Apache Error Client Denied By Server Configuration

Posted on in Categories , , , last updated September 19, 2008

Q. I’m running Apache 2 Web sever under CentOS Linux and getting an error that read as follows:

[Wed Sep 17 21:53:49 2008] [error] [client 122.1xx.y9.zzz] client denied by server configuration: /var/www/examples.com/

How do I fix this error?

A. By default Apache is configured as restrictive server. It will not allow end users (client) to do anything on default DocumentRoot. To fix this issue you need to add following lines to your VirtualHost configuration directives:

<Directory "/var/www/example.com">
    Options -Indexes FollowSymLinks
    AllowOverride AuthConfig FileInfo
    Order allow,deny
    Allow from all
</Directory>

‘Order allow,deny’ and ‘Allow from all’ will set appropriate permission for the directory. At the end it should look like as follows:

<VirtualHost *:80>
	ServerAdmin [email protected]
        DocumentRoot "/var/www/example.com"
        ServerName example.com
        ServerAlias www.example.com
        ErrorLog "/var/logs/httpd/example.com/error.log"
        CustomLog "/var/logs/httpd/example.com/access.log" common
        ScriptAlias /cgi-bin/ "/var/suexec/example.com/cgi-bin/"
 
<Directory "/var/www/example.com">
	Options -Indexes FollowSymLinks
	AllowOverride AuthConfig FileInfo
	Order allow,deny
	Allow from all
</Directory>
 
  SuExecUserGroup user group
</VirtualHost>

Restart apache:
# service httpd restart

Posted by: Vivek Gite

The author is the creator of nixCraft and a seasoned sysadmin and a trainer for the Linux operating system/Unix shell scripting. He has worked with global clients and in various industries, including IT, education, defense and space research, and the nonprofit sector. Follow him on Twitter, Facebook, Google+.

Share this on:

15 comment

  3. Something else worth noting for people turning up on this page;
    I had this same issue (exactly the same error) – and it turned out to be that the person who reported the issue was repeatedly calling the same file in a non-stop loop, and http-Security.conf had been setup for DDOS protection ;)

    Added the IP into whitelist, slapped a few wrists, and all is well again!

    FingAZ

    Reply Report comment

    1. Hi FingAZ!

      I’m having the exact same problem you stated, about people calling the same file non-stop. This has been a real problem for me, especially with scripts using AJAX. However, I am a newbie in Linux/CentOS. Could you please clarify about the http-Security.conf? Is it a file? I haven’t found it in my system.
      Thanks in advance!

      Reply Report comment

      1. I finally discovered what the problem was: mod_evasive. Because of this I kept getting too many false positives, especially with AJAX. I disabled it and everything works fine now. :)

        Reply Report comment

  10. Hi. Thanks for the tip, but it still didnt work when i tried accessing a server located on a local machine
    So i found this article which also mentions ACL and it solved by adding this to the section which you had above.
    Allow from 127.0.0.0/255.0.0.0 ::1/128

    Reply Report comment

  11. I have been getting these errors also but when I check them against my blocked IP addresses I found that they were all from IP that I had already blocked. So for me it looks like my IP filters are working.

    Reply Report comment

  13. Hai sir,

    i was as accessing login page of this url, 403 forbidden error was encounterd, evevn i change change permission for that file in cpanel and also while edit .htaccess file internal server error occur

    what i do plz help me

    thanks

    Reply Report comment

Leave a Comment

Tagged as: Tags , , , , , , , ,