Re: $skip_cache define home page

2015-04-01 Thread carnagel
Francis Daly Wrote: --- > On Sun, Mar 22, 2015 at 06:35:31AM -0400, carnagel wrote: > > Hi there, > > > I understand how to skip cache on cookies, POST, query strings, urls > > containing string etc > > How do you skip cache on urls containing

Re: Set a PHP parameter for only one location

2015-04-01 Thread Francis Daly
On Wed, Apr 01, 2015 at 02:12:57PM -0700, Daniel Miller wrote: Hi there, > But...I want to set a php_value for a specific directory. Is there > a more elegant method than duplicating all the directives for the > "global" php handler above for the directory? I think that "duplicating" is the ele

Scaleable NGINX Configuration

2015-04-01 Thread Gena Makhomed
On 02.04.2015 0:12, Daniel Miller wrote: I have a "standard" location block for my php directives... # Pass all .php files onto a php-fpm/php-fcgi server. location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; include fastcgi_params; fastcgi_index index.p

Re: Preferred method for location blocks

2015-04-01 Thread Gena Makhomed
On 01.04.2015 23:55, Daniel Miller wrote: What is the difference between: location /admin { } vs. location ~ /admin(/.*) { } The first seems cleaner, and I assume runs faster - but do they process differently? Yes, they process differently. http://nginx.org/en/docs/http/ngx_http_core_mod

Re: Google dumps SPDY in favour of HTTP/2, any plans for nginx?

2015-04-01 Thread Sarah Novotny
> On Mar 31, 2015, at 11:39 PM, George wrote: > > thanks Sarah > > dug deeper and apparently those nginx reported header sites were behind > Google Pagespeed's service so that must of been why HTTP/2 was reported That does seem like a likely reason. .s. __

Re: shellshock probing

2015-04-01 Thread mex
if you have questions on naxsi, feel free to join the naxsi-discuss - ml https://groups.google.com/forum/#!forum/naxsi-discuss cheers, mex Posted at Nginx Forum: http://forum.nginx.org/read.php?2,257792,257801#msg-257801 ___ nginx mailing list ng

Set a PHP parameter for only one location

2015-04-01 Thread Daniel Miller
I have a "standard" location block for my php directives... # Pass all .php files onto a php-fpm/php-fcgi server. location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; include fastcgi_params; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_r

Re: shellshock probing

2015-04-01 Thread Cole Tierney
Thanks mex, I’ll check it out. > On Apr 1, 2015, at 4:50 PM, mex wrote: > > hi cole, > > if implemetable you couldd use naxsi https://github.com/nbs-system/naxsi > for this, there exists a rule to detect and block > shellshock-exploit-attempts: > > MainRule "str:() {" "msg:Possible Remote cod

Preferred method for location blocks

2015-04-01 Thread Daniel Miller
What is the difference between: location /admin { } vs. location ~ /admin(/.*) { } The first seems cleaner, and I assume runs faster - but do they process differently? -- Daniel ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mai

Re: shellshock probing

2015-04-01 Thread mex
hi cole, if implemetable you couldd use naxsi https://github.com/nbs-system/naxsi for this, there exists a rule to detect and block shellshock-exploit-attempts: MainRule "str:() {" "msg:Possible Remote code execution through Bash CVE-2014-6271" "mz:BODY|HEADERS" "s:$ATTACK:8" id:42000393 ; see

shellshock probing

2015-04-01 Thread Cole Tierney
Hello, I'm seeing lots of shellshock probing in my access logs. My server's not vulnerable, but my logs are filling up with 404s. The requests are for random cgi scripts. The referer and user_agents are the same and always start with () { :; }; followed by curl or wget to a remote perl script p

Re: 2 maps for one 1 variable?

2015-04-01 Thread Cole Tierney
On Apr 1, 2015, at 3:23 PM, Steve Holdoway wrote: > > On Wed, 2015-04-01 at 15:05 -0400, Cole Tierney wrote: >> Hello, >> >> Is it possible to use more than one map directive with a single variable? I >> tried but it seems the second map over writes any value set by the 1st map >> even if ther

Re: 2 maps for one 1 variable?

2015-04-01 Thread Steve Holdoway
On Wed, 2015-04-01 at 15:05 -0400, Cole Tierney wrote: > Hello, > > Is it possible to use more than one map directive with a single variable? I > tried but it seems the second map over writes any value set by the 1st map > even if there is no match in the 2nd map. I tried leaving out the default

2 maps for one 1 variable?

2015-04-01 Thread Cole Tierney
Hello, Is it possible to use more than one map directive with a single variable? I tried but it seems the second map over writes any value set by the 1st map even if there is no match in the 2nd map. I tried leaving out the default value in the second map. — Cole __

Re: about proxy_request_buffering

2015-04-01 Thread Maxim Dounin
Hello! On Wed, Apr 01, 2015 at 07:10:00AM -0400, patrickshan wrote: > Maxim Dounin Wrote: > > > On Sun, Mar 29, 2015 at 01:51:15AM -0400, cubicdaiya wrote: [...] > > > Is proxy_request_buffering always enabled when SPDY is enabled? > > > > Yes, it is not currently possible to switch off > > p

Re: about proxy_request_buffering

2015-04-01 Thread patrickshan
Maxim Dounin Wrote: --- > Hello! > > On Sun, Mar 29, 2015 at 01:51:15AM -0400, cubicdaiya wrote: > > > Hello. > > > > Though I'm trying to apply 'proxy_request_buffering off;' for > unbuffered > > uploading, > > The buffering still seems to be

Re: about proxy_request_buffering

2015-04-01 Thread cubicdaiya
Hello. > 2015-04-01 9:18 GMT+09:00 Maxim Dounin : > Yes, it is not currently possible to switch off proxy_request_buffering > when using SPDY. Thanks. My question was resolved. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,257731,257784#msg-257784 ___

Re: allow access to certain client addresses or use auth_basic

2015-04-01 Thread basti
Thanks a lot! On 30.03.2015 21:21, Francis Daly wrote: > On Mon, Mar 30, 2015 at 10:45:49AM +0200, basti wrote: > > Hi there, > >> is there a way to do following in nginx server or location config. >> >> 1. allow access to certain client addresses >> 2. if the ip is not in the list, allow access b