Date: Sat, 25 Aug 2001 02:57:48 -0700 From: Andrew Matheson <drakFB@drak.com> To: Clemens Hermann <haribeau@gmx.de> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: apache jail Message-ID: <a05100300b7ad241a8c23@[192.168.1.5]> In-Reply-To: <20010825113754.A1025@homer.local> References: <20010825113754.A1025@homer.local>
next in thread | previous in thread | raw e-mail | index | archive | help
>how can I send each apach virtual-host into somthing like a jail? I have >several vhosts sharing one IP so the apache could not be run inside the >jails, right? >Furthermore I would like to keep things as much as possible as they are, >the only goal is to avoid, that php-scripts and thelike can access the >system (e.g access the /etc/passwd to read it etc.). > >is there any information available how to do this? I've never tried this before and have no idea if it will work, but you may be able to do the following: 1) Set up each apache virtual host in its own jail using internal network ip addresses. You'd need to have one apache per jail, which I think is what you're trying to accomplish. 2) Set up apache running on your main ip address. Configure VirtualHost directives for each of your domains so that apache acts as a proxy server, forwarding the requests to the appropriate jail ip addresses. Good Luck, Andrew To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?a05100300b7ad241a8c23>