Re: SSL_shutdown() failed (SSL: error:14094123:SSL routines:ssl3_read_bytes:application data after close notify) while proxying connection

2022-02-14 Thread ckchauhan
Hi Team, Can anyone help us here? We really need your inputs here. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,293640,293677#msg-293677 ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx.org

Re: NGINX load balancing - Proxy

2022-02-14 Thread Sergey A. Osokin
Hi Carlos, hope you're doing well. On Mon, Feb 14, 2022 at 11:08:53PM -0300, Carlos Renato wrote: > Hey guys, > > Can someone help me? I'm using NGINX to direct connections to two Proxy > servers. > > I did a simple setup. > > upstream webgateway { >server 192.168.239.151:9090; >server

Re: Obvious malware rejection module?

2022-02-14 Thread lists
What I find interesting is how do any of these VPSs find customers? Ionos is yet another company I never heard of. Looks more like hosting than a VPS. You can access the nginx configuration file? Policing shared resources is tricky. It is hard to put into a contract the allowed nature of your net

NGINX load balancing - Proxy

2022-02-14 Thread Carlos Renato
Hey guys, Can someone help me? I'm using NGINX to direct connections to two Proxy servers. I did a simple setup. upstream webgateway { server 192.168.239.151:9090; server 192.168.239.152:9090; } server { listen 81; server_name proxy.lab.local; location / { proxy_pass h

Re: Obvious malware rejection module?

2022-02-14 Thread Skip Montanaro
> Off-topic, we used to use GoDaddy for VPS for our free/open source > software project. > We now use Ionos (https://www.ionos.com/hosting/web-hosting). The cheapest > plan is $1/month. We splurge a bit and pay $5 for the extra core and extra > memory. No more OOM problems, and no more nastygrams.

Re: Obvious malware rejection module?

2022-02-14 Thread Jeffrey Walton
On Mon, Feb 14, 2022 at 6:17 PM lists wrote: > ... > > I have plenty of transit capacity. I can serve 3TB a month and I do 30GB. > What I don't have is CPU power. I have a one CPU VPS. The CPU is shared > resource. I think the RAM used by the VPS is more "available," if that > makes any sense. Th

Re: Obvious malware rejection module?

2022-02-14 Thread lists
There are probably 50 common web crawlers. If they aren't Google, Apple, or Microsoft, I don't want them. The worst is one called "majestic 12". It seems to suck down the the entire website every visit. There are some that try to determine what ads your serve, of which I serve none. Another reads

Re: Obvious malware rejection module?

2022-02-14 Thread Skip Montanaro
Thanks for the reply. I actually am interested in bots, at least in the form of legitimate web crawlers. My itty bitty website was specifically intended to expose the archives of a defunct (but formerly public) mailing list to interested parties and said crawlers: https://smontanaro.net/CR/ Perfo

Re: Obvious malware rejection module?

2022-02-14 Thread lists
If your website doesn't need to be seen by bots, set up a firewall to block hosting companies, clouds, and VPS. Blocking AWS is easy since Amazon provides the IP space in a json format. You can go to bgp.he.net and enter a name of a hosting company and it will list the IP space. Finding Google clo

Re: [Help][File download issue]

2022-02-14 Thread Sergey A. Osokin
Hi Praveen, hope you're doing well these days. On Wed, Feb 09, 2022 at 04:17:57PM +0530, Praveen Kumar K S wrote: > Hello, > > I'm trying to download a file using curl and it's failing with the below > error message. > > curl: (18) transfer closed with 723659786 bytes remaining to read > > In

Re: Obvious malware rejection module?

2022-02-14 Thread Skip Montanaro
> > You'd probably need to install a WAF, Web Application Firewall. Some > of those are avaialble for free. > Thanks, Sergey, that's an interesting topic. It looks like I have some reading to do... Skip Montanaro ___ nginx mailing list -- nginx@nginx.o

Re: Obvious malware rejection module?

2022-02-14 Thread Sergey A. Osokin
Hi Skip, hope you're doing well. On Mon, Feb 14, 2022 at 07:39:46AM -0600, Skip Montanaro wrote: > I have a simple website with NGINX fronting Gunicorn and Flask. Of course, > within minutes of it going live, I started to get obvious crap, probing for > vulnerabilities. Nothing's gotten through y

Obvious malware rejection module?

2022-02-14 Thread Skip Montanaro
I have a simple website with NGINX fronting Gunicorn and Flask. Of course, within minutes of it going live, I started to get obvious crap, probing for vulnerabilities. Nothing's gotten through yet, at least as far as I can tell. Even so, it would be nice if such malware-type requests were rejected