Q. I’m running Apache 2 Web sever under CentOS Linux and getting an error that read as follows:
ADVERTISEMENTS
[Wed Sep 17 21:53:49 2008] [error] [client 122.1xx.y9.zzz] client denied by server configuration: /var/www/examples.com/
How do I fix this error?
A. By default Apache is configured as restrictive server. It will not allow end users (client) to do anything on default DocumentRoot. To fix this issue you need to add following lines to your VirtualHost configuration directives:
<Directory "/var/www/example.com">
Options -Indexes FollowSymLinks
AllowOverride AuthConfig FileInfo
Order allow,deny
Allow from all
</Directory> |
‘Order allow,deny’ and ‘Allow from all’ will set appropriate permission for the directory. At the end it should look like as follows:
<VirtualHost *:80> ServerAdmin webmaster@example.com DocumentRoot "/var/www/example.com" ServerName example.com ServerAlias www.example.com ErrorLog "/var/logs/httpd/example.com/error.log" CustomLog "/var/logs/httpd/example.com/access.log" common ScriptAlias /cgi-bin/ "/var/suexec/example.com/cgi-bin/" <Directory "/var/www/example.com"> Options -Indexes FollowSymLinks AllowOverride AuthConfig FileInfo Order allow,deny Allow from all </Directory> SuExecUserGroup user group </VirtualHost> |
Restart apache:
# service httpd restart
🐧 Get the latest tutorials on SysAdmin, Linux/Unix, Open Source/DevOps topics:
- RSS feed or Weekly email newsletter
- Share to Twitter • Facebook • 15 comments... add one ↓
UP NEXT
Apache IPv6 Configuration: Dual Stacked IPv4 & IPv6 Virtual Hosts
Apache Name Based VirtualHost Example
How To Secure Apache with mod_md Let's Encrypt on Ubuntu 20.04 LTS
FreeBSD Configure Apache PHP with mod_fastcgi Module
Apache: [warn] _default_ VirtualHost overlap on port 80, the first has precedence Error and Solution- Apache Log Files
KVM forward ports to guests VM with UFW on Linux
| Category | List of Unix and Linux commands |
|---|---|
| File Management | cat |
| Firewall | CentOS 8 • OpenSUSE • RHEL 8 • Ubuntu 16.04 • Ubuntu 18.04 • Ubuntu 20.04 |
| Network Utilities | dig • host • ip • nmap |
| OpenVPN | CentOS 7 • CentOS 8 • Debian 10 • Debian 8/9 • Ubuntu 18.04 • Ubuntu 20.04 |
| Package Manager | apk • apt |
| Processes Management | bg • chroot • cron • disown • fg • jobs • killall • kill • pidof • pstree • pwdx • time |
| Searching | grep • whereis • which |
| User Information | groups • id • lastcomm • last • lid/libuser-lid • logname • members • users • whoami • who • w |
| WireGuard VPN | CentOS 8 • Debian 10 • Firewall • Ubuntu 20.04 |
While I thought this was going to be the ticket I still ended up with errors I am going to try again using each of these inside each vhost config directive.
It turned out to be an invalid vhost config and not the allow directives, thanks for the stating place!
Something else worth noting for people turning up on this page;
I had this same issue (exactly the same error) – and it turned out to be that the person who reported the issue was repeatedly calling the same file in a non-stop loop, and http-Security.conf had been setup for DDOS protection ;)
Added the IP into whitelist, slapped a few wrists, and all is well again!
FingAZ
Hi FingAZ!
I’m having the exact same problem you stated, about people calling the same file non-stop. This has been a real problem for me, especially with scripts using AJAX. However, I am a newbie in Linux/CentOS. Could you please clarify about the http-Security.conf? Is it a file? I haven’t found it in my system.
Thanks in advance!
I finally discovered what the problem was: mod_evasive. Because of this I kept getting too many false positives, especially with AJAX. I disabled it and everything works fine now. :)
Hi
Thanks a lot I got useful information
Thanks a lot! This really helped!
thanks
thanks.
now my server run well
Thank you.. thank you so much! Did the trick nicely.
BTW, will it not compromise the site’s security since we used “Allow from All”?
exactly what I was looking for…thx
Hi. Thanks for the tip, but it still didnt work when i tried accessing a server located on a local machine
So i found this article which also mentions ACL and it solved by adding this to the section which you had above.
Allow from 127.0.0.0/255.0.0.0 ::1/128
I have been getting these errors also but when I check them against my blocked IP addresses I found that they were all from IP that I had already blocked. So for me it looks like my IP filters are working.
thx for providing all steps :)
Hai sir,
i was as accessing login page of this url, 403 forbidden error was encounterd, evevn i change change permission for that file in cpanel and also while edit .htaccess file internal server error occur
what i do plz help me
thanks