Re: [Pound Mailing List] Delay in Request Running over pound

2017-07-19 Thread qutic development
> I have a Strange Issue in Running Pound. > Í m Running pound on an ubuntu 14.04 using the default supplied package > (Version 2.6) This is an old version, I would compile a fresh one from here: https://github.com/goochjj/pound/archive/stage_for_upstream/v2.8a.zip > If the request to an http S

Re: [Pound Mailing List] Pound failing SSL Labs tests

2016-08-19 Thread qutic development
> Am 19.08.2016 um 11:57 schrieb Scott McKeown : > > I have just found out that for some very strange reason our build of Pound is > failing the SSL Labs tests for: > DROWN attack & OpesnSSL Padding Oracle vaulnerability (CVE-2016-2107) > this is happening even after we have taken the steps to r

[Pound Mailing List] OCSP stapling

2016-06-07 Thread qutic development
Is it possible to do OCSP stapling with pound? And when how do I do it? Thx Stefan -- To unsubscribe send an email with subject unsubscribe to pound@apsis.ch. Please contact ro...@apsis.ch for questions.

[Pound Mailing List] pound http2 support?

2016-05-06 Thread qutic development
Are there any plans to integrate http2 support into pound in the near future? - Stefan -- To unsubscribe send an email with subject unsubscribe to pound@apsis.ch. Please contact ro...@apsis.ch for questions.

Re: [Pound Mailing List] Blocking spambots

2016-03-02 Thread qutic development
> Am 01.03.2016 um 19:13 schrieb Mike Slinn : > > robots.txt is only honored by the good guys. The MJ12bot respects the robots.txt entries. - Stefan -- To unsubscribe send an email with subject unsubscribe to pound@apsis.ch. Please contact ro...@apsis.ch for questions.

Re: [Pound Mailing List] Blocking spambots

2016-03-01 Thread qutic development
> Am 01.03.2016 um 14:56 schrieb Mike Slinn : > > I'd like to drop requests from spambots such as MJ12bot. Looks like HeadDeny > might be useful for this. Does anyone have a configuration that blacklists > spambots by inspecting headers, or is there a better way? Why not block them in the robo

Re: [Pound Mailing List] Config changes

2016-01-30 Thread qutic development
Think pound can already do things on your wish list. > Ability to set properties dynamically to run down connections to individual > back ends / full services / entire Pound. This would help taking nodes out of > load balance, for example, for maintenance. You can deactivate backends with pound

Re: [Pound Mailing List] Clickjacking and pound

2015-11-12 Thread qutic development
> But that only passes to the back-end server. I need this header passed to > the CLIENT. Your backend server (apache, nginx, etc.) or the application itself need to add this header. - Stefan -- To unsubscribe send an email with subject unsubscribe to pound@apsis.ch. Please contact ro...@apsis

Re: [Pound Mailing List] SSL_CTX_use_Privatekey_file failed error

2015-01-06 Thread qutic development
On 06.01.2015, at 19:35, chharrison wrote: >Cert "etc/oldserver.pem" The path is missing a slash at the beginning. >Ciphers > "RC4-SHA:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA" Are these your real ciphers? Hopefully not. RC4 is dead, as SSHv3. Where are your DH-

Re: [Pound Mailing List] Pound v2.6 pcidss - SNI with SHA256-Certs

2014-12-16 Thread qutic development
Hi Todd, thank you for pointing this out. I read this post, but missed the relation. The new cert is not only SHA256 but also a SNI one. So the way will be to upgrade to v2.7. Thanks, Stefan On 15.12.2014, at 17:34, Todd Fleisher wrote: > I have this same issue and posted to the list in Nove

[Pound Mailing List] Pound v2.6 pcidss - SNI with SHA256-Certs

2014-12-15 Thread qutic development
Hi, I am using Pound v2.6 with Joe Goochs pcidss branch and SNI with multiple certificates on one IP. This works fine with SHA-Certs, but today I tried to include a new SHA256-certificate which failed - only the first cert in the list is used, but not the right one for the domain. Next I chang

Re: [Pound Mailing List] Poor performance and too many open files with 2.7d

2014-11-17 Thread qutic development
On 17.11.2014, at 19:15, Anthony Tarlano wrote: > message repeated 13 times: [ HTTP accept: Too many open files] What is your output of "ulimit -n"? -- To unsubscribe send an email with subject unsubscribe to pound@apsis.ch. Please contact ro...@apsis.ch for questions.

Re: [Pound Mailing List] Pound 2.6 load

2014-11-14 Thread qutic development
On 14.11.2014, at 13:50, Jeffrey J Ramsay wrote: > So, can this be related to Pound? or is it likely another issue completely. > Any help on this would be most welcomed. How many Threads do you have configured in pound.cfg? -- To unsubscribe send an email with subject unsubscribe to pound@aps

Re: [Pound Mailing List] Error starting pound 2.6 pcidss

2014-10-29 Thread qutic development
On 28.10.2014, at 14:09, Ricardo Santos wrote: > It gives the same error even with an empty conf file. Then it might be something completely different :-) > Service > HeadRequire "(Host: www.xx.mz|Host: www.yyy.mz)" > Redirect "http://www.zzz.mz"; > End this should

Re: [Pound Mailing List] customization of "503 Service unavailable"

2014-06-12 Thread qutic development
Inside of any Listener you can specify a path to a html-page: Err503"/var/www/pound/503.html" On 12.06.2014, at 16:19, alexus wrote: > What's the best way to customize that "503 Service unavailable" > message? Let's say I want to my users to see something else then just > one line) -

Re: [Pound Mailing List] WebDAV behind Pound?

2013-11-20 Thread qutic development
Try to set xHTTP to 3 or 4, owncloud need a lot more http verbs than 2 provide. Regards Stefan On 19.11.2013, at 14:11, Stephan Fabel wrote: > All, > > We're trying to deploy ownCloud (www.owncloud.org) behind a pound reverse > proxy arrangement. We're unwrapping the SSL at pound and load ba