Blogging Techstacks

Tomcat Connectors v1.2.31 Released

The Apache Tomcat Connectors team has released v 1.2 31 today.  Tomcat Connectors are also commonly known as mod_jk (for the apache web server), isapi_redirect.dll (for IIS), and nsapi_redirector.so (for iplanet).  The changelog indicates a relatively small number of fixes and enhancements but the three that stood out for me are:

• Apache 2.3/2.4 support was enabled in mod_jk.
• IIS adds apache rotatelogs-style support to generated log files, (no more multi-gigabyte jk logs).
• For those of us interested in this level of detail, we can now log local and remote ports.

Download it from a mirror near you!

Scanning for Unsafe URLs - Update 1

So, after writing it, I had an opportunity to tweak the scripts a little.  I added a couple more URLs to reject in the irule but I've been having some fun dealing with redirection.  I modified the perl script a little to prevent it from automatically following redirects because I was getting some false positives on sites where the url issued a 301 or 302 redirect.  This doesn't seem optimal yet so I expect another update will be out soon. 

Once doing the change for redirection, however, I had to then tweak the URLs being scanned for to include the full URL.  I don't know how trustworthy the IIS URLs are yet--I'm going to try to find a box to test with later this week.

See the original post for the updated scripts.

Apache Tomcat Connectors 1.2.30 Released

Due to errors with the IIS Connector, the previously announced version 1.2.29 of the Tomcat Connectors was pulled and replaced with version 1.2.30 today.  

Download it from the Tomcat Connectors mirror site near you.  The changelog has been updated to erase all memory of version 1.2.29.