6

I want to block access to my web server by default as a precaution but I keep getting the following errors showing up in my error log.

[Wed Jun 27 23:30:54 2012] [error] [client 86.77.20.107] client denied by server configuration: /home/www/default/Edu.jar

[Wed Jun 27 23:32:40 2012] [error] [client 86.77.20.107] client denied by server configuration: /home/www/default/REST.jar

[Wed Jun 27 23:35:39 2012] [error] [client 86.77.20.107] client denied by server configuration: /home/www/default/Set.jar

[Thu Jun 28 01:01:17 2012] [error] [client 58.218.199.227] client denied by server configuration: /home/www/default/proxyheader.php

[Thu Jun 28 02:34:57 2012] [error] [client 58.218.199.227] client denied by server configuration: /home/www/default/proxy.php

[Thu Jun 28 05:41:33 2012] [error] [client 58.218.199.227] client denied by server configuration: /home/www/default/proxyheader.php

[Thu Jun 28 06:55:10 2012] [error] [client 180.76.6.20] client denied by server configuration: /home/www/default/

[Thu Jun 28 07:31:26 2012] [error] [client 86.77.20.107] client denied by server configuration: /home/www/default/Edu.jar

[Thu Jun 28 07:32:25 2012] [error] [client 86.77.20.107] client denied by server configuration: /home/www/default/REST.jar

[Thu Jun 28 07:36:10 2012] [error] [client 86.77.20.107] client denied by server configuration: /home/www/default/Set.jar

I don't really want these errors to show up but whatever I do, I can't get rid of them. Does anyone know how I can achieve this?

Here is a copy of my configuration.

<VirtualHost *:80>
    DocumentRoot /home/www/default

    <Directory />
           AllowOverride None
           Order Deny,Allow
           Deny from all
    </Directory>

    #ErrorLog /var/log/apache2/error.log
    #LogLevel warn
    CustomLog /var/log/apache2/access.log combined
</VirtualHost>
Keith
  • 63
  • 1
  • 3

3 Answers3

8

I found this question for the same reason, but I wasn't OK with hiding ALL error type logs, so I looked around and found out you can set the LogLevel of just a single module since Apache HTTP Server 2.3.6, so for the client denied requests, which use the access_compat module you can add this

LogLevel warn access_compat:crit

Which will set the default level to warn but only shows crit access_compat logs, this keeps your ability to see other error type logs

I know this is older, but I hope it's a better solution for others in the future.

Tom Kuschel
  • 103
  • 3
thegaffney
  • 245
  • 2
  • 8
1

Have you tried

LogLevel crit

http://httpd.apache.org/docs/2.0/mod/core.html#loglevel

Jay
  • 6,544
  • 25
  • 34
0

An alternative is to make use of Apache's piped logging feature and apply a filter before writing the log: 

ErrorLog "|/bin/grep -v "client denied by server configuration" | /usr/local/apache/bin/rotatelogs /var/log/error_log 86400"
HBruijn
  • 77,029
  • 24
  • 135
  • 201