Real IP in header for SMTP Nginx Mail Proxy

2017-01-19 Thread Michael Brunner
Hi I used the instruction below to build a mail proxy server with nginx: https://www.nginx.com/resources/admin-guide/mail-proxy/ I configured it for IMAP, POP3 and SMTP. It's working quite well but I don't see the real IP of the sender in the mail header. When a user is sending a mail via SM

回复:Re: why "connection: close" header is added when the request is passed to upstream server?

2017-01-19 Thread tjlp
Hi, Maxim, You are right. Connection is hop-by-hop header. At present I add the line below into nginx.conf: proxy-set-headers Connection $http_connection That solve my issue. Thanks Liu Peng - 原始邮件 - 发件人:Maxim Dounin 收件人:nginx@nginx.org 主题:Re: why "connection: close" header is added w

Re: How to log internal location evaluation

2017-01-19 Thread Peter Booth
You can get all that and a lot, lot more if you build a debug enabled version of nginx Sent from my iPhone > On Jan 19, 2017, at 11:49 AM, Nikolaos Milas wrote: > > Hello, > > I am running nginx 1.10.2 on CentOS 6. > > I am trying to configure a new (virtual) website and I am having problems

Re: ssl_protocols & SNI

2017-01-19 Thread B.R. via nginx
There is something strange, though. I configured cipher suites with ssl_ciphers with suites from TLSv1.0 & TLSv1.2 (TLSv1.1 having no specific cipher suites but merely relying on thos from TLSv1.0). Those 3 protocols can be tested successfully when ssl_protocols is at its default value (TLSv1 TLSv

How to log internal location evaluation

2017-01-19 Thread Nikolaos Milas
Hello, I am running nginx 1.10.2 on CentOS 6. I am trying to configure a new (virtual) website and I am having problems. I would like to be able to log details of the evaluation of URIs in location blocks by nginx. For example, I would like to see in a log: * which location block (actually

Re: Rate limiting and SMTP proxy

2017-01-19 Thread powellchristoph
That makes perfect sense. Thank you for the help. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,272046,272062#msg-272062 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: ssl_protocols & SNI

2017-01-19 Thread B.R. via nginx
I acknowledge how that works, although OpenSSL providing more flexibility over SNI for protocols supporting it would have been appreciated. Too bad. Thanks Maxim for you always concise and straightforward discerning answers! --- *B. R.* On Thu, Jan 19, 2017 at 2:36 PM, Maxim Dounin wrote: > Hell

Re: ssl_protocols & SNI

2017-01-19 Thread Maxim Dounin
Hello! On Thu, Jan 19, 2017 at 10:04:46AM +0100, B.R. via nginx wrote: > Hello, > > I tried to overload the value of my default ssl_protocols (http block > level) in a server block. > It did not seem to apply the other value in this virtuel server only. > > Since I use SNI on my OpenSSL impleme

Re: why "connection: close" header is added when the request is passed to upstream server?

2017-01-19 Thread Maxim Dounin
Hello! On Thu, Jan 19, 2017 at 09:02:34AM +0800, t...@sina.com wrote: > I use Nginx in the Kubernetes. With the upstream server log, I > find that the header "connection: close" is added when the > request is passed to upstream server. Why? Because the connection between nginx and the upstream

Re: Rate limiting and SMTP proxy

2017-01-19 Thread Maxim Dounin
Hello! On Wed, Jan 18, 2017 at 05:42:04PM -0500, powellchristoph wrote: > Hello, > > I was wondering if someone could clarify if the 'ngx_http_limit_req_module' > would rate limit an smtp proxy. The rate-limiting module says that you can > use the 'limit_req' within a server context. Would I be

Use proxy_pass to forward traffic to owncloud server

2017-01-19 Thread forumacct
Hello All, I have 2 Raspberry Pi both with nginx. RPI#1 is plain website (using http) (listening on port 8000) (local IP 192.168.11.170)(nginx : 1.2.1-2.2 ) RPI#2 is an owncloud server (using https) (local IP 192.168.11.176)(1.6.2-5+deb8u4) My dyndns domain name gets routed to RPI#1. nginx on RPI

ssl_protocols & SNI

2017-01-19 Thread B.R. via nginx
Hello, I tried to overload the value of my default ssl_protocols (http block level) in a server block. It did not seem to apply the other value in this virtuel server only. Since I use SNI on my OpenSSL implementation, which perfectly works to support multiple virtual servers, I wonder why this S