################################################## # # aEGiS nanoweb modules configuration file # # ModulesDir defines the directory where the modules are located ModulesDir = /home/andi/temp/2007-09-11/nw/lib/modules/ # Parser modules ############################################################################## # # Static content support (you probably don't want to change this) # ############################################################################## LoadModule = mod_static.php # Defines the size (in bytes) of the buffer allocated for serving static files #StaticBufferSize = 1048576 # Uncomment the line below if you want to disallow serving partial content. # This feature of HTTP is mostly used for resume and by download accelerators. #StaticDisablePartial = 1 # mod_asis extends mod_static to allow serving of raw content (including HTTP # headers) from text files. #LoadModule = mod_asis.php ############################################################################## # # Server Side Includes (SSI) support # ############################################################################## #LoadModule = mod_include.php ############################################################################## # # Common Gateway Interface (CGI) support # ############################################################################## LoadModule = mod_cgi.php # This option is only here if you plan to use the CGI version of PHP. # There is a bug still unfixed in PHP-CGI that forbids passing the PATH_INFO # server var to the scripts. Disable it if it gets fixed one day. #CGIFilterPathInfo = 1 # Use CGINoHeader to specify a list of HTTP response headers that will be # blocked by the server (not forwarded to the client browser) #CGINoHeader = X-Powered-By # Every file in a directory defined as CGIScriptsDir will be considered as a # CGI script and will be executed by mod_cgi #CGIScriptsDir = /usr/lib/cgi-bin #Alias = /cgi-bin/ /usr/lib/cgi-bin/ # CGIScriptNoExec defines the behavior of mod_cgi if a file in a CGIScriptsDir # does not have the executable bit set. Possibles values are : # "error" : throws an internal server error # "raw" : sends the raw content of the file #CGIScriptNoExec = error ############################################################################## # # FastCGI support # ############################################################################## #LoadModule = mod_fcgi.php # See CGIFilterPathInfo for explanation of this directive. #FCGIFilterPathInfo = 1 # Use FCGINoHeader to specify a list of HTTP response headers that will be # blocked by the server (not forwarded to the client browser) #FCGINoHeader = X-Powered-By ############################################################################## # # BSP (Brainfuck Server Pages) support # ############################################################################## #LoadModule = mod_bsp.php # Allow display of BF source if url is "http://xxx/xxx.bsp?source" ? #BSPAllowSource = 1 ############################################################################## # # Transparent ZIP archive decompression # ############################################################################## #LoadModule = mod_unzip.php ############################################################################## # # Internal lnk files handler # ############################################################################## #LoadModule = mod_lnk.php # Content modules ############################################################################## # # Status report module (needed by 'nanoctl status') # ############################################################################## LoadModule = mod_status.php # Hosts allowed to consult server status through mod_status StatusAllowHost = 127.0.0.1 StatusAllowHost = 10.0.0. ############################################################################## # # Worms detection support (see README.mod_worms before use) # ############################################################################## #LoadModule = mod_worms.php # Text that is sent to the offending IIS server console #WormsWpopText = Your webserver has been infected by an HTTP worm. #WormsWpopText = We strongly suggest you use a recent anti-virus to scan this computer. #WormsWpopText = --- #WormsWpopText = warning sent by nanoweb server at http://$SERVERNAME # What to do if we have a worm ? ($REMOTE_IP and $REMOTE_HOST can be used) #WormsRun = /usr/bin/firewall_add $REMOTE_IP #WormsRun = echo "$REMOTE_HOST" >> /tmp/IIS_rulez # If you want to block IP of worm infected hosts, specify how long (in seconds) # with WormsBlockTime (use 'perm' to place a permanent block) #WormsBlockTime = 7200 # Method handler modules ############################################################################## # # HTTP/1.x PUT method # ############################################################################## #LoadModule = mod_method_PUT.php # Overwrites if permissions are set to ???????rw? #WriteAccess = 1 ############################################################################## # # HTTP/1.x TRACE method # ############################################################################## #LoadModule = mod_method_TRACE.php ############################################################################## # # HTTP actions handled by dedicated cgi's # ############################################################################## #LoadModule = mod_method_handler.php # NOTE: the path name to the handler script given here must be absolute to the # docroot! (not as relaxed as with Filter handlers) #MethodHandler = FOO /cgi-bin/FOO_handler.php # Parser filters support (pfilters) ############################################################################## # # pfilters core, must be loaded before any pfilters module # ############################################################################## LoadModule = mod_pfilters.php # This directive enables the filter infrastructure, which however has # no effect until you activate a `Filter' directive. FilterEnable = 1 ############################################################################## # # Gzip content encoding pfilter # ############################################################################## LoadModule = mod_gzip.php # mod_gzip can be enabled in two different ways. The old method # is to activate it for every served file: #GzipEnable = 1 # Due to its implementation as filter you could however tell it to only # compress text files (as images and other files are often already): #Filter = text/* gzip # Max compression ratio (percentage of original size). If it is higher, the # content is likely to be already compressed and does not need a recompression. GzipMaxRatio = 90 # Level of compression asked to zlib GzipLevel = 5 ############################################################################## # # HTML filters # ############################################################################## #LoadModule = mod_html_filters.php # converts to one-line html file #Filter = text/html shrink # strtolower(tags) #Filter = text/html downcase # html->wml conversion if requested by client #Filter = text/html wap # a useful one :) #Filter = dont/use! garbage ############################################################################## # # Image Filters # ############################################################################## #LoadModule = mod_img_filters.php # libgd doesn't work with .gif images anymore, so these Filter rules # won't do any changes to them #Filter = image/* copyright © 2002 whoever wants to #Filter = image/png convert jpeg #Filter = image/* wbmp 100x60 ############################################################################## # # miscellaneous/control filters # ############################################################################## #LoadModule = mod_misc_filters.php # This filter corresponds to the apache AddHandler/Action directives #Filter = .ext|http/* handler /cgi-bin/handler.php # (http) control "filters" #Filter = text/* nocache #Filter = text/html addheader Content-Feature: tables,frames,javascript #Filter = .so|.dll addservervar LD_PRELOAD=/lib:/usr/lib # Logging modules ############################################################################## # # Standard logging support (console and file logging) # ############################################################################## LoadModule = mod_stdlog.php # Log every hit to standard outpout ? [0/1] #LogHitsToConsole = 1 # Log every hit to the server log(s) ? [0/1] #LogHitsToServerLog = 1 # LogType lets you set the format used for log files output. # "common" is the NCSA Common Log Format (also known as CLF) # "common-with-vhost" is the same as CLF, but with support for multiple hosts # "combined" is the extended CLF format used by Apache (default) LogType = combined ############################################################################## # # MySQL logging support # ############################################################################## #LoadModule = mod_mysqllog.php # MySQL Logging module configuration MySQLLogHost = localhost MySQLLogDatabase = nanoweb MySQLLogUser = nanoweb MySQLLogPassword = nanoweb # Core modules ############################################################################## # # Access control module # ############################################################################## LoadModule = mod_ac.php # ACPolicy defines the default access policy and is set to "allow" or "deny" #ACPolicy = deny # ACAllowIP and ACAllowHost let you define which remote clients you will allow # if you set the policy to "deny" #ACAllowIP = 10.0.0.* #ACAllowIP = 192.168.* #ACAllowHost = *.localdomain # ACDenyIP and ACDenyHost work the same as their Allow counterparts, but will # deny clients when the policy is set to "allow" #ACDenyHost = *.aol.com # ACBlockError is the error code thrown to denied clients (default is 403) #ACBlockError = 403 # ACBlockMessage is an optional message returned with the error page #ACBlockMessage = Go away ############################################################################## # # The nanoweb proxy module # ############################################################################## #LoadModule = mod_proxy.php ProxyCacheDir = /var/cache/nanoweb ProxyAllowIP = 10.0.0 ProxyDenySite = /home/andi/temp/2007-09-11/nw/etc/badsites ProxyDenyPopup = /home/andi/temp/2007-09-11/nw/etc/popup.txt ProxyDenyPub = /home/andi/temp/2007-09-11/nw/etc/images.txt ProxyAccessLog = /var/log/nanoweb/mod_proxy # 2592000 seconds = 1 month, u can put whatever you want here ProxyCacheMaxAge = 2592000 ############################################################################## # # Email Address Protection Filter # ############################################################################## #LoadModule = mod_emailprotect.php #Filter = application/x-httpd-php emailprotect ############################################################################## # # URL mispelling support # ############################################################################## LoadModule = mod_mispell.php # What to do when we catch a mispelled URL ? # advice : the client is returned a 404 not found page with an link # redirect : the client is automatically redirected MispellAction = advice ############################################################################## # # Files and directories browsing module # ############################################################################## LoadModule = mod_fb.php # Allow browsing of files and directories. You may define this for each # virtual host FileBrowser = 1 # FBSortOrder=(name|size|date)[ desc]) defines the sorting order and direction FBSortOrder = name # FBDateFormat defines how mod_fb will represent the date and time of each file # and directory. The format is the same as the PHP date() function. #FBDateFormat = Y-m-d H:i FBDateFormat = d-M-Y H:i:s # Show .xxxxxxx files in browser ? #FBShowDotFiles = 1 # This file, if found, is displayed before the listing in file browsing mode FBWelcomeFile = .welcome # Name of the description file. Format is "filename.ext desc of the file" for # each line FBDescFile = .desc # FBIconByType define icons associated to mime types in file browser. # Syntax is "FBIconByType = /path/to/icon mime[/type]" FBIconByType = /icons/exec.gif application FBIconByType = /icons/pic.gif image FBIconByType = /icons/son.gif audio FBIconByType = /icons/txt.gif text FBIconByType = /icons/video.gif video # FBIconDirectory define the icon shown for directories in file browser. FBIconDirectory = /icons/rep.gif # FBIconDefault define the default icon used in file browser. FBIconDefault = /icons/misc.gif ############################################################################## # # Download bandwidth limiting # ############################################################################## #LoadModule = mod_throttle.php # Bandwidth = 16K/s ############################################################################## # # Multiviews support (content negotiation) # ############################################################################## #LoadModule = mod_multiviews.php # LanguagePriority : A browser requesting http://example.com/ will be delivered # 'index.html.en' in favour of 'index.html.de' (if the users browser has not # been configured to request with another language preference). Of course # this only works if no 'index.html' exists in the docroot, which nanoweb # otherwise would have preselected. A file called 'index.html.fr.gz' may get # send in favour of all other variants, because of the higher priority of # compressed content. LanguagePriority = en fr de # OtherPriority : sets priorites which come into use, when the client doesn't # send an Accept:-header. As you can see, you may intermix file extensions # (as "php" - without dot!) and mime-types known to nanoweb; where you don't # specify a priorty value with qs= (0.0 - 1.0) a lesser (divided by 1.7) value # as the previous one will be choosen. #OtherPriority = php; qs=0.28, text/html; qs=0.27, text/* ############################################################################## # # RewriteEngine (powerful URI to filename mapping) # ############################################################################## # Please see the manual before use #LoadModule = mod_rewrite.php # ReflectRewriting will reflect changes to the requested path name in server # error responses, when for example the rewritten file name does not exist or # has no read permissions set; otherwise the url from the request will be # printed in such server messages. # Note: This config directive affects mod_multiviews as well and shouldn't # be used if mod_proxy is active. #ReflectRewriting = 1 ############################################################################## # # Message digest support # ############################################################################## #LoadModule = mod_digest.php # Enable DigestMD5 to make nanoweb generate a "Content-MD5" response header # whenever it's possible (static content, not too large) #DigestMD5 = 1 ############################################################################## # # HTML meta-information extractor # ############################################################################## # Extracts meta-information from hypertext files and makes http-equiv data # available as standard https header inside nanoweb. Data from a companion # .meta file is additionally appended to the http headers #LoadModule = mod_meta.php # MetaFetch defines how the meta information will be fetched from the HTML # document. It can be set to "fast", "regex" ,"no" or "0" #MetaFetch = fast ############################################################################## # # RBL use (see http://mail-abuse.org/rbl) # ############################################################################## #LoadModule = mod_access_rbl.php # dns or web, dns is more faster thant web #Access_RBL = dns ############################################################################## # # Server Load Limit # ############################################################################## LoadModule = mod_load_limit.php # Defines the maximum load average after which the server will return an error # and won't serve documents until load goes down. LoadLimit = 8.0 # LoadLimitAction can be set to "error" if you want to generate an error page # on overload, or "redir" to redirect to another page/site. LoadLimitAction = error # If LoadLimitAction is set to "redir", LoadLimitRedirect is the site the # client browser will be pointed to. #LoadLimitRedirect = http://www.example.com/overloaded.html #LoadLimitRedirect = http://www2.example.com%REQUEST_URI # If LoadLimitError is set to "error", the server will return LoadLimitError as # HTTP error number. The default is 503 which means Service Unavailable. LoadLimitError = 503 # This is the message displayed in the error page. %CUR_LOAD and %MAX_LOAD are # replaced by the current load average, and the maximum allowed load average. LoadLimitErrorMessage = Server load is too high (%CUR_LOAD/%MAX_LOAD), try again in a few moments. ############################################################################## # # DoS Evasive module # ############################################################################## #LoadModule = mod_dosevasive.php # Delay in seconds #DosEvasiveTimer = 10 # Maximum allowed number of requests for one resource in DosEvasiveTimer sec. #DosEvasiveMaxReqs = 5 # Error thrown if the maximum is reached, 403 Forbidden is a good default #DosEvasiveError = 403 # If you want to block IP of DoSing hosts, specify how long (in seconds) with # the DosEvasiveBlockTime (use 'perm' to place a permanent block) #DosEvasiveBlockTime = 120 # Authentication modules ############################################################################## # # Simple authentication # ############################################################################## LoadModule = mod_auth_simple.php # Use these directives in a conf/vhost/access file to use mod_auth_simple # # AuthRealm = your auth realm name here # AuthRequire = SIMPLE # AuthSimpleUserPass = login1 pass1 # AuthSimpleUserPass = login2 pass2 # ... # AuthSimpleUserPass = loginN passN ############################################################################## # # Backwards compatible .nwauth authentication # ############################################################################## LoadModule = mod_auth_nwauth.php # Use these directives in a conf/vhost/access file to use mod_auth_nwauth # # AuthRealm = your auth realm name here # AuthRequire = NWAUTH # AuthNwauthFilename = /var/www/vhosts/www.example.com/admin/.nwauth ############################################################################## # # Apache compatible .htpasswd authentication # ############################################################################## #LoadModule = mod_auth_htpasswd.php # Use these directives in a conf/vhost/access file to use mod_auth_htpasswd # # AuthRealm = your auth realm name here # AuthRequire = HTPASSWD # AuthHtpasswdFilename = /var/www/vhosts/www.example.com/admin/.htpasswd ############################################################################## # # MySQL based authentication # ############################################################################## #LoadModule = mod_auth_mysql.php # Use these directives in a conf/vhost/access file to use mod_auth_mysql # # AuthRealm = your auth realm name here # AuthRequire = MYSQL # AuthMysqlHost = localhost # AuthMysqlUser = db_user # AuthMysqlPass = db_pass # AuthMysqlDB = db_name # AuthMysqlTable = table_name # AuthMysqlPassType = plain | crypt | md5 | mysql # AuthMysqlLoginColumn = login_field_name # AuthMysqlPassColumn = password_field_name # # Password types are # # plain : password is plaintext # crypt : password is hashed using the system crypt() # md5 : password is hashed using the md5 algorithm # mysql : password is hashed using the mysql password algorithm ############################################################################## # # Database based authentication via abstraction layer # ############################################################################## # AnydbLoadInterface = /usr/local/php/adodb/adodb.inc.php # AnydbLoadInterface = /usr/local/php/DB.php #LoadModule = mod_auth_anydb.php # AuthRealm = your auth realm name here # AuthRequire = ANYDB # AuthAnydb = database://db_user:db_pass@localhost/db_name/table_name # AuthAnydbLoginColumn = login_field_name # AuthAnydbPassColumn = password_field_name ############################################################################## # # Anonymous authentication (ftp-like) # ############################################################################## #LoadModule = mod_auth_anonymous.php # AuthAnonymousNames = anonymous anonym guest nobody # AuthAnonymousSmtpCheck = 0 # AuthRealm = your auth realm name here # AuthRequire = ANONYMOUS ############################################################################## # # IP Address blocking management # ############################################################################## LoadModule = mod_blockadm.php BlockAdmAllowIP = 127.0.0.1 ############################################################################## # # WWW Spam filtering # ############################################################################## #LoadModule = mod_nospam.php #SpamBlockError = 403 #SpamBlockMessage = Something in the content you submited has been identified as www spam, your IP address has now been blocked from this server. #SpamBlockTime = 86400 #SpamCheck = GET POST #SpamRegex = /http:\/\/[a-zA-Z0-9.-]+\.ru/i #SpamRegex = /