Re: nginx security advisory (CVE-2017-7529)

2017-07-20 Thread Shuxin Yang
HI, There: I try to exploit this bug in an attempt to do something nasty :-). However, the more I dig into it, the more I get confused. As far as I know, one necessary conditional to trigger the problem is that range-filter kicks in, and range-filter is called if and *ONLY* if (FIXME):

Re: Pages under main page not loading with Nginx

2017-07-20 Thread Francis Daly
On Wed, Jul 19, 2017 at 06:02:16PM -0400, Kayla Manchette wrote: Hi there, > I have pointed Nginx at the folder where > all the files for my website are located, and Nginx will show the > main page just fine. When I try to go to another page on my website, > it cannot tell where those files are.

Re: disable request body buffering for file upload

2017-07-20 Thread Francis Daly
On Thu, Jul 20, 2017 at 06:36:21AM -0400, garyc wrote: Hi there, > With the fastcgi_request_buffering directive set to 'off' the disk space > reduces by approximately 1.1GB so it does look like the > fastcgi_request_buffering directive is doing what it should however nginx > still appears to cach

Re: nginx_mail_proxy authenticate to imap_ssl upstream ssl

2017-07-20 Thread Maxim Dounin
Hello! On Thu, Jul 20, 2017 at 02:41:10PM +, tom via nginx wrote: > Hello Maxim,is there any way with the stream module to get the > authentication failures reported? As I did not get the > authentication failure in my nginx log when using the stream > module, I switched to the mail module

conditional proxy_pass

2017-07-20 Thread David Woodstuck
I just use Nginx for a couple of weeks. I have the following questions. I hope I can get your help. I have a big web application whose urls are dev01.mydomain.com, dev02.mydomain and dev03.mydomain.com. I like to use Nginx to deliver this application for its users. On each page, there are a

Re: nginx_mail_proxy authenticate to imap_ssl upstream ssl

2017-07-20 Thread tom via nginx
Hello Maxim,is there any way with the stream module to get the authentication failures reported? As I did not get the authentication failure in my nginx log when using the stream module, I switched to the mail module. But my Backend speaks only IMAP-SSL, therefore this does not work.Any help is

Re: disable request body buffering for file upload

2017-07-20 Thread Maxim Dounin
Hello! On Thu, Jul 20, 2017 at 06:36:21AM -0400, garyc wrote: [...] > Another approach we could take would be to add a disk space check api to our > web app so we can confirm we have sufficient space before the upload POST > call is made. > > I appreciate that running a web server in a low disk

Re: nginx_mail_proxy authenticate to imap_ssl upstream ssl

2017-07-20 Thread Maxim Dounin
Hello! On Thu, Jul 20, 2017 at 09:17:02AM +, tom via nginx wrote: > Hello list, > I configured sucessfully the mail_proxy for nginx 1.10.2 von RHEL7, but > authentication only succeeds if upstream server which is provided by the > auth_http Server is cleartext, e.g. if the auth-server respo

Re: Specify a Vary: Accept-Encoding header

2017-07-20 Thread Richard Stanway
The issue is not with your page size or gzip (or anything nginx related actually). Your Rails backend is generating the content far too slow. You should investigate why your backend is so slow. time_namelookup: 0.004209 time_connect: 0.241082 time_appconnec

Re: disable request body buffering for file upload

2017-07-20 Thread garyc
Hi Maxim, > With "fastcgi_request_buffering off;" nginx will send the request > body to the FastCGI application immediately, without trying to > buffer it anywhere. I have been monitoring the disk space while uploading a test file of 1.1 GB in size and have confirmed that with the fastcgi_reque

nginx_mail_proxy authenticate to imap_ssl upstream ssl

2017-07-20 Thread tom via nginx
Hello list, I configured sucessfully the mail_proxy for nginx 1.10.2 von RHEL7, but authentication only succeeds if upstream server which is provided by the auth_http Server is cleartext, e.g. if the auth-server responds 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-Status:

Total timeout for proxy_pass

2017-07-20 Thread Kamil Gorlo
Hi, is it possible to somehow configure proxy_pass (or with help with some additional module) to have total timeout for whole request to upstream (including all send/read calls + connect for non-keepalive connections)? I have use case when I need to respond with default content when my backend do