Re: Unbuffered POST requests and/or uWSGI in nginx 1.8

2015-05-05 Thread Roman Arutyunyan
Hello, On 06 May 2015, at 07:36, Igor Katson wrote: > Hi, > > it's stated in a lot of IT news websites, that nginx 1.8 supports unbuffered > uploads. However, I could not find it in thechangelog, and also, did not find > any new relevant options in the nginx core module options. > Is it reall

Unbuffered POST requests and/or uWSGI in nginx 1.8

2015-05-05 Thread Igor Katson
Hi, it's stated in a lot of IT news websites, that nginx 1.8 supports unbuffered uploads. However, I could not find it in thechangelog , and also, did not find any new relevant options in the nginx core module options. Is it really so? If yes, how do you enable un

Re: FastCGI sent in stderr: "Primary script unknown"

2015-05-05 Thread Thiago Farina
Hi, On Tue, May 5, 2015 at 7:01 AM, vincent123456 wrote: > Hi, > > I try to configure a vhost with Nginx and PHP-FPM. > > I have an application with Symfony2.6, i followed this tutorial : > http://symfony.com/doc/current/cookbook/configuration/web_server_configuration.html#nginx > This tutorial h

Re: How to block fake google spider and fake web browser access?

2015-05-05 Thread meteor8488
Hi Francis, I put the "deny" directives in http{} part. Here is my nginx.conf. http { deny 4.176.128.153; deny 23.105.85.0/24; deny 36.44.146.99; deny 42.62.36.167; deny 42.62.74.0/24; deny 50.116.28.209; deny 50.116.30.23; deny 52.0.0.0/11; deny 54.72.0.0/13; deny 54.80.0.0/12; deny

Re: Connection timeout from work, working anywhere else

2015-05-05 Thread Francis Daly
On Tue, May 05, 2015 at 04:00:11PM -0400, GuiPoM wrote: Hi there, > I just tried to put debug as for example : "access_log > /var/log/nginx/access.log debug;" > > But: > Restarting nginx: nginx: [emerg] unknown log format "debug" in > /etc/nginx/nginx.conf:36 > nginx: configuration file /etc/ng

Re: Connection timeout from work, working anywhere else

2015-05-05 Thread GuiPoM
I will do so. Two questions: 1/ In my config file /etc/nginx/nginx.conf, in section http, I already have the logging entries defined : access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; I just tried to put debug as for example : "access_log /var/log/nginx/access.log debug;"

Re: Connection timeout from work, working anywhere else

2015-05-05 Thread Francis Daly
On Mon, May 04, 2015 at 02:19:45PM -0400, GuiPoM wrote: Hi there, > Thank you for your answer. I can reproduce on demand ! BUTI am not familiar > with nginx. > Could you give me some hints what to activate in order to provide useful > information for debugging ? You could follow http://nginx.or

Re: How to block fake google spider and fake web browser access?

2015-05-05 Thread Francis Daly
On Tue, May 05, 2015 at 09:07:41AM -0400, meteor8488 wrote: Hi there, > I tried to use "deny" to deny access from an IP. But it seems that it can > still access my server. > > In my http part: > > deny 69.85.92.0/23; > deny 69.85.93.235; A request comes in to nginx. nginx chooses one server

Re: how to separate robot access log and human access log

2015-05-05 Thread Francis Daly
On Tue, May 05, 2015 at 08:20:35AM -0400, meteor8488 wrote: Hi there, > if $spiderbot=0, then log to location_access.log Set a variable which is non-zero when $spiderbot=0, and which is zero or blank otherwise. Use that as the access_log if=$variable for location_access.log. > if $spiderbot=1,

Websockets max connections with SSL + slow

2015-05-05 Thread zanadu2
Hi guys, We set up a basic reverse proxy configuration (that you can find below this thread). Our main app is using websocket, and the reverse proxy works fine when no using SSL. But when SSL is enabled, we noticed a big performance issue making our app very slow. Moreover, the most important: we

Re: How to block fake google spider and fake web browser access?

2015-05-05 Thread CJ Ess
The only way you can stop people from mirroring your site is to pull the plug. Anything you set up can be bypassed like a normal user would. If you put CAPTCHAs on every page, someone motivated can get really smart people in poor countries to type in the letters, click the blue box, complete the pa

Re: error logging with nginx and uWSGI

2015-05-05 Thread Maxim Dounin
Hello! On Tue, May 05, 2015 at 08:08:42AM -0400, Larry Martell wrote: > On Sun, May 3, 2015 at 8:18 AM, Maxim Dounin wrote: > > Hello! > > > > On Fri, May 01, 2015 at 12:04:51PM -0400, Larry Martell wrote: > > > >> Prior to now, all the django projects I've worked on have used apache > >> and WS

Re: How to block fake google spider and fake web browser access?

2015-05-05 Thread meteor8488
Thanks for your suggestion. My thought is 1. Is it a robot? 2. If yes, then does't it have a X_forward_IP? 3. If yes, then deny. Your method is 1. Is it a robot? 2. If yes, then if x_forward_ip the same with realip? 3. If no, then deny. I think there is no big different... Posted at Ngin

Re: How to block fake google spider and fake web browser access?

2015-05-05 Thread Payam Chychi
Hey, Why not just compare their xforward vs connecting ip, if they dont match and its a bot, drop it. -- Payam Chychi Network Engineer / Security Specialist On Tuesday, May 5, 2015 at 5:38 AM, meteor8488 wrote: > Hi All, > > Recently I found that someguys are trying to mirror my website.

Re: How to block fake google spider and fake web browser access?

2015-05-05 Thread meteor8488
It seems that I can't edit my post. I have to post my question here: I tried to use "deny" to deny access from an IP. But it seems that it can still access my server. In my http part: deny 69.85.92.0/23; deny 69.85.93.235; But when I check the log, I still can find 69.85.93.235 - - [05/May/

How to block fake google spider and fake web browser access?

2015-05-05 Thread meteor8488
Hi All, Recently I found that someguys are trying to mirror my website. They are doing this in two ways: 1. Pretend to be google spiders . Access logs are as following: 89.85.93.235 - - [05/May/2015:20:23:16 +0800] "GET /robots.txt HTTP/1.0" 444 0 "http://www.example.com"; "Mozilla/5.0 (compatib

Re: [alert] 6781#0: worker process xxxx exited on signal 11

2015-05-05 Thread ikoulamathieu
Hi, thanks to your respond. In deed, I was found this article and this https://andreastan.com/fixing-nginx-random-segfaults-safari-cant-access/. In fact, i add a directive on all vhosts in the nginx configuration with ssl_session_cacheshared:SSL:600m; I put this directive on five vhosts an

Re: PCRE with NGINX

2015-05-05 Thread Francis Daly
On Tue, May 05, 2015 at 04:50:28AM -0400, nginxsantos wrote: Hi there, > I looked @ http://nginx.org/en/docs/http/server_names.html > It sames put it inside " " and once I did that it is working Yes - "wrap the regex in double quotes" is the right answer. This line does appear in the documentat

Re: how to separate robot access log and human access log

2015-05-05 Thread meteor8488
thanks for your reply. I know that I can use if to enable conditional logging. But what I want to do is if $spiderbot=0, then log to location_access.log if $spiderbot=1, then log to spider_access.log. And I don't want the same logs write to different files. How can I do that? thanks Posted at

Re: error logging with nginx and uWSGI

2015-05-05 Thread Larry Martell
On Sun, May 3, 2015 at 8:18 AM, Maxim Dounin wrote: > Hello! > > On Fri, May 01, 2015 at 12:04:51PM -0400, Larry Martell wrote: > >> Prior to now, all the django projects I've worked on have used apache >> and WSGI. With those, when an error occurred I went to >> /var/log/httpd/error_log and detai

Re: [alert] 6781#0: worker process xxxx exited on signal 11

2015-05-05 Thread Maxim Dounin
Hello! On Tue, May 05, 2015 at 03:03:00AM -0400, ikoulamathieu wrote: > Hi, > > I'm sorry my bad english > > We are put in place a proxy web server. It's functionnal with 8 vhosts with > severals certificats SSL autosignated. It was functionnal. We bought a true > certificat SSL multidomain to

FastCGI sent in stderr: "Primary script unknown"

2015-05-05 Thread vincent123456
Hi, I try to configure a vhost with Nginx and PHP-FPM. I have an application with Symfony2.6, i followed this tutorial : http://symfony.com/doc/current/cookbook/configuration/web_server_configuration.html#nginx I have this error : 2015/05/05 11:48:32 [error] 5181#0: *5 FastCGI sent in stderr:

Re: PCRE with NGINX

2015-05-05 Thread nginxsantos
I looked @ http://nginx.org/en/docs/http/server_names.html It sames put it inside " " and once I did that it is working Thank you. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,258636,258649#msg-258649 ___ nginx mailing list nginx@nginx.org

Re: Nginx does not delete old cached files

2015-05-05 Thread Roman Arutyunyan
Hello, 1. Please make sure the cache manager process does not delete the files. Attach with strace and make sure there are no file deleting syscalls. It’s still possible that cache files appear too fast and nginx cache manager just can’t delete the files at the same rate. 2. Is it possible for y

Re: PCRE with NGINX

2015-05-05 Thread nginxsantos
Thanks for the explanation. Sorry, not able to understand you fully. My PCRE is something like this (have tested it through https://regex101.com/) .+\..{3}(?P.{6})[^\.]*$ Now, to achieve this what should I put in the nginx.conf Please let me know. Posted at Nginx Forum: http://forum.nginx.org/

Re: PCRE with NGINX

2015-05-05 Thread itpp2012
This works: ~*\{.*\:\; 1; with map, do note that a 400 in logging means something else which precedes map handling. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,258636,258644#msg-258644 ___ nginx mailing lis

Re: PCRE with NGINX

2015-05-05 Thread nginxsantos
I tried that alrwady . I don't get errors. But, the functionality does not work. So, I am not sure if the PCRE is not liking it or something else...Still debugging. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,258636,258638#msg-258638 ___ n

Re: PCRE with NGINX

2015-05-05 Thread itpp2012
\{ Would do it. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,258636,258637#msg-258637 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

PCRE with NGINX

2015-05-05 Thread nginxsantos
Hi, I am trying to insert a PCRE inside a map block. But looks like "{" used in my code is not liked. Suppose I am doing something like this inside a "map" block. .{1}(?P.{9}).* What is the escape character for "{ " Please let me know. Thanks Posted at Nginx Forum: http://forum.ngi

[alert] 6781#0: worker process xxxx exited on signal 11

2015-05-05 Thread ikoulamathieu
Hi, I'm sorry my bad english We are put in place a proxy web server. It's functionnal with 8 vhosts with severals certificats SSL autosignated. It was functionnal. We bought a true certificat SSL multidomain to Geotrust and we installed this certificats on vhosts. Since to install this certifcat,

%20 need to replace with -

2015-05-05 Thread omverma
Dear All, My website is being hit by some urls that is not served properly by nginx due to some characters like %20. http://www.abc.com?param=test (Works fine) http://www.abc.com?param=test%20again (Do no work) it should be something like this http://www.abc.com?param=test-aga