[nginx] API change: removed the ngx_conf_full_name() function.

2013-08-06 Thread Valentin Bartenev
details: http://hg.nginx.org/nginx/rev/7094bd12c1ff branches: changeset: 5318:7094bd12c1ff user: Valentin Bartenev vb...@nginx.com date: Tue Aug 06 19:58:40 2013 +0400 description: API change: removed the ngx_conf_full_name() function. The ngx_get_full_name() should be used instead.

nginx ddos подправить правило

2013-08-06 Thread shambler81
Добрый день, коллеги, прошу помочь, что то не получается поймать быка за рога. Небольшой ддос доставляет неудобство серверу, прблизительно 10 тысач в минуту. Ширины канала хватает так что фактически меня устроит отдать доброжедателям 404 в запросах есть логика все они содержат

Re: ModSecurity, защита WP и джумлы от ботов, перебирающих пароли

2013-08-06 Thread Anton Gorlov
04.08.2013 15:59, Vladislav Prodan пишет: 2. С участием владельца сайта переименовать файл для входа в какое-нибудь трудное имя, например administator/indexHJK28bhy2H.php, чтобы данное имя было известно только владельцу сайта. А на /administator/index.php поставить статическую заглушку,

Re: Переменная $https

2013-08-06 Thread Nick Knutov
Спасибо, это полностью решило задачу. 06.08.2013 11:56, Olexander Shtepa пишет: Вопрос уже скорее про апач, но есть ли возможность добавить ему переменную HTTPS средствами извне при отсутствии mod_ssl (ссл терминируется на нгинх, у апача только хтпп)? Я делаю так: На nginx:

Re: nginx ddos подправить правило

2013-08-06 Thread Vladislav V. Prodan
06.08.2013 22:39, Nick Knutov пишет: А еще вы скорее всего хотите отдавать return 444 вместо 404. Очевидно, что доброжелатели ожидают 502, 503 или 504. -- Vladislav V. Prodan System Network Administrator http://support.od.ua +380 67 4584408, +380 99 4060508 VVP88-RIPE

Re: Setting the status code

2013-08-06 Thread mex
let your app handle and deliver error-pages Posted at Nginx Forum: http://forum.nginx.org/read.php?2,241621,241626#msg-241626 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Conditional balancing

2013-08-06 Thread mex
essence of the other tow ansers: http://dgtool.blogspot.de/2013/02/nginx-as-sticky-balancer-for-ha-using.html you might want to google nginx sticky sessions Posted at Nginx Forum: http://forum.nginx.org/read.php?2,241556,241627#msg-241627 ___ nginx

Re: Avice for my vhost configuration

2013-08-06 Thread wishmaster
--- Original message --- From: Mik J mikyde...@yahoo.fr Date: 6 August 2013, 00:44:37 Hello, I plan to configure my nginx server with a couple of vhosts. For each of them I want: - to use php - deny access begining by a dot - not logging access to favicon

allow access on a sublocation

2013-08-06 Thread Greg
Hi, this configuration does not work as expected : server { satisfy any; auth_basic DING DING SONG; auth_basic_user_file /etc/apache2/htpasswd; allow from CIDR; allow from CIDR; allow from CIDR; allow from CIDR; location ^~ /allowed/ { allow all; }

Re: allow access on a sublocation

2013-08-06 Thread Jonathan Matthews
On 6 Aug 2013 15:08, Greg g...@2lm.fr wrote: Hi, this configuration does not work as expected : server { satisfy any; auth_basic DING DING SONG; auth_basic_user_file /etc/apache2/htpasswd; allow from CIDR; allow from CIDR; allow from CIDR; allow from CIDR;

Re: allow access on a sublocation

2013-08-06 Thread Greg
Le 06/08/2013 16:22, Jonathan Matthews a écrit : Just checking you're aware that this only matches /allowed/ by itself and nothing below it. Is that what you meant? Is that what you're testing? It match evrything that _starts_ with /allowed/ , right ? -- Greg Document sans nom

Re: allow access on a sublocation

2013-08-06 Thread Jonathan Matthews
On 6 Aug 2013 15:35, Greg g...@2lm.fr wrote: It match evrything that _starts_ with /allowed/ , right ? Yes it does; I had a brain-fart. Personally I omit the ^~ unless I have a situation that definitely requires it, as it's clearer without it IMHO. YMMV. J

Re: allow access on a sublocation

2013-08-06 Thread Reinis Rozitis
this configuration does not work as expected : server { satisfy any; If that is all your configuration (no extra location blocks) then just include the rules inside location / {} like: server { location / { satisfy any; auth_basic DING DING

RE: writev function not implemented

2013-08-06 Thread Rangel, Raul
So I tried two different things. The first one was I used -v /var/lib/nginx to create a volume which bind mounted a zfs directory inside my container. This worked correctly. The second was I created an ext4 partition and used docker -g to set the graph path. When I tried my test again it

Re: allow access on a sublocation

2013-08-06 Thread Reinis Rozitis
Document sans nom True, but I can't do that as location / {} is in a common config included by many other vhosts. Then to clarify - you want to deny the access to all the other vhosts or just one? If one - per http://nginx.org/en/docs/http/server_names.html you can leave the current config

Re: allow access on a sublocation

2013-08-06 Thread Greg
Le 06/08/2013 16:50, Reinis Rozitis a écrit : this configuration does not work as expected : server { satisfy any; If that is all your configuration (no extra location blocks) then just include the rules inside location / {} like: True, but I can't do that as location / {} is in a

Re: RE: writev function not implemented

2013-08-06 Thread Jérôme P.
Rangel, Raul wrote in post #1117896: The first one was I used -v /var/lib/nginx to create a volume which bind mounted a zfs directory inside my container. This worked correctly. I was about to suggest that as a workaround. I'm glad that it worked! The second was I created an ext4 partition

Obtaining req/s or connections/sec sent to a backend-server?

2013-08-06 Thread Alex Flex
Hello Nginx I understand that nginx when uses as a reverse proxy does not allow me to poll for stats regarding the amount of connections/requests sent to backend servers. Id like to know if there is creative way I can do this without parsing the logs ? I want to do this almost as a live feed

Re: Setting the status code

2013-08-06 Thread Dennis Jacobfeuerborn
On 06.08.2013 13:31, Richard Kearsley wrote: On 06/08/13 04:02, Dennis Jacobfeuerborn wrote: Since I determine the reason for the denied access in lua a way to do it there would also help. I already tried nginx.status = 403 followed by a nginx.exec('/reason1') but while the right page is

Re: Fwd: Adding a header to the status page output

2013-08-06 Thread Francis Daly
On Tue, Aug 06, 2013 at 03:55:26PM -0600, Alex Flex wrote: Hi there, Iam wondering if there is any way to add a custom header/footer to the output of the STATUS page? location /status { stub_status on; } Can whatever will read this extra information, read it from a http header? add_header

Re: Obtaining req/s or connections/sec sent to a backend-server?

2013-08-06 Thread Yichun Zhang (agentzh)
Hello! On Tue, Aug 6, 2013 at 2:54 PM, Alex Flex wrote: to poll for stats regarding the amount of connections/requests sent to backend servers. Id like to know if there is creative way I can do this without parsing the logs ? This is a trivial task if you write a simple tool based on

Re: Recommendations for safeguarding against BREACH ?

2013-08-06 Thread Igor Sysoev
On Aug 7, 2013, at 1:48 , Jonathan Vanasco wrote: are there any official recommendations from nginx to safeguard against the BREACH exploit ? http://breachattack.com/ http://arstechnica.com/security/2013/08/gone-in-30-seconds-new-attack-plucks-secrets-from-https-protected-pages/ gzip