PapaScott I like big blogs and I cannot lie! 🐘

'ssh' verboten

Funny, when I first tried to publish the VPN post yesterday, I kept getting the strange error 'Precondition Failed'. PapaTech is hosted at TextDrive, and it turns out they do some very aggresive filtering with mod_security, including the names of certain Unix commands like 'ssh', 'wget', and 'echo' which can be used in HTTP requests to run commands on unsecure servers. The side-effect is it's not possible to mention 'ssh' (without quotes) on a site hosted at TextDrive.

Actually, at TextDrive you can disable mod_security in your .htaccess file, or even modify the stock ruleset, but it doesn't work if you proxy lighttpd in front of their Apache, like PapaTech does.

comments powered by Disqus