[HECnet] Web-server under RSX-11M-PLUS

Oh, it's definitely automated. It's just interesting to see how quick you start getting scanned by the bots and script kiddies. And it's a good source of information of the most common problems in the "big" server software distributions... Johnny On 2012-04-14 09:50, Sampsa Laine wrote: That's probably just an automated scan..I get tons of those on any open port, it's kinda funny watching people trying to log in as root on a VMS box, over and over again. Sampsa On 14 Apr 2012, at 01:58, Johnny Billquist wrote: By the way, anyone want to help do a first (simple) page with some more meaningful content to serve from MIM/MADAME? (Oh, and this is an interesting flytrap. The URLs some people are already sending to it is hilarous...) As an example: Fri, 13 Apr 2012 13:17:00 GMT (120.204.196.235:44391) GET /mysqladminconfig/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:01 GMT (120.204.196.235:44492) GET /mysql-admin/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:05 GMT (120.204.196.235:45337) GET /MySQLAdmin/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:12 GMT (120.204.196.235:46888) GET /phpadmin/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:13 GMT (120.204.196.235:46976) GET /phpmanager/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:13 GMT (120.204.196.235:47046) GET /phpm/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:30 GMT (120.204.196.235:50741) GET /phpmy-admin/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:31 GMT (120.204.196.235:51154) GET /phpmyadmin/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:31 GMT (120.204.196.235:51344) GET /_phpMyAdmin/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:32 GMT (120.204.196.235:51502) GET /phpMyAdmin/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:54 GMT (120.204.196.235:56044) GET /phpMyA/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:55 GMT (120.204.196.235:56435) GET /phpmy/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:56 GMT (120.204.196.235:56513) GET /pHpMy/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:17:57 GMT (120.204.196.235:56573) GET /php/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:18:19 GMT (120.204.196.235:60796) GET /roundcube/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:18:20 GMT (120.204.196.235:32872) GET /scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:18:21 GMT (120.204.196.235:32994) GET /sl2/data/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:18:25 GMT (120.204.196.235:33704) GET /sqlmanager/scripts/setup.php by ZmEu Fri, 13 Apr 2012 13:18:25 GMT (120.204.196.235:33959) GET /sql/scripts/setup.php by ZmEu Johnny On 2012-04-14 00:54, Johnny Billquist wrote: Ha! I found a bug in my code which caused corrupted data to be sent under rather specific conditions, which were triggered by my code to send a jpeg. It was in the TCP driver (gotta love the ability to unload and load device drivers on a running system...) I can now server jpeg files as well... Johnny On 2012-04-13 18:17, Paul_Koning at Dell.com wrote: RFC 2616 is the authority on all this. Judging by a quick scan: what do you mean by "chunk data"? If you don't specify a transfer-coding, then yes, I think 8 bit clean is assumed. But since you mentioned "chunk" do you mean that you're specifying chunked encoding? I didn't read all that but there's a lot of content about that in the RFC. You'll need a content-length header, unless the connection is closed after the jpg file is transferred. See section 4.4 of the RFC. paul -----Original Message----- From: owner-hecnet at Update.UU.SE [mailto:owner-hecnet at Update.UU.SE] On Behalf Of Johnny Billquist Sent: Friday, April 13, 2012 12:07 PM To: hecnet at Update.UU.SE Subject: Re: [HECnet] Web-server under RSX-11M-PLUS On 2012-04-13 17:01, Sampsa Laine wrote: I also noticed a disturbing lack of funny cat pictures on the demo site... That is related to my most immediate question. Exactly how does pictures get served in http. I tried implementing it, but I must have something wrong, so I'm trying to figure it out right now. Questions are: I assume the TCP stream is to be 8-bit clean. That is - no special interpretation of the byte 255 (as is done in telnet). I assume that pictures should be ok with "Content-type: image/jpeg" I assume chunk data should work for this I assume that all the bytes of the image should just come in the stream with nothing more involved. Can anyone comment on those assumptions? I have a jpeg image on mim, which I'm using as my experiment. I have checked that the contents match that of the original file which I copied, so I think the actual image is served right... Johnny Sampsa On 13 Apr 2012, at 17:58, Mark Wickens wrote: Johnny, That's really fantastic! Just one question, where are the dancing dogs? ;) Regards, Mark On 13/04/12 13:41, Johnny Billquist wrote: This is perhaps slightly offtopic, but fun enough that I like to announce it anyway... === Ok. I just thought I'd stir some interest and just general noise by announcing that I've written a small web-server running under RSX. It's written in BASIC+2, and uses the TCP/IP stack for RSX that I've also written. There are probably a bunch of bugs and issues still around, so I'm happy to take any bug reports, comments or whatever. The url is http://madame.update.uu.se/, and if anyone is curious about the code, it's at mim.update.uu.se (same machine, other IP), under MIM::DU:[HTTPD]WWW.B2S (also on HECnet) If people have any interest in this stuff, or something else/more, I'm interested in hearing about it. The TCP/IP stack will eventually (soon) be available for others to download and use, and apart from the web server, I've also written a telnet client, and a few small services under TCP, as well as some tools for administration. I have some polishing to do, I need to finish a DNS resolved, and I'd like to also finish FTP and a telnet server, but I might be open to distributing things before I've finished all those things, especially if someone is interested in helping writing stuff. I have interfaces completed for BASIC+2, PDP-11 C, Macro-11. FORTRAN 77 should also work, but I haven't tried it yet. This all runs under RSX-11M-PLUS V4.6, but I think it should be possible to get running under almost any M+ version, but there might be some hacking needed for some versions. It will not work under 11M, and I never expect it to. One or two drivers as well as one or two tools really are big enough that I need to use the split I/D space feature in M+. Rewriting stuff to not need that is way too much work. Johnny -- Johnny Billquist || "I'm on a bus || on a psychedelic trip email: bqt at softjar.se || Reading murder books pdp is alive! || tryin' to stay hip" - B. Idol -- Johnny Billquist || "I'm on a bus || on a psychedelic trip email: bqt at softjar.se || Reading murder books pdp is alive! || tryin' to stay hip" - B. Idol