httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeff Trawick <traw...@gmail.com>
Subject Re: server-status and privacy
Date Mon, 21 Jun 2010 17:07:46 GMT
On Mon, Jun 21, 2010 at 8:40 AM, Jim Jagielski <jim@jagunet.com> wrote:
> There have been a few reports regarding how server-status "leaks"
> info, mostly about our (the ASF's) open use of server-status and
> how IP addresses are exposed.
>
> I'm thinking about a patch that adjusts server-status/mod_status
> to have a "public vs. private" setting... Public would be to
> have IP addresses exposed as public info; private would be to
> not expose 'em (keep 'em private).

use mod_sed or similar on apache.org to change the client IP address
field to "?"

Mime
View raw message