Using 32768KiB of shared memory for push module in /etc/nginx/nginx.conf:64

2015-12-16 Thread juanin
I have this error when using the php http module. http_send_content_disposition('a.pdf', true); http_send_content_type("application/x-octetstream"); http_

Re: POST request body manipulation

2015-12-16 Thread pumbac
I have the same requirement to map $request_body. $request_body is logging to my access_log correctly via proxy_pass setting. I need to map $request_body to determine which part of it should be logged, as sometime it is too large to be logged, like uploading files. any suggestions? Posted at Ng

Re: Reverse proxy to QNAP does not work

2015-12-16 Thread no.1
Hi Francis, thanks for the details. I guess the trick is first to bypass a QNAP internal redirect to the NAS GUI (if possible or to integrate it on the first request). And second to to adapt the login request the right way. (btw: I try to avoid to change the qnap service, because of the regular QN

Re: using nginx to mitigate the latest joomla-vuln - discussion

2015-12-16 Thread Maxim Konovalov
On 12/16/15 7:52 PM, mex wrote: > this one: https://www.nginx.com/blog/new-joomla-exploit-cve-2015-8562/ > [...] Thanks for feedback. I passed your comment to appropriate people. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.org http://mailm

Re: preserve client source address when proxying to upstream

2015-12-16 Thread Maxim Dounin
Hello! On Wed, Dec 16, 2015 at 06:56:02PM +0300, Vsevolod Petrov wrote: > Hello, > > proxy_bind directive allows to specify source IP address for proxied > connections. > This directive can be set to local IP address. > > I'm wondering if there's a way to set $remote_addr as proxy_bind address?

Re: using nginx to mitigate the latest joomla-vuln - discussion

2015-12-16 Thread mex
this one: https://www.nginx.com/blog/new-joomla-exploit-cve-2015-8562/ i'd suggest to change the ua-detection from "JDatabaseDriverMysql" to a regex detecting the PHP-Object-Injection to cover additional attack-vectors (like my gurus @ emergingthreats said: "mitigation against the vuln, not the e

preserve client source address when proxying to upstream

2015-12-16 Thread Vsevolod Petrov
Hello, proxy_bind directive allows to specify source IP address for proxied connections. This directive can be set to local IP address. I'm wondering if there's a way to set $remote_addr as proxy_bind address? Or any other non-local IP address? The idea is to see original client source IP addres

Re: How is module type value (NGX_HTTP_MODULE) is generated?

2015-12-16 Thread Valentin V. Bartenev
On Tuesday 15 December 2015 13:04:20 chuang39 wrote: > Hi, I am curious how is module type like NGX_HTTP_MODULE in > ngx_http_config.h is generated? Thanks! > #define NGX_HTTP_MODULE0x50545445 /* "HTTP" */ > It's "HTTP" in ASCII. wbr, Valentin V. Bartenev _

Re: SSL-Session-Cache on non standard port

2015-12-16 Thread Maxim Dounin
Hello! On Wed, Dec 16, 2015 at 01:59:05PM +0100, Frank Jansen wrote: > SSL-Session-Cache isnot working on non-standard port. > > I tried the solutions mentioned in > http://forum.nginx.org/read.php?2,152294,152294 > > - configuring ssl_session_cache outside of server blocks > - configuring ssl_

SSL-Session-Cache on non standard port

2015-12-16 Thread Frank Jansen
SSL-Session-Cache isnot working on non-standard port. I tried the solutions mentioned in http://forum.nginx.org/read.php?2,152294,152294 - configuring ssl_session_cache outside of server blocks - configuring ssl_session_cache inside every server block But the cache is only working on vhosts with