Re: realip disabled if header contains port

2017-07-12 Thread foxgab
foxgab Wrote: --- > hello, > > i found http_realip_module doesn't work if the realip_header contains > client port. > my config is like bellow: > http { > real_ip_header X-Real-IP; > set_real_ip_from0.0.0.0/0; > server {...}

realip disabled if header contains port

2017-07-12 Thread foxgab
hello, i found http_realip_module doesn't work if the realip_header contains client port. my config is like bellow: http { real_ip_header X-Real-IP; set_real_ip_from0.0.0.0/0; server {...} } the X-Real-IP header in the request is: X-Real-IP: 123.123.123.123 but the $remote_a

Re: nginx security advisory (CVE-2017-7529)

2017-07-12 Thread martinzhou
Maxim Dounin Wrote: --- > Hello! > > On Tue, Jul 11, 2017 at 05:45:15PM -0400, c0nw0nk wrote: > > > Couldn't you use > > > > max_ranges 0; > > > > To disable byte range support completely. > > Disabling ranges completely will mitigate the is

FreeBSD www root Path

2017-07-12 Thread Viaduct Lists
Just wondering where the best location is for www on FreeBSD. The default nginx.conf reports /usr/local/www/nginx But then it reports this: [Wed Jul 12 05:10:09 rich@neb /usr/local/www/nginx] ll dr-xr-xr-x 2 root wheel5 Jul 7 10:23 . drwxr-xr-x 3 root wheel4 Jul 7 10:23 .. -rw-r--r

nginScript question

2017-07-12 Thread aledbf
Hi, It is possible to make a HTTP request with nginScript? I am trying to avoid adding the lua module just for this Thanks in advance Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275459,275459#msg-275459 ___ nginx mailing list nginx@nginx

Re: proxy_set_header directives don't inherit from father context

2017-07-12 Thread foxgab
what's gone happen if i set multiple proxy_cache_valid directives in different levels? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275301,275458#msg-275458 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/n

Re: Help to build nginx withe specific OpenSSL shared library

2017-07-12 Thread A. Schulze
Fabio Ancona: I set the "--with-ld-opt=" in this way I hope that it's OK also in your point of view (without introducing other issues). if it works for you, it's fine. For me that didn't work months/versions ago because my openssl library use the same path but other library names. I'm n

Re: Flushing responses in nginx modules

2017-07-12 Thread Zhang Chao
Hi! I think you can debug your code with gdb, maybe some other modules or filters prevent sending the data. On 11 July 2017 at 22:57:50, Johan Andersson (n...@firemail.cc) wrote: Hi Andreas and Zhang, Thank you for your hint with the http_echo_module! I read through their code to get a hang of

Re: nginx security advisory (CVE-2017-7529)

2017-07-12 Thread Maxim Dounin
Hello! On Tue, Jul 11, 2017 at 05:45:15PM -0400, c0nw0nk wrote: > Couldn't you use > > max_ranges 0; > > To disable byte range support completely. Disabling ranges completely will mitigate the issue as well. But as the issue only affects requests with multiple ranges, it is not needed, "ma

Re: Help to build nginx withe specific OpenSSL shared library

2017-07-12 Thread Fabio Ancona
Hi. Thanks for your suggestion. But I just found an easier way (using the "configure") to build nginx with OpenSSL shared library not using the system OpenSSL library but using the shared library in a specific path (OpenSSL already built in "/opt/ssldevel" in my case). I set the "--with-ld-opt=" in

Re: Help to build nginx withe specific OpenSSL shared library

2017-07-12 Thread A. Schulze
Fabio Ancona: I want to build nginx with OpenSSL shared library not using the system OpenSSL library (so that available at "/opt/ssl/lib") but using the shared library in "/opt/ssldevel/lib". I use to patch the file "auto/lib/openssl/conf" I picked up a section/platform I never will build for

Help to build nginx withe specific OpenSSL shared library

2017-07-12 Thread Fabio Ancona
Hi. I have problem to link specific OpenSSL shared library during "configure" to build nginx from source code on Linux. On my system I have two version of already built OpenSSL: one in "/opt/ssl" (version 1.1.0f) and the other one on "/opt/ssldevel" (version 1.1.1 devel that supports TLS 1.3 draft