Re: rakoto

2017-08-10 Thread mayak
Aina Vaovao! Try putting this into a conf file with an mp4:     location ~ \.mp4$ {     mp4;     } If it works, your streaming module would have automatically loaded. Veloma M On 08/10/2017 07:54 PM, Andry Thierry

Content Spoofing vulnerability

2017-08-10 Thread blason
Hi Guys, We have multiple webservers behind Nginx Reverse Proxy and at one of the server we have discovered Content spoofing, the vulnerability is patched on Apache but also needs to be patchef on Nginx server. I googled a lot but unable to find a relevant information. Can someone please suggest

Reverse proxy for multiple domains

2017-08-10 Thread Mik J via nginx
Nginx: 1.10.2 Hello, I'm tryging to get reverse proxy working with multiple domains I have application1.org and application2.org. The client requesting these URLs, arrives one the reverse proxy. On this reverse proxy I have a virtual host which looks like that server { listen 80; server_

Re: Modsecurity dynamic module with Nginx-plus

2017-08-10 Thread George
yeah just use nginx open source free version if you need compile support - updated guide at https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,276008,276018#msg-276018 __

Re: Is there a wait to get at a module's main conf inside the loc conf's init?

2017-08-10 Thread ptcell
Maxim Dounin Wrote: --- > Hello! > > On Wed, Aug 09, 2017 at 09:33:59PM -0400, ptcell wrote: > > > From the debugger I can see that it's probably some offset into > > cf->ctx[index].main_conf, but I don't see anyway of knowing what > that index

[no subject]

2017-08-10 Thread Andry Thierry RAKOTOARIMALALA
Hi, Can an nginx instance use a web server and a stream to do a proxy (pass-thru) with ng_stream_core_module? When I verified the compilation option , I see --with-stream=dynamic. Is that mean the module is load or not? Thanks -- RAKOTO ___ nginx mailin

Re: Modsecurity dynamic module with Nginx-plus

2017-08-10 Thread Maxim Konovalov
On 10/08/2017 17:37, blason wrote: > Unfortunately we do not have budget at this moment and we were unsure at the > time of purchasing that paid nginx option does not give source codes to > compile hence we are now struggling. Can someone please help us here? > You can use nginx-oss source to comp

Re: Modsecurity dynamic module with Nginx-plus

2017-08-10 Thread Maxim Konovalov
On 10/08/2017 16:52, blason wrote: > Hi All, > > I just purchased nginx-plus and since it is delivered in binaries, since > this is a case I am unable to install Modsecurity with nginx-plus. I > followed various guides and able to compile dynamic_module However when I am > enabling the modesecurit

Re: Modsecurity dynamic module with Nginx-plus

2017-08-10 Thread blason
Unfortunately we do not have budget at this moment and we were unsure at the time of purchasing that paid nginx option does not give source codes to compile hence we are now struggling. Can someone please help us here? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,276008,276011#msg-27

Modsecurity dynamic module with Nginx-plus

2017-08-10 Thread blason
Hi All, I just purchased nginx-plus and since it is delivered in binaries, since this is a case I am unable to install Modsecurity with nginx-plus. I followed various guides and able to compile dynamic_module However when I am enabling the modesecurity in conf file the nginx worker process is gett

Whitelisting files with certain extensions

2017-08-10 Thread ST
Hello, we had following problem: one of the developers has saved a .php file as .php.old. This file, if requested directly, was offered by nginx for download and thus exposed. What is the right way to solve this? 1. initial idea was to whitelist all the legitimate file extensions that we use and

Re: Is there a wait to get at a module's main conf inside the loc conf's init?

2017-08-10 Thread Maxim Dounin
Hello! On Wed, Aug 09, 2017 at 09:33:59PM -0400, ptcell wrote: > From the debugger I can see that it's probably some offset into > cf->ctx[index].main_conf, but I don't see anyway of knowing what that index > is inside the loc create callback. > > Is there any other way of getting this?Getti