7:36 a.m.
http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsource
=halifaxcoukHOME/ on your server is being used as a phishing site.
8:09 a.m.
On Fri, 2008-05-30 at 08:36 -0400, Eastham, David (PA) wrote:
http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsource=...
on your server is being used as a phishing site.
What you're seeing is a test page included with the Fedora Linux
distribution; we don't actually run that server. You can do a WHOIS
query in order to find out who is actually responsible for that server.
--
Ignacio Vazquez-Abrams <ivazqueznet(a)gmail.com>
8:27 a.m.
On Jumee 10 Khordad 1387 17:39:34 Ignacio Vazquez-Abrams wrote:
On Fri, 2008-05-30 at 08:36 -0400, Eastham, David (PA) wrote:
> http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsource=
>halifaxcoukHOME/ on your server is being used as a phishing site.
What you're seeing is a test page included with the Fedora Linux
distribution; we don't actually run that server. You can do a WHOIS
query in order to find out who is actually responsible for that server.
I think in the next release we should remove the test page, because it
redirects people wrongly to the fedora site.
Any Idea?
--
Mostafa Baloch
http://www.mdaneshvar.ir
8:50 a.m.
On Fri, 30 May 2008, Mostafa Daneshvar wrote:
On Jumee 10 Khordad 1387 17:39:34 Ignacio Vazquez-Abrams wrote:
> On Fri, 2008-05-30 at 08:36 -0400, Eastham, David (PA) wrote:
> > http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsource=
> >halifaxcoukHOME/ on your server is being used as a phishing site.
>
> What you're seeing is a test page included with the Fedora Linux
> distribution; we don't actually run that server. You can do a WHOIS
> query in order to find out who is actually responsible for that server.
I think in the next release we should remove the test page, because it
redirects people wrongly to the fedora site.
Any Idea?
What should be there in its place?
-Mike
8:59 a.m.
On Jumee 10 Khordad 1387 18:20:12 Mike McGrath wrote:
On Fri, 30 May 2008, Mostafa Daneshvar wrote:
> On Jumee 10 Khordad 1387 17:39:34 Ignacio Vazquez-Abrams wrote:
> > On Fri, 2008-05-30 at 08:36 -0400, Eastham, David (PA) wrote:
> > > http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsou
> > >rce= halifaxcoukHOME/ on your server is being used as a phishing site.
> >
> > What you're seeing is a test page included with the Fedora Linux
> > distribution; we don't actually run that server. You can do a WHOIS
> > query in order to find out who is actually responsible for that server.
>
> I think in the next release we should remove the test page, because it
> redirects people wrongly to the fedora site.
> Any Idea?
What should be there in its place?
-Mike
I think a dynamic file like .php isn't bad. This file should list all files
and folders in '/var/www/html' with proper links.
--
Mostafa Baloch
http://www.mdaneshvar.ir
9:16 a.m.
On Fri, 2008-05-30 at 18:29 +0430, Mostafa Daneshvar wrote:
On Jumee 10 Khordad 1387 18:20:12 Mike McGrath wrote:
> On Fri, 30 May 2008, Mostafa Daneshvar wrote:
> > On Jumee 10 Khordad 1387 17:39:34 Ignacio Vazquez-Abrams wrote:
> > > On Fri, 2008-05-30 at 08:36 -0400, Eastham, David (PA) wrote:
> > > >
http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsou
> > > >rce= halifaxcoukHOME/ on your server is being used as a phishing
site.
> > >
> > > What you're seeing is a test page included with the Fedora Linux
> > > distribution; we don't actually run that server. You can do a WHOIS
> > > query in order to find out who is actually responsible for that server.
> >
> > I think in the next release we should remove the test page, because it
> > redirects people wrongly to the fedora site.
> > Any Idea?
>
> What should be there in its place?
>
> -Mike
I think a dynamic file like .php isn't bad. This file should list all files
and folders in '/var/www/html' with proper links.
That would mean that anytime an HTTP server is installed, PHP would have
to be installed as well.
9:23 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Basil Mohamed Gohar wrote:
On Fri, 2008-05-30 at 18:29 +0430, Mostafa Daneshvar wrote:
> I think a dynamic file like .php isn't bad. This file should list all files
> and folders in '/var/www/html' with proper links.
>
That would mean that anytime an HTTP server is installed, PHP would have
to be installed as well.
and if it's just to get the links, you don't need of php ... httpd does
it already for you
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkhADe8ACgkQUSr9JAjXM7pGOwCeJbSLipYOI5kRmEZqjqr55c8n
tx0AnAy82ASB6QJGVYm/RnuL00EjrgMp
=4nHt
-----END PGP SIGNATURE-----
9:37 a.m.
On Fri, 2008-05-30 at 16:23 +0200, Giulio Fidente wrote:
Basil Mohamed Gohar wrote:
> On Fri, 2008-05-30 at 18:29 +0430, Mostafa Daneshvar wrote:
>> I think a dynamic file like .php isn't bad. This file should list all files
>> and folders in '/var/www/html' with proper links.
>>
>
> That would mean that anytime an HTTP server is installed, PHP would have
> to be installed as well.
>
>
and if it's just to get the links, you don't need of php ... httpd does
it already for you
The default setup, however, is that there is no index.(html|php)
present, so it shows the default installation script. A change to
httpd.conf would need to be made to first allow directory listings by
default, and then to not display the localized default page
for /var/www/html. But I think this discussion isn't for this
list...right?
11:57 a.m.
2008/5/30 Basil Mohamed Gohar <abu_hurayrah(a)hidayahonline.org>:
The default setup, however, is that there is no index.(html|php) present, so
it shows the default installation script. A change to httpd.conf would need
to be made to first allow directory listings by default, and then to not
display the localized default page for /var/www/html.
Directory indexes are allowed by default. However, there's
configuration in welcome.conf to display the proper test page if the
index file does not exist. On every webserver I set up, one of the
first things that I do is to remove the welcome.conf. I haven't read
the page included in welcome.conf in a long time, but I do know that
the default upstream Apache one says "Don't contact Apache about this,
we're not responsible for the contents". If the Fedora one had
similar wording, in big bold letters, that *might* help (though I'm
sure that the ASF gets their fair share of these, too).
But I think this
discussion isn't for this list...right?
Yeah, maybe move it to f-devel.
12:05 p.m.
2008/5/30 Mostafa Daneshvar <mostafa(a)daneshvar.org.uk>:
On Jumee 10 Khordad 1387 17:39:34 Ignacio Vazquez-Abrams wrote:
> On Fri, 2008-05-30 at 08:36 -0400, Eastham, David (PA) wrote:
> > http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsource=
> >halifaxcoukHOME/ on your server is being used as a phishing site.
>
> What you're seeing is a test page included with the Fedora Linux
> distribution; we don't actually run that server. You can do a WHOIS
> query in order to find out who is actually responsible for that server.
I think in the next release we should remove the test page, because it
redirects people wrongly to the fedora site.
Any Idea?
I don't think we are asking too much that people read. I think we
should simply stop answering these emails when the person obvious is
capable of comprehending English, but failed to read the page.
--
Fedora 7 : sipping some of that moonshine
( www.pembo13.com )
10:21 a.m.
Thank you
-----Original Message-----
From: Ignacio Vazquez-Abrams [mailto:ivazqueznet@gmail.com]
Sent: Friday, May 30, 2008 9:10 AM
To: Eastham, David (PA)
Cc: webmaster(a)fedoraproject.org
Subject: Re: Phishing
On Fri, 2008-05-30 at 08:36 -0400, Eastham, David (PA) wrote:
http://ww2.halifax-online.co.uk.fzkgoo6.com/mem_bin/formslogin.aspsource
=halifaxcoukHOME/ on your server is being used as a phishing site.
What you're seeing is a test page included with the Fedora Linux
distribution; we don't actually run that server. You can do a WHOIS
query in order to find out who is actually responsible for that server.
--
Ignacio Vazquez-Abrams <ivazqueznet(a)gmail.com
5809
days inactive
5809
days old
websites@lists.fedoraproject.org
10 comments
8 participants
participants (8)
-
Arthur Pemberton -
Basil Mohamed Gohar -
Eastham, David (PA) -
Giulio Fidente -
Ignacio Vazquez-Abrams -
Jon Stanley -
Mike McGrath -
Mostafa Daneshvar