Unix apache server: only PHP code can bve malicious?

I'm working on a site where users can write their own code,
then the code gets rendered in the page.
I realize that if they write PHP code, they can do anything.
So to be safe I should take out
anything between <? and ?> from the code they post.
what else? what kind of code can really do damage, on a Unix
server running Apache?
seb ( [email protected])
http://webtrans1.com | high-end web
design
Downloads: Slide Show, Directory Browser, Mailing List

> Is this going to be a major security risk, no matter how
I screen the
> code?
I would think so, yes, but I'm quite far from a security
whiz....
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.dreamweavermx-templates.com
- Template Triage!
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
http://www.macromedia.com/support/search/
- Macromedia (MM) Technotes
==================
"(_seb_)" <[email protected]> wrote in message
news:ejv316$hcr$[email protected]..
> Murray *ACE* wrote:
>> What would be an example of the kind of code they
*could* write, seb?
>>
>
> example:
>
> <object width="425" height="350"><param
name="movie"
> value="
http://www.youtube.com/v/kUsUGaTBChw"></param><param
name="wmode"
> value="transparent"></param><embed
> src="
http://www.youtube.com/v/kUsUGaTBChw"
> type="application/x-shockwave-flash" wmode="transparent"
width="425"
> height="350"></embed></object>
>
> (this is the embed-code for displaying a youtube video
on any page)
>
> other example:
>
> <font>Cool, so i can customize this?</font>
> <h1>WOW</h1>
> <table height="200%">
> i'm a bit retarded but that sounds like fun
> </tr>
> <table>
>
>
> The code will be rendered in an iframe, so I don't care
if they write
> broken html - that's their business. But I should not
allow javascript,
> and I'd like to make sure they can't full-around with
the server (Linux,
> Apache PHP).
>
> Is this going to be a major security risk, no matter how
I screen the
> code?
>
>
> --
> seb ( [email protected])
>
http://webtrans1.com | high-end web
design
> Downloads: Slide Show, Directory Browser, Mailing List

Similar Messages

URGENT PLEASE:How can I run a a class file on the Apache server?

Hi Guys and Gurus,
I am seeking some favor all of experienced gurus, i.e.
How can I run a a class file on the Apache server? Can I run through an Applet?
How can I set Environment variables in Windows2000 Professional Environment?
Actually, I want to extract some records from a MySQL Database running on Apache Server. I wrote a program just to select the columns and show them. It is now a Class file, Now how can I run this class file from the Server???
The code is here
import java.sql.*;
public class RecordShow {
public static void main(String args[]) {
String url = "jdbc:mysql://localhost/myhost";
Connection con;
String query = "select mytable.column," +
"from mytable " +
"where mytable.column = 1";
Statement stmt;
try {
Class.forName("com.mysql.jdbc.Driver");
} catch(java.lang.ClassNotFoundException e) {
System.err.print("ClassNotFoundException: ");
System.err.println(e.getMessage());
try {
con = DriverManager.getConnection(url,
"myuser", "mypassword");
stmt = con.createStatement();
ResultSet rs = stmt.executeQuery(query);
ResultSetMetaData rsmd = rs.getMetaData();
int numberOfColumns = rsmd.getColumnCount();
int rowCount = 1;
while (rs.next()) {
System.out.println("Row " + rowCount + ": ");
for (int i = 1; i <= numberOfColumns; i++) {
System.out.print(" Column " + i + ": ");
System.out.println(rs.getString(i));
System.out.println("");
rowCount++;
stmt.close();
con.close();
} catch(SQLException ex) {
System.err.print("SQLException: ");
System.err.println(ex.getMessage());
Please advise... THANKS
VJ

Ehm, I wasn't referring to you at all... read up,
there's a comment by jschell saying that CGI might be
easier/better for his purposes.
Yep.
I know PHP/Perl/whatever might be easier for some
purposes, but only if you happen to know them and want
to/are able to use them. Ok. But you aren't the one asking the question are you. And the person who asked the question seems to have absolutely no familiarity with Apache or applets.
So whatever they do they are going to have to learn a lot.
And that does indeed suggest that in all likelyhood they have not investigated the alternatives.
And for the vast majority of internet applications, especially with smaller projects (obvious this person is not working with a large team), using perl, or something besides java, is going to be the best business solution. It is simpler, and more secure (probably due to the fact that it is simpler.)
Since this is a Java forum, I
answer under the assumption that people have made a
choice one way or another to use a Java solution to
their problem, so I try to solve it in Java first, and
only when that fails (very seldom) do I turn to other
solutions.You approach problems by arbritrarily deciding to try to solve it in java first and only if you fail do you then look to other solutions?
My first step is to try to figure out which of the various avenues is going to cost less. (And a secondary, but non-trivial concern, is then to convince the customer that just because they have heard of a buzz word like 'enterprise bean' that it doesn't mean that is a cost effective solution.) We must come from different worlds.

How to install Apache Web Server with PHP on Sun Solaris Sparc machine

Hi,
We are trying to install the Apache Web Server and the PHP package on a Sun Solaris Sparc machine running on SunOS 5.8. We are having compilation problems with the source code of both these packages.
Does anybody know if there are ready solaris packages for Apache and PHP available from where we can download and install instead of source code compilation?
Or any instructions / things to watch for when installing Apache with PHP (if anybody has tried installing Apache with PHP on Sun Solaris earlier) is most welcome.
Thanks,
Harish

Apache should be bundled along with Solaris check in "/var/apache" in Solaris 8 and Solaris 9
php is available at www.php.net
I found an old document for installing PHP maybe this will help.
Cheers
-Dhruva
+++++++++++++++++++++++++++++++++++++++++++++++++++++++Installing PHP 3.x for Apache 1.x.x on Solaris
Introduction
This document describes how to install PHP for Apache on Solaris.
You should have Apache installed before trying to install PHP.
If you want to use PHP with MySQL then you must install MySQL first.
Before we Begin
1. These instructions assume that you have Apache installed according to instructions.
Getting PHP
1. You must be logged in as root to perform this installation.
su root
2. I save all my downloads in:
/usr/local/dist
If you don't already have one, you may need to create that directory now:
mkdir /usr/local/dist
3. You can get PHP 3.0.14 from here(www.php.net).
cd /usr/local/dist
ftp ftp.php.net
cd pub/distributions
bin
get php-3.0.14.tar.gz
bye
Installing PHP
1. We will install PHP in /usr/local/build, but use a tricky tar command
to do it in on hit from the download directory:
cd /usr/local/dist
tar xvfz php-3.0.12.tar.gz -C ../build
Compiling PHP
1. First let's get where the action is:
cd /usr/local/build/php-3.0.14
2. You now have 3 options:
* Simple PHP install without MySQL - goto step 3
* Simple PHP install with MySQL - goto step 4
* Custom PHP install - goto step 5
3. Simple PHP install without MySQL. Next, jump to step 6.
./configure --with-apache=../apache_1.3.12
4. Simple PHP install with MySQL. MySQL must be installed before you can configure PHP to use it. I recommend that MySQL should always be reachable with /usr/local/mysql. Even if you install it else where you
should create a symbolic link from /usr/local/mysql. Otherwise the compiler can have problems finding the mysqlclient library. The command
should look like this:
./configure with-mysql=/usr/local/mysql with-apache=../apache_1.3.12
Next, jump to step 6.
5. Custom PHP install. Take a look at the available configuration directives by using this command:
./configure --help
6. Now we can make the PHP executable. This may take a while.
make
7. Now we install the PHP module with:
make install
Adding the PHP Module to Apache
1. Now we have to setup Apache to include the PHP module:
cd ../apache_1.3.12
2. Re-configure Apache to use the PHP module. You should use your previous Apache configure command along with the PHP activate module directive.
You can see your previous Apache configure command by doing:
cat config.status
You can configure Apache using the previous command with the added PHP module by doing:
./config.status --activate-module=src/modules/php3/libphp3.a
If you used the simple Apache install from instructions the command will look like this:
./configure prefix=/usr/local/apache activate-module=src/modules/php3/libphp3.a
3. Make and install Apache with PHP enabled:
make
4. We need to stop the server before installing the files:
/usr/local/apache/bin/apachectl stop
5. Now we can install the new binaries:
make install
6. Start apache again (now running the new php enabled version):
/usr/local/apache/bin/apachectl start
Setting Up PHP
1. We have to tell Apache to pass certain file extensions to PHP. We do this in Apache's httpd.conf file.
cd /usr/local/apache/conf
2. Edit the httpd.conf file. If you do a search for php you will find a couple of commented out lines telling Apache to use the PHP module. You should uncomment them to look like this.
AddType application/x-httpd-php3 .php3
AddType application/x-httpd-php3-source .phps
3. I prefer to use the extension .phtml, you can use whatever extension you like (even .html) by adding lines to httpd.conf like this:
AddType application/x-httpd-php3 .phtml
Check that it Works
1. We have to restart Apache to make these changes take effect on the running server.
cd /usr/local/apache/bin
./apachectl restart
2. Apache should now be running with PHP enabled. The server version should include PHP/3.0b2.
./apachectl status
Apache Server Status for dev.synop.com
Server Version: Apache/1.3.9 (Unix) PHP/3.0.12
Server Built: Oct 25 1999 00:37:07
3. Now it is time to test PHP with a page. The simplest thing to do is create a page called test.php3. My file is here. This file contains the
following text:
<?php phpinfo(); ?>
4. Point your browser at this file on the virtual host which you used:
http://localhost/test.php3

Can i enter php code into html snippets?

I am an sql/php newbie ... and have my site hosted by a company which offers me sql and php hosting (unlike dotmac I understand) ...
I have created an sql database on their server and have written a page in html/php to display the results of a simple search ... can I insert this into iweb page using snippet - as I have tried and get a page cannot be displayed message where the snippet box would be on the webpage. (you can see this by clicking on the guestbook link on www.antandcleopuss.com)
I am wondering if iweb can insert php or if it is only html?
If iweb doesn't like php inserts then I will have to export my pages to a folder, then open them in a text editor to insert the php there?? (seems like an awfully long way round)
Any help gratefully received
ant

You can add PHP code AFTER publishing the webpage.
Then change the extension to .php.
Here's a page the explains how to do it. It's not PHP specific but the routine is the same.
http://web.mac.com/wyodor/Ajax/
Of course you can add a PHP page to the HTML Snippet with an iframe.

How can i create datasource on apache server for ADF application?

Hi All,
i my use case i have created simple adf application using ADF BC and want to deploy on Apache server 6.x.
So my question is that how can i create Data Source i have goggling and find two different way to do this.
1. write following line of code on apache server conf/Context.xml file.
<Resource name="jdbc/TestDB" auth="Container"
              type="javax.sql.DataSource"
               driverClassName="oracle.jdbc.OracleDriver"
              url="jdbc:oracle:thin:@localhost:dst"
              username="jagrandb" password="jagrantest" maxActive="20" maxIdle="10"
              maxWait="-1"/>
but when i have used this way i got following exception.
org.apache.tomcat.dbcp.dbcp.PoolingDataSource$PoolGuardConnectionWrapper cannot be cast to oracle.jdbc.OracleConnection
check link-
https://forums.oracle.com/thread/2564233
2. write following line of code apache conf/Server.xml file
<GlobalNamingResources>
    
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
<Resource name="jdbc/TestDB" auth="Container"
              type="oracle.jdbc.pool.OracleDataSource"
              description="User database that can be updated and saved"
              driverClassName="oracle.jdbc.driver.OracleDriver"
              factory="oracle.jdbc.pool.OracleDataSourceFactory"
              url="jdbc:oracle:thin:@//172.31.43.207:1521:dst"
              username="jagrandb" password="jagrantest" maxActive="20" maxIdle="10"
              maxWait="-1"   />
</GlobalNamingResources>
and add this line in context.xml file inside <context> tag
<ResourceLink global="jdbc/TestDB" name="jdbc/TestDB" type="oracle.jdbc.pool.OracleDataSource"/>
but when i have run application i have got following error
log-
javax.servlet.jsp.JspException: Unable to get connection, DataSource invalid: "java.sql.SQLException: invalid arguments in call"
at org.apache.taglibs.standard.tag.common.sql.QueryTagSupport.getConnection(QueryTagSupport.java:298)
at org.apache.taglibs.standard.tag.common.sql.QueryTagSupport.doStartTag(QueryTagSupport.java:181)
at org.apache.jsp.test_jsp._jspx_meth_sql_005fquery_005f0(test_jsp.java:110)
at org.apache.jsp.test_jsp._jspService(test_jsp.java:63)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:374)
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:857)
at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:565)
at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1509)
at java.lang.Thread.run(Thread.java:662)
Aug 2, 2013 5:17:21 PM org.apache.catalina.core.StandardWrapperValve invoke
SEVERE: Servlet.service() for servlet jsp threw exception
javax.servlet.jsp.JspException: Unable to get connection, DataSource invalid: "java.sql.SQLException: invalid arguments in call"
at org.apache.taglibs.standard.tag.common.sql.QueryTagSupport.getConnection(QueryTagSupport.java:298)
at org.apache.taglibs.standard.tag.common.sql.QueryTagSupport.doStartTag(QueryTagSupport.java:181)
at org.apache.jsp.test_jsp._jspx_meth_sql_005fquery_005f0(test_jsp.java:110)
at org.apache.jsp.test_jsp._jspService(test_jsp.java:63)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:374)
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:857)
at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:565)
at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1509)
at java.lang.Thread.run(Thread.java:662)
so what is the solution how to create datasource on apche server which suitable for adf application?
when i test data source using following code used 1. way as i mentioned above its running fine bt not for second.
<%@ taglib uri="http://java.sun.com/jsp/jstl/sql" prefix="sql" %>
<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
<sql:query var="rs" dataSource="jdbc/TestDB">
select empname from pay_emphdr where empcd='JK1306'
</sql:query>
<html>
<head>
    <title>DB Test</title>
</head>
<body>
<h2>Results</h2>
<c:forEach var="row" items="${rs.rows}">
    Foo ${row.empname}<br/>
</c:forEach>
</body>
</html>
please help me. it is very urgent.
thanks in Advance
Manish

Hi Lindalnci
i have already tried this tutorial and in my post i have defined first way to do using this procedure.
in that case i have got following exception as i have mentioned above
org.apache.tomcat.dbcp.dbcp.PoolingDataSource$PoolGuardConnectionWrapper cannot be cast to oracle.jdbc.OracleConnection

Can't connect to Apache Server Remotely

I have set up Apache on Port 81 and I have set up port forwarding for 81 and 433 on my router but I can't seem to connect to Apache from another computer. My username is in http group.
The only way I can connect is by localhost:81
If I try ipaddress:81 I get can't establish a connection to the server.
Anyone have any ideas.
Thanks in advance!!

pluckypigeon wrote:
Sorry for all the confusion.
I just want to view Apache through a Web Browser from another machine.
I have set the port to 81 because 80 is taken by my router configuration.
If I type localhost:81 in the URL bar I can view my web server but if I type my ip address:81 it doesn't work.
No worries, this is just what I wanted. Try editing and adding to the bottom of the file /etc/httpd/conf/httpd.conf:
Listen YOUR_IP_ADDRESS:81
<VirtualHost IP_ADDRESS_HERE:81>
ServerName YOUR_SERVER_NAME
ServerAdmin YOUR_EMAIL_ADDRESS
DocumentRoot PATH TO YOUR HTML FILES
RewriteEngine On
RewriteRule /(.*) https://YOUR_IP_ADDRESS:433/$1
</VirtualHost>
<VirtualHost IP_ADDRESS_HERE:433>
ServerName YOUR_SERVER_NAME
ServerAdmin YOUR_EMAIL_ADDRESS
DocumentRoot PATH TO YOUR HTML FILES
TransferLog /var/log/httpd/local.access.log
ErrorLog /var/log/httpd/local.error.log
</VirtualHost>
I don't know if the 433 will be the secure part of your page but to have a cert attached to that, you will have to add a bit more to the VirtualHost related to 433 (you can read more about it at this link: http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html). All the parts with CAPITAL LETTERS are parts where you will probably want to add in whatever relates to your set up.
I noticed that by default, apache hosts all of their files in /srv/http so you can place all your files in there or another location (its really up to you).
After any change to the httpd.conf file, you must restart or reload the httpd service located in /etc/rc.d/httpd
Hope this helps.
::EDIT:: What 'JuseBox' is probably a great place to check as well. If your /etc/hosts.allow or /etc/hosts.deny is in play, you want to make sure you aren't denying everything or only allowing specific things into your apache server. Good call JuseBox!
Last edited by ruffedgz (2010-01-15 19:11:39)

Can a server trust *client* code without a certificate

Here's a sticky security question
I want my server to trust that a client has performed the operation it says it has on some data held by the client (the client performs the operation to reduce server load). The server can supply code to perform the operation to the client, via a serialized object or RMI.
However, I don't want every client to have to register with the server (eg if each client had its own certificate this would be necessary)
Presumably something must happen as the client performs the operation to show that the correct (server generated) code was used.
If the object whic h knows how to perform the operation is sent using RMI with a public sign method and the server lends its own private key for the signing, in a private field of this object, can a malicious client discern the private key of the server simply by deserializing the object ? Encryption of the serialized object doesn't seem to help as a normal client needs to decrypt, so the malicious one can too.
What about if a private/public key pair is generated at the server and given to the client for signing? again the malicious client could sign using the key then perform a completely different operation.
What should actually be signed at the client end - the object sent which performs the operation ? the server needs to know that this signature proves that the code it sent was used.
would be interested in any ideas (this is for a university project)
thanks to all
John

thanks for this
a policy would be fine for a server only to allow certain clients to connect - but what I want to ensure is that once connected, a client really does use the code generated by the server - in effect I want to have untrusted clients (eg anyone) to be able to connect, but I need to trust that they perform a certain operation.
I think that with RMI I can ensure that a certain method is called if the client has a true (verified...how?) java virtual machine installed, and not a malicious one... but I am coming to the conclusion that to ensure that the right code is used, I will have to give each client its own public/private key and let the server hold a register of trusted clients (which reduces the elegance of the system)
Jon

Creating local test server for PHP / Apache

Hello,
I've downloaded and installed XAMPP for Windows and I'm
trying to get a PHP-based site in Dreamweaver to be able to display
properly in the browsers using the Apache/Linux server environment.
What site settings do I need to setup ? Do I need to move site
location within the Apache server location? I also have IIS setup
and running which uses the localhost/wwwroot, so I don't know to
bypass/re-direct to the php environment.
Any help is appreciated, as you can tell, I'm not real
experienced in setting up servers/locations, etc.
Thanks,
rvanburen

try this
http://www.sebastiansulinski.co.uk/web_design_tutorials/web_server/installing_apache_php_m ysql_a.php

Getting eclipse php programs to run in Apache server

disclamer: An associate has told me that if I can make this happen without his help, he will give me programming projects designed to help me learn. This is not any sort of school assignment.
I have no previous experience with IDEs or web servers; so my learning curve is real steep, especially with no direction provided. I have spent nearly three weeks researching, and reading to enable me to run php programs on Apache server. One problem I have encountered in research is that most of the tutorials deal with Apache Tomcat and/ or Linux. I am using Eclipse and Apache for Windows, because this is the combination that my associate requires me to use.
I am including basic configuration information first, followed by a description of the problems I have encountered.
The information below reflects instructions I have gleaned from various tutorials.
Installation information:
Eclipse 4.5.0 Mars for Windows (C:\Users\will\eclipse)
php PDT plugin 3.5 (from Eclipse market place)
Apache 2.4 (C:\apache24)
php 5.6.11 (C:\php)
My hosts file has been edited to include this,
127.0.0.1 mywebsite.localdomain php
Per tutorial instructions, I have created these folders:
C:\Users\will\mywebsite
C:\Users\will\workspace
Various edits have been made in httpd.conf and httpd-vhosts.config. (I will give details upon request.) I have also created a php.ini file in C:\php.
Here is what I have experienced.
I can run my php program by typing http://mywebsite.localdomain/hello.php in the address bar of my browser. Attempting to run in Eclipse as PHP web application or run on server yields nothing. Attempting to create a new server displays Apache Tomcat options to choose from. I do not have Tomcat installed. Using file>new>other>server in Eclipse, I have not been able to successfully configure the server.
Please, give me some step-wise instructions, ask me for details of .conf files for you to examine, or other useful advice. Please, remember I am rank newbie.
Thank you for your time and replies.

On 08/11/2015 10:19 AM, Will Klem wrote:
> I have resolved half of the problem.
> I can now run my program in Eclipse as PHP web application. I deleted my
> existing files and rewrote them. I also included the files in HTDOCS (as
> well as C:\Users\will\mywebsite and C:\Users\will\workspace). I don't
> understand why this helped, but it did. As for the run on server option,
> my associate told me that I don't need to attempt this until after I
> have more experience. Then he will provide some helpful hints.
>
> I thank the many who have viewed this post for taking the time to read it.
Will,
I didn't reply for fear I wasn't understanding what you were asking.
Please note that there is an Eclipse PDT forum where you'll get more
"birds of a feather" information on Eclipse and PHP.
Hope this helps.

Can I use my WRT54G as a DHCP server only? I've got 5 dynamic IP's from Time Warner..

Hi everyone, I'm wondering if I can use my WRT54G as a DHCP server only only my network, without having to have any of my PC's plugged into it's router ports? I looked at the settings but I couldn't get it to work.
Here's why: I just got Time Warner Business Class cable internet which comes with 5 dynamic IP's. I want each computer, well 4 of them at least and 1 for the WRT54G, to have a unique IP when accessing the internet, and the other computers (5 more computers) to use the DHCP server in the WRT54G to get a NAT IP for use on the internet.
We play Diablo II on the internet and only 4 computers can be connected through 1 IP, so that limits us in my current configuration.
Current Equipment: One WRT54G, one Netgear GS116 16 port gigabit non-managed switch. One Time Warner Cable modem. Also attached to the network is one HP network printer, a Buffalo LinkStation NAS and a Zensonic Network DVD player.
Current config: Cable modem --> WRT54G --> Netgear switch.
Ideal config: Cable modem --> Netgear switch --> WRT54G.
With my current config, I am not taking advantage of the 5 dynamic IP's, but all the computers connected to the Netgear switch or the WRT54G can connect to the internet and the NAS.
So my ideal config (where I don't have to buy anything and where all the computers can print and access the NAS) is to connect all the computers and devices to the Netgear Switch and somehow force 4 of the computers and the WRT54G to get a dynamic IP from the cable modem, while the other computers and devices use the DHCP server on the WRT54G to get to the internet.
Is this possible?
I called Time Warner Cable and they weren't any help. I called the Linksys sales department and they weren't of much help either.
I suppose that I could purchase a new 8 port switch and attach 4 computers, the cable modem and the WRT54G to it. Then attach the Netgear to the WRT54G to accomodate the printer, NAS, and the other 5 computers. But in that senario, the 4 computers connected to the new switch can't print and can't reach the NAS. And geez, some computers would have to go through 3 devices to reach the internet, which has got to slow them down.
I did read about the Linksys EFG120 which has a DHCP server, but at $400 and only 120 gigs, it doesn't work for me.
I called Time Warner and the cost of more dynamic IP's is prohibitive, I'm already paying $79 a month for this internet and they want another $50 a month for 7 more dynamic IP's and that wouldn't help my NAS or my printer.
The cost of a 16 port gigabit switch with DHCP is an amazing $800 or so, which is out of the question.
Sorry for being so long winded and thanks for reading this far. I'm looking forward to any replies.

That is a hell of a setup. I don't know if it would be easier and cheaper to either buy a real router like a Cisco, get fixed IP addresses and a RV042, or buy 4 network cards for the four of the five computers which need the internet access for gaming.
O.K. First your setup:
1. You wire the modem to the 6-port switch.
2. You connect the remaining 5 ports with the WAN ports of 5 WRTs with DHCP on the WAN interface.
3. You configure each WRT with unique LAN IP addresses in the same subnet, e.g. 192.168.1.1/255.255.255.0, 192.168.1.2, 192.168.1.3, 192.168.1.4, 192.168.1.5.
4. You turn off all DHCP servers except on one, e.g. 192.168.1.1. That router will be the default router and internet connection for any client which gets dynamic LAN addresses (as fallback or guests, I would not configure the NAS or printer with DHCP addresses if you have everything else on static IP addresses). You can certainly disable all DHCP servers if you want, too.
5. Now you connect all WRTs with each other.
5a. You connect port 1 of the 1st WRT with port 1 of the 2nd.
You connect port 2 of the 2nd with port 1 of the 3rd.
Port 2 of the 3rd with port 1 of the 4th.
Port 2 of the 4th with port 1 of the 5th.
(Do not create a loop connecting port 2 of the 5th with port 2 of the 1st!!)
5b. You buy another switch and connect each port 1 of each router with this switch. This has the advantage that you don't have a long cascade between the 1st and the 5th router like in 5a.
6. You connect all devices to the LAN.
6a. If you did 5a, you will probably put each computer to the router which internet connection it uses. The NAS and printer could go anywhere.
6b. If you did 5b, you hopefully bought a 16 or 24 port switch. Then you plug simply everything into that switch. Otherwise you can certainly use the free ports of the WRTs like in 6a.
7. You configure all your devices with static IP addresses. For instance,
IP 192.168.1.11
netmask 255.255.255.0
gateway 192.168.1.1
For the DNS servers I would highly recommend to use the DNS servers of your ISP directly and not use the relay on 192.168.1.1.
The gateway address defines through which router the computer connects to the internet.
8. You may still have to configure port forwardings on the router to the game computer if required for the game.
An interesting alternative to this setup might be to buy 4/5 network cards for the 4/5 computers with direct internet access. Then you use the one network card to connect to your single LAN behind your single WRT. The other network card goes into the switch behind the modem and has direct internet access. You then have to tell Windows which of the network cards has the default gateway for the internet connection (to prevent routing all traffic through the LAN and the WRT to the internet). One game computer would have to be behind the WRT.

How can I run a a class file on the Apache server?

Hi Guys and Gurus,
I am seeking some favor all of experienced gurus, i.e.
How can I run a a class file on the Apache server?
Actually, I want to extract some records from a MySQL Database running on Apache Server. I wrote a program just to select the columns and show them. It is now a Class file, Now how can I run this class file from the Server???
Please advise...
VJ

cross posted
http://forum.java.sun.com/thread.jsp?thread=299137&forum=31&message=1184025

Can't figure out how to install sql server for PHP

I am trying to install SQL Server for PHP on a server with Server 2008 32 bit. The exe from http://www.microsoft.com/en-us/download/details.aspx?id=20098 keeps tell me that it is an invalid win32 application. I've tried running as administrator
as well. Somewhere I read you need to open the exe with 7zip. I was able to do that and see all the files in there, but where do I go from there?
Thanks
Mike
edit: forgot to mention I'm using Apache for my server

That solution is obsolete. The current solution is here:
http://msdn.microsoft.com/en-us/sqlserver/ff657782.aspx
bill ross

How can I set firefox as default browser in citrix server, only for few groups. does -silent -setdefaultbrowser option working in latest version?

How can I set firefox as default browser in citrix server, only for few groups. does -silent -setdefaultbrowser option working in latest version?

I think so: [http://discussions.citrix.com/topic/330585-firefox-default-browser-for-all-users/]
Can you also set the default programs in the Group Policy User Settings?
Reference: [http://community.spiceworks.com/topic/884740-default-user-profile-in-citrix-environment]

I got Code and Name in dropdown list of domain-based, how can I only show code without name in MDS excel add-in?

Hi,
We can use the setting on MDS webpage's Explorer to change the result of display.
From Code{Name} to only display Code or Name{Code}
How could I change the result of display like MDS webpage's Explorer in MDS excel add-in?
We want the dropdown only show Code in it without Name even do not display symbol of {}.
Thanks in advance for the help.

Hi,
To the best of my knowledge that's not possible.
You should try to leave some feedback on this part of the product at connect.microsoft.com
Regards, Fredrik

Cannot use file for clustered server. Only formatted files on which the cluster resource of the server has a dependency can be used. Either the disk resource containing the file is not present in the cluster group or the cluster resource of the Sql Serve

Hi
Windows serv 2012 cluster on sql 2012 cluster with 2 instance. on works fine , Second instanc ewhen i try to creat DB a get this message.
Cannot use file for clustered server. Only formatted files on which the cluster resource of the server has a dependency can be used. Either the disk resource containing the file is not present in the cluster group or the cluster resource of the Sql
Server does not have a dependency on it.
CREATE DATABASE failed. Some file names listed could not be created. Check related errors. (Microsoft SQL Server, Error: 5184)
Any help please
kam
KAMEL

Hi Saurabh
Exactly I have SQL SERVER 2012
Failover Clustering in windows server 2012 with two nodes with
two instances and exactly I run them in the same server and each instance with
three drives Backup, Data and log.
KAMEL

Unix apache server: only PHP code can bve malicious?

Similar Messages

Maybe you are looking for