : # : : Alias /icons/ "/var/www/icons/" : : : : <Directory "/var/www/icons"> : : Options Indexes MultiViews : : AllowOverride None : : Order allow,deny : : Allow from all : : </Directory> : : : : # : : # ScriptAlias: This controls which directories contain server scripts. : : # ScriptAliases are essentially the same as Aliases, except that : : # documents in the realname directory are treated as applications and : : # run by the server when requested rather than as documents sent to the client. : : # The same rules about trailing "/" apply to ScriptAlias directives as to : : # Alias. : : # : : ScriptAlias /cgi-bin/ "/var/www/cgi-bin/" : : : : # : : # "/var/www/cgi-bin" should be changed to whatever your ScriptAliased : : # CGI directory exists, if you have that configured. : : # : : <Directory "/var/www/cgi-bin"> : : AllowOverride None : : Options ExecCGI : : Order allow,deny : : Allow from all : : </Directory> : : : : # : : # Redirect allows you to tell clients about documents which used to exist in : : # your server's namespace, but do not anymore. This allows you to tell the : : # clients where to look for the relocated document. : : # Format: Redirect old-URI new-URL : : # : : : : # : : # Directives controlling the display of server-generated directory listings. : : # : : : : # : : # FancyIndexing: whether you want fancy directory indexing or standard : : # : : IndexOptions FancyIndexing NameWidth=* : : : : # : : # AddIcon* directives tell the server which icon to show for different : : # files or filename extensions. These are only displayed for : : # FancyIndexed directories. : : # : : AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip : : 중략 : : : : : : : : # : : # MetaDir: specifies the name of the directory in which Apache can find : : # meta information files. These files contain additional HTTP headers : : # to include when sending the document : : # : : #MetaDir .web : : : : # : : # MetaSuffix: specifies the file name suffix for the file containing the : : # meta information. : : # : : #MetaSuffix .meta : : : : # : : # Customizable error response (Apache style) : : # these come in three flavors : : # : : # 1) plain text : : #ErrorDocument 500 "The server made a boo boo. : : # n.b. the (") marks it as text, it does not get output : : # : : # 2) local redirects : : #ErrorDocument 404 /missing.html : : # to redirect to local URL /missing.html : : #ErrorDocument 404 /cgi-bin/missing_handler.pl : : # N.B.: You can redirect to a script or a document using server- side-includes. : : # : : # 3) external redirects : : #ErrorDocument 402 http://some.other_server.com/subscription_info.html : : # N.B.: Many of the environment variables associated with the original : : # request will *not* be available to such a script. : : : : # : : # The following directives modify normal HTTP response behavior. : : # The first directive disables keepalive for Netscape 2.x and browsers that : : # spoof it. There are known problems with these browser implementations. : : # The second directive is for Microsoft Internet Explorer 4.0b2 : : # which has a broken HTTP/1.1 implementation and does not properly : : # support keepalive when it is used on 301 or 302 (redirect) responses. : : # : : BrowserMatch "Mozilla/2" nokeepalive : : BrowserMatch "MSIE 4.0b2;" nokeepalive downgrade-1.0 force- response-1.0 : : : : # : : # The following directive disables HTTP/1.1 responses to browsers which : : # are in violation of the HTTP/1.0 spec by not being able to grok a : : # basic 1.1 response. : : # : : BrowserMatch "RealPlayer 4.0" force-response-1.0 : : BrowserMatch "Java/1.0" force-response-1.0 : : BrowserMatch "JDK/1.0" force-response-1.0 : : : : : : # If the perl module is installed, this will be enabled. : : <IfModule mod_perl.c> : : Alias /perl/ /var/www/perl/ : : <Location /perl> : : SetHandler perl-script : : PerlHandler Apache::Registry : : Options +ExecCGI : : </Location> : : </IfModule> : : : : # : : # Allow http put (such as Netscape Gold's publish feature) : : # Use htpasswd to generate /etc/httpd/conf/passwd. : : # You must unremark these two lines at the top of this file as well: : : #LoadModule put_module modules/mod_put.so : : #AddModule mod_put.c : : # : : #Alias /upload /tmp : : #<Location /upload> : : # EnablePut On : : # AuthType Basic : : # AuthName Temporary : : # AuthUserFile /etc/httpd/conf/passwd : : # EnableDelete Off : : # umask 007 : : # <Limit PUT> : : # require valid-user : : # </Limit> : : #</Location> : : : : # : : # Allow server status reports, with the URL of http://servername/server-status : : # Change the ".your_domain.com" to match your domain to enable. : : # : : #<Location /server-status> : : # SetHandler server-status : : # Order deny,allow : : # Deny from all : : # Allow from .your_domain.com : : #</Location> : : : : # : : # Allow remote server configuration reports, with the URL of : : # http://servername/server-info (requires that mod_info.c be loaded). : : # Change the ".your_domain.com" to match your domain to enable. : : # : : #<Location /server-info> : : # SetHandler server-info : : # Order deny,allow : : # Deny from all : : # Allow from .your_domain.com : : #</Location> : : : : # Allow access to local system documentation from localhost : : Alias /doc/ /usr/share/doc/ : : <Location /doc> : : order deny,allow : : deny from all : : allow from localhost .localdomain : : Options Indexes FollowSymLinks : : </Location> : : : : # : : # There have been reports of people trying to abuse an old bug from pre-1.1 : : # days. This bug involved a CGI script distributed as a part of Apache. : : # By uncommenting these lines you can redirect these attacks to a logging : : # script on phf.apache.org. Or, you can record them yourself, using the script : : # support/phf_abuse_log.cgi. : : # : : #<Location /cgi-bin/phf*> : : # Deny from all : : # ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi : : #</Location> : : : : # : : # Proxy Server directives. Uncomment the following lines to : : # enable the proxy server: : : # : : #<IfModule mod_proxy.c> : : #ProxyRequests On : : # : : #<Directory proxy:*> : : # Order deny,allow : : # Deny from all : : # Allow from .your_domain.com : : #</Directory> : : : : # : : # Enable/disable the handling of HTTP/1.1 "Via:" headers. : : # ("Full" adds the server version; "Block" removes all outgoing Via: headers) : : # Set to one of: Off | On | Full | Block : : # : : #ProxyVia On : : : : # : : # To enable the cache as well, edit and uncomment the following lines: : : # (no cacheing without CacheRoot) : : # : : #CacheRoot "/var/cache/httpd" : : #CacheSize 5 : : #CacheGcInterval 4 : : #CacheMaxExpire 24 : : #CacheLastModifiedFactor 0.1 : : #CacheDefaultExpire 1 : : #NoCache a_domain.com another_domain.edu joes.garage_sale.com : : : : #</IfModule> : : # End of proxy directives. : : : : ### Section 3: Virtual Hosts : : # : : # VirtualHost: If you want to maintain multiple domains/hostnames on your : : # machine you can setup VirtualHost containers for them. : : # Please see the documentation at <URL:http://www.apache.org/docs/vhosts/> : : # for further details before you try to setup virtual hosts. : : # You may use the command line option '-S' to verify your virtual host : : # configuration. : : : : # : : # If you want to use name-based virtual hosts you need to define at : : # least one IP address (and port number) for them. : : # : : #NameVirtualHost 211.36.58.212:80 : : #NameVirtualHost 211.36.58.212 : : : : # : : # VirtualHost example: : : # Almost any Apache directive may go into a VirtualHost container. : : # : : #<VirtualHost ip.address.of.host.some_domain.com> : : # ServerAdmin webmaster@host.some_domain.com : : # DocumentRoot /www/docs/host.some_domain.com : : # ServerName host.some_domain.com : : # ErrorLog logs/host.some_domain.com-error_log : : # CustomLog logs/host.some_domain.com-access_log common : : #</VirtualHost> : : : : <VirtualHost 211.36.58.212> : : DocumentRoot /var/www/html/ : : ServerName www.myhome.com : : </VirtualHost> : : : : NameVirtualHost 211.36.58.212 : : : : <VirtualHost 211.36.58.212> : : ServerAdmin webmaster@aaa.com : : DocumentRoot /home/aaa/ : : ServerName aaa.com : : ServerAlias *.aaa.com : : ErrorLog logs/aaa.com-error_log : : CustomLog logs/aaa.com-access_log common : : </VirtualHost> : : : : #<VirtualHost _default_:*> : : #</VirtualHost> : : : : #<IfDefine HAVE_SSL> : : ## : : ## SSL Virtual Host Context : : ## : : : : # Apache will only listen on port 80 by default. Defining the virtual server : : # (below) won't make it automatically listen on the virtual server's port. : : #Listen 443 : : : : # SSL Session Cache: : : # The cache speeds up processing of multiple parallel requests from : : # the same client. : : #SSLSessionCache shm:/var/cache/ssl_gcache_data(524288) : : : : #<VirtualHost 211.36.58.212> : : : : # General setup for the virtual host : : ##DocumentRoot "/var/www/html" : : : : # SSL Engine Switch: : : # Enable/Disable SSL for this virtual host. : : ##SSLEngine on : : : : # SSL Cipher Suite: : : # List the ciphers that the client is permitted to negotiate. : : # See the mod_ssl documentation for a complete list. : : #SSLCipherSuite ALL:! ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL : : : : # Server Certificate: : : # Point SSLCertificateFile at a PEM encoded certificate. If : : # the certificate is encrypted, then you will be prompted for a : : # pass phrase. Note that a kill -HUP will prompt again. A test : : # certificate can be generated with `make certificate' under : : # built time. Keep in mind that if you've both a RSA and a DSA : : # certificate you can configure both in parallel (to also allow : : # the use of DSA ciphers, etc.) : : ##SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt : : #SSLCertificateFile /etc/httpd/conf/ssl.crt/server-dsa.crt : : : : # Server Private Key: : : # If the key is not combined with the certificate, use this : : # directive to point at the key file. Keep in mind that if : : # you've both a RSA and a DSA private key you can configure : : # both in parallel (to also allow the use of DSA ciphers, etc.) : : ##SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key : : #SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server-dsa.key : : : : # Server Certificate Chain: : : # Point SSLCertificateChainFile at a file containing the : : # concatenation of PEM encoded CA certificates which form the : : # certificate chain for the server certificate. Alternatively : : # the referenced file can be the same as SSLCertificateFile : : # when the CA certificates are directly appended to the server : : # certificate for convinience. : : #SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt : : : : # Certificate Authority (CA): : : # Set the CA certificate verification path where to find CA : : # certificates for client authentication or alternatively one : : # huge file containing all of them (file must be PEM encoded) : : # Note: Inside SSLCACertificatePath you need hash symlinks : : # to point to the certificate files. Use the provided : : # Makefile to update the hash symlinks after changes. : : #SSLCACertificatePath /etc/httpd/conf/ssl.crt : : #SSLCACertificateFile /etc/httpd/conf/ssl.crt/ca-bundle.crt : : : : # Certificate Revocation Lists (CRL): : : # Set the CA revocation path where to find CA CRLs for client : : # authentication or alternatively one huge file containing all : : # of them (file must be PEM encoded) : : # Note: Inside SSLCARevocationPath you need hash symlinks : : # to point to the certificate files. Use the provided : : # Makefile to update the hash symlinks after changes. : : #SSLCARevocationPath /etc/httpd/conf/ssl.crl : : #SSLCARevocationFile /etc/httpd/conf/ssl.crl/ca-bundle.crl : : # Client Authentication (Type): : : # Client certificate verification type and depth. Types are : : # none, optional, require and optional_no_ca. Depth is a : : # number which specifies how deeply to verify the certificate : : # issuer chain before deciding the certificate is not valid. : : #SSLVerifyClient require : : #SSLVerifyDepth 10 : : : : # Access Control: : : # With SSLRequire you can do per-directory access control based : : # on arbitrary complex boolean expressions containing server : : # variable checks and other lookup directives. The syntax is a : : # mixture between C and Perl. See the mod_ssl documentation : : # for more details. : : #<Location /> : : #SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ : : # and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." : : # and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} : : # and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 : : # and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) : : # or %{REMOTE_ADDR} =~ m/^192.76.162.[0-9]+$/ : : #</Location> : : # SSL Engine Options: : : # Set various options for the SSL engine. : : # o FakeBasicAuth: : : # Translate the client X.509 into a Basic Authorisation. This means that : : # the standard Auth/DBMAuth methods can be used for access control. The : : # user name is the `one line' version of the client's X.509 certificate. : : # Note that no password is obtained from the user. Every entry in the user : : # file needs this password: `xxj31ZMTZzkVA'. : : # o ExportCertData: : : # This exports two additional environment variables: SSL_CLIENT_CERT and : : # SSL_SERVER_CERT. These contain the PEM-encoded certificates of the : : # server (always existing) and the client (only existing when client : : # authentication is used). This can be used to import the certificates : : # into CGI scripts. : : # o StdEnvVars: : : # This exports the standard SSL/TLS related `SSL_*' environment variables. : : # Per default this exportation is switched off for performance reasons, : : # because the extraction step is an expensive operation and is usually : : # useless for serving static content. So one usually enables the : : # exportation for CGI and SSI requests only. : : # o CompatEnvVars: : : # This exports obsolete environment variables for backward compatibility : : # to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this : : # to provide compatibility to existing CGI scripts. : : # o StrictRequire: : : # This denies access when "SSLRequireSSL" or "SSLRequire" applied even : : # under a "Satisfy any" situation, i.e. when it applies access is denied : : # and no other module can change it. : : # o OptRenegotiate: : : # This enables optimized SSL connection renegotiation handling when SSL : : # directives are used in per-directory context. : : #SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire : : ##<Files ~ ".(cgi|shtml)$"> : : ## SSLOptions +StdEnvVars : : ##</Files> : : ##<Directory "/var/www/cgi-bin"> : : ## SSLOptions +StdEnvVars : : ##</Directory> : : : : # Notice: Most problems of broken clients are also related to the HTTP : : # keep-alive facility, so you usually additionally want to disable : : # keep-alive for those clients, too. Use variable "nokeepalive" for this. : : ##SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown : : : : # Per-Server Logging: : : # The home of a custom SSL log file. Use this when you want a : : # compact non-error SSL logfile on a virtual host basis. : : ##CustomLog /var/log/httpd/ssl_request_log : : ## "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b" : : : : ##</VirtualHost> : : : : ##</IfDefine>
Copyleft
1999-2026 by
JSBoard Open Project
Theme Designed by
IDOO
All right reserved