Hi,

My apache server responds to requests for domains that it is not configured for. There is something wrong with my virtual host configuration. Though, I tried a couple of different things myself, I couldnt solve it yet.

I have 4 sites configured on my apache.

1- example.com.conf

<VirtualHost *:80>                                                                                    
     ServerAdmin admin@example.com                                                                    
     ServerName www.example.com                                                                      
     DocumentRoot /var/www/example.com/public_html/                                                   
     ErrorLog /var/www/example.com/logs/error.log                                                     
     CustomLog /var/www/example.com/logs/access.log combined                                          
</VirtualHost> 

2- drop.example.com.conf

<VirtualHost *:80>                                                                                    
     ServerAdmin admin@example.com                                                                    
     ServerName drop.example.com                                                                      
     DocumentRoot /var/www/drop.example.com/public_html/                                                   
     ErrorLog /var/www/drop.example.com/logs/error.log                                                     
     CustomLog /var/www/drop.example.com/logs/access.log combined                                              
</VirtualHost>

3- webmail.example.com.conf
I use this only to forward http requests to https

<VirtualHost *:80>                                                                                    
     ServerAdmin admin@example.com                                                                   
     ServerName webmail.example.com                                                                  
     Redirect / https://webmail.example.com                                                           
</VirtualHost>

4- s.webmail.example.com.conf

<IfModule mod_ssl.c>                                                                                  
        <VirtualHost *:443>                                                                           
     ServerAdmin admin@example.com                                                                    
     ServerName webmail.example.com                                                                   
     DocumentRoot /var/www/webmail.example.com/public_html/                                           
     ErrorLog /var/www/webmail.example.com/logs/error.log                                             
     CustomLog /var/www/webmail.example.com/logs/access.log combined                                  
                                                                                                      
SSLEngine on                                                                                          
                                                                                                      
SSLCertificateFile      /etc/ssl/localcerts/example.pem                                              
SSLCertificateKeyFile /etc/ssl/localcerts/example.key                                                
                                                                                                      
                                                                                                      
        </VirtualHost>                                                                                
</IfModule>

Everything works fine with this config but the problem is it also works extra.
I have an DNS entry like xyz.example.com and when I try to reach that domain name through my browser like http://xyz.example.com Virtual Host #2 is being served and when I try to reach it with a secure connection like https://xyz.example.com the site #4 is being served by apache.

I don't want that. I don't want any sites being served from my apache unless I specifically configure for it and yet I don't have a configuration for xyz.example.com

I tried a couple of things myself, like using ServerAlias directive and some more but didn't help so far.

Please help me to configure my apache properly.

Thanks...

Try running this command

commandX 

If that doesn't work, try

commandY

followed by

commandZ

Or maybe you could post the real info so that people don't have to waste their time playing 20 questions.

Repeat this little mantra a few hundred times: "Security thru Obscurity is a MYTH"

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.

This explains what Apache is doing: https://httpd.apache.org/docs/2.2/vhosts/details.html

_________________

/* TODO: need to add signature to posts */

@vonskippy

Thank you so much for taking the time, appreciated.
I hope you solve you issues (whatever they are) and be happy with your life soon.

vonskippy is critical of people who ask for help, yet obscure publically available information (server names, etc). Most of the rest of us just ignore posts like that. If we can't see it, we can't help fix it.

_________________
/ Peter

duraturk,
In case you haven't resolved your issue yet you should know that the 'default' site served is the first to occur alphabetically in your sites-available directory. This happens when your IP address is used to connect to your server or a subdomain that isn't defined in a vhost file. BTW, if you use a '@' A Record in your DNS any subdomain will end up getting to your server.

What I do is set up a vhost file for my server's IP address (filename is the IP address and the ServerName is the IP address). The index.html file is empty so any access via the IP address or a non-existent subdomain ends up serving up the empty page. This works because alphabetically the IP address occurs before any alphabetic site.

Ohhh yeah, I did like you said and it works just fine
Thank you so much....