Re: Question regarding $invalid_referer

Hello, On Tue, 5 Mar 2024 13:07:53 -0800 "li...@lazygranch.com" wrote: > I am presently using a scheme like this to prevent scraping documents. > >location /images/ { > valid_referers none blocked www.example.com example.com > forums.othersit

Re: Question

you can try to use ngx_http_dav_module On Thu, Jan 4, 2024 at 11:45 AM Saint Michael wrote: > How do I configure a /location { > > } > so anybody can upload a file that goes to a directory on the server? > I would use curl, for an API >

Re: Question about proxy

On Mon, Jan 30, 2023 at 10:39:52PM -0500, Saint Michael wrote: Hi there, > Can you please elaborate on this: > "You probably want subs_filter_types to include text/html, and you probably > want "r" on the subs_filter patterns that are regular expressions rather > than fixed strings" > one example

Re: Question about proxy

Can you please elaborate on this: "You probably want subs_filter_types to include text/html, and you probably want "r" on the subs_filter patterns that are regular expressions rather than fixed strings" one example will suffice. On Mon, Jan 30, 2023 at 8:20 PM Francis Daly wrote: > > On Sun, Jan

Re: Question about proxy

On Sun, Jan 29, 2023 at 03:17:15PM -0500, Saint Michael wrote: Hi there, > What causes each case, i.e., what do I need to do so always the > https://domain.com is NOT the original domain being proxied, but my > own domain (https://disney.ibm.com). You seem to be using the module at https://githu

Re: Question on Instance structure.

: Friday, October 28, 2022 7:13 AM To: nginx@nginx.org; al-ng...@none.at Cc: Mcalexander, Jon J. Subject: Re: Question on Instance structure. Jon, I'm not 100% sure if you understand NGINX properly, but I think you're confusing "multi-instance" and "multi-site" when

RE: Question on Instance structure.

Thank you for your cooperation. > -Original Message- > From: Thomas Ward > Sent: Friday, October 28, 2022 7:13 AM > To: nginx@nginx.org; al-ng...@none.at > Cc: Mcalexander, Jon J. > Subject: Re: Question on Instance structure. > > Jon, > > I'm not 10

Re: Question on Instance structure.

y, October 27, 2022 5:02 PM To: Mcalexander, Jon J. Cc: nginx@nginx.org Subject: Re: Question on Instance structure. Hi. On 27.10.22 19:05, jonmcalexander--- via nginx wrote: I have a question regarding structure. What is the proper configuration of NGINX instances when you want to have multiple confi

Re: Question on Instance structure.

27, 2022 5:02 PM To: Mcalexander, Jon J. Cc: nginx@nginx.org Subject: Re: Question on Instance structure. Hi. On 27.10.22 19:05, jonmcalexander--- via nginx wrote: I have a question regarding structure. What is the proper configuration of NGINX instances when you want to have multiple configu

RE: Question on Instance structure.

7, 2022 5:02 PM > To: Mcalexander, Jon J. > Cc: nginx@nginx.org > Subject: Re: Question on Instance structure. > > Hi. > > On 27.10.22 19:05, jonmcalexander--- via nginx wrote: > > I have a question regarding structure. > > > > What is the proper configurat

Re: Question on Instance structure.

Hi. On 27.10.22 19:05, jonmcalexander--- via nginx wrote: I have a question regarding structure. What is the proper configuration of NGINX instances when you want to have multiple configurations of NGINX, but only 1 set of binaries? You can use the '-c' flag to point to another nginx configua

Re: Question on Instance structure.

Hi Jon, hope you're doing well. On Thu, Oct 27, 2022 at 05:05:32PM +, jonmcalexander--- via nginx wrote: > I have a question regarding structure. > > What is the proper configuration of NGINX instances when you want to > have multiple configurations of NGINX, but only 1 set of binaries? I'd

Re: Question about rotating log files with USR1 signal

Thanks! This ticket https://trac.nginx.org/nginx/ticket/376 is exactly my doubt. You helped me a lot. On Tue, Jul 19, 2022 at 12:17 AM Maxim Dounin wrote: > > Hello! > > On Mon, Jul 18, 2022 at 01:37:47PM -0300, Fabiano Furtado Pessoa Coelho wrote: > > > As described in the official documentati

Re: Question about rotating log files with USR1 signal

Hello! On Mon, Jul 18, 2022 at 01:37:47PM -0300, Fabiano Furtado Pessoa Coelho wrote: > As described in the official documentation > http://nginx.org/en/docs/control.html#logs "The master process will > then re-open all currently open log files and assign them an > unprivileged user under which t

Re: Question about IF and auth subrequest

Thank You for the update, Will try and let You know ... -V. On Wed, Feb 24, 2021 at 9:03 PM Maxim Dounin wrote: > Hello! > > On Wed, Feb 24, 2021 at 06:44:49PM +0100, Vincent Blondel wrote: > > > Thank You for the swift answer Maxim. > > If I understand, you mean something like that should be go

Re: Question about IF and auth subrequest

Hello! On Wed, Feb 24, 2021 at 06:44:49PM +0100, Vincent Blondel wrote: > Thank You for the swift answer Maxim. > If I understand, you mean something like that should be going to Work ... > > location /subrequest/ { > proxy_pass xxx; > } > location /anyrequest/ { > auth_request /subrequest/; > e

Re: Question about IF and auth subrequest

Thank You for the swift answer Maxim. If I understand, you mean something like that should be going to Work ... location /subrequest/ { proxy_pass xxx; } location /anyrequest/ { auth_request /subrequest/; error_page 400 = @fallback; proxy_pass xxx; } location @fallback { proxy_pass_request_body of

Re: Question about IF and auth subrequest

Hello! On Wed, Feb 24, 2021 at 10:39:57AM +0100, Vincent Blondel wrote: > Hello all, > I have a quick question about the usage of IF and auth_request. > I would like to know if it is possible to use a IF statement to condition > the proxy behaviour of one /location depending on the response heade

Re: Question about proxy_cache_min_uses

> My concern is as follows, proxy_cache_min_uses=1 effectively caches > everything, which is too much... But proxy_cache_min_uses=2 doesn't cache > enough. I'm struggling to understand exactly how proxy_cache_min_uses works, > by setting it to 2 nginx needs to somehow know that 2 requests were made

Re: Question about root path for php-fpm

On Thu, Mar 19, 2020 at 09:14:15PM +0330, Mahmood Naderan wrote: Hi there, > I am following a document but something seems to be a typo and I want to be > sure about that. The fragment of the document you have provided seems to duplicate things unnecessarily; but I do not know what else it tries

Re: question about not found

> On 28 Feb 2019, at 15:53, Maxim Dounin wrote: > > Hello! > > On Thu, Feb 28, 2019 at 03:30:22PM +0200, Christos Chatzaras wrote: > >>> On 28 Feb 2019, at 15:06, Christos Chatzaras wrote: >>> On 28 Feb 2019, at 14:47, Christos Chatzaras wrote: If I try to visit an image t

Re: question about not found

Hello! On Thu, Feb 28, 2019 at 03:30:22PM +0200, Christos Chatzaras wrote: > > On 28 Feb 2019, at 15:06, Christos Chatzaras wrote: > > > >> On 28 Feb 2019, at 14:47, Christos Chatzaras wrote: > >> > >> If I try to visit an image that doesn't exist I get: > >> > >> "404 Not Found" > >> > >>

Re: question about not found

> On 28 Feb 2019, at 15:06, Christos Chatzaras wrote: > > > >> On 28 Feb 2019, at 14:47, Christos Chatzaras wrote: >> >> If I try to visit an image that doesn't exist I get: >> >> "404 Not Found" >> >> If I add a location / { } then I get: >> >> "File not found" >> >> In both cases usi

Re: question about not found

> On 28 Feb 2019, at 14:47, Christos Chatzaras wrote: > > If I try to visit an image that doesn't exist I get: > > "404 Not Found" > > If I add a location / { } then I get: > > "File not found" > > In both cases using curl -I http://www.example.com/image.png >

Re: Question on having multiple SSL cert for multiple domains

On 04.07.2018 17:03, Danny Horne via nginx wrote: > Easiest way (in my opinion) would be to place the ssl configurations > with the appropriate server block Agreed. The SSL configuration parameters can either be added directly or via 'include' statements. Personally, I prefer using generator scri

Re: Question on having multiple SSL cert for multiple domains

On 04/07/18 15:08, Hamidul Islam wrote: > Hi NGINX Support > > It will be very helpful to advise how can we add 2 different SSL for 2 > URLs at the nginx configuration. > > Can you advise how can we add a SSL cert for one domain (example > for site2.ca ) in the config02 file and w

Re: Question about $upstream_cache_status

Hello! On Tue, Apr 25, 2017 at 06:01:11PM +0200, rai...@ultra-secure.de wrote: > am I right that $upstream_cache_status primarily concerns nginx' own > upstreams like fastcgi, uwsgi etc? Yes. > Or is there a possibility to display whether an upstream varnish has had > the page cached? To obt

Re: Question about custom error pages

Do those pages have access to the previous pages details ? Like for example client_verify ? Thanks A On 22 March 2017 at 21:52, B.R. via nginx wrote: > RTFM? :o) > > https://nginx.org/en/docs/http/ngx_http_core_module.html#error_page > --- > *B. R.* > > On Tue, Mar 21, 2017 at 11:18 PM, Alex S

Re: Question about custom error pages

RTFM? :o) https://nginx.org/en/docs/http/ngx_http_core_module.html#error_page --- *B. R.* On Tue, Mar 21, 2017 at 11:18 PM, Alex Samad wrote: > Hi > > How would I added custom info to the error page. > > Say like for 400 if its a cert error, how can I add that to the page and > maybe to add in

Re: Question about proxy_cache_key

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello! Thanks Francis, yes it's about 'Vary' header should be ignored on proxy_ignore_headers. Thanks for the hints. On 02/16/2017 07:41 PM, Francis Daly wrote: > On Thu, Feb 16, 2017 at 01:08:35PM +0700, Dewangga Bachrul Alam > wrote: > > Hi the

Re: Question about proxy_cache_key

On Thu, Feb 16, 2017 at 01:08:35PM +0700, Dewangga Bachrul Alam wrote: Hi there, > proxy_cache_key "$uri$is_args$args"; > > location / { > proxy_ignore_headers Cache-Control Expires Set-Cookie; > rewrite (?.*) $capt?$args&view=$mobile break; > } > My question is, the URI > htt

Re: Question about proxy_cache_key

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Example: [dominique@galea ~]$ curl -I "http://networksninja/artikel/berita/a-pen-by-hair"; HTTP/1.1 200 OK Server: networksninja Date: Thu, 16 Feb 2017 06:48:13 GMT Content-Type: text/html; charset=UTF-8 Connection: keep-alive Vary: Accept-Encoding

Re: Question about Error logs

On Wed, Nov 02, 2016 at 08:49:52AM -0400, pkjchate wrote: Hi there, > Is there any setting I can do, so that Nginx only logs 1 error in same file > only once in the file. I think "no", using just configuration. > The problem is I am getting a lot of same errors and the file gets large in > size

Re: question about tmpfs

What happens when a add a new tmpfs partition e.g for squid? tmpfs uses also swap. So if you make the fs larger than actual ram and it starts to go beyond the physical memory limit things will be swaped out to disk (harddrive) and everything might become slow(er). In general if you can't fit

Re: question about tmpfs

Hi, This is probably not related to Nginx, you might want to visit Linux forums or lists for more detailed information. However, having tmpfs mounted at those directories is a normal mode of operation in many Linux distros. They are mounted automatically, and typically you don't need to worry a

Re: Question about reverse proxies and WAFs

Very cool! lua-resty-waf is actually at the top of my list of WAFs to try as soon as I finish deploying openresty everywhere. On Mon, Apr 25, 2016 at 11:09 AM, Robert Paprocki < rpapro...@fearnothingproductions.net> wrote: > There are also several WAFs built upon Openresty (nginx + luajit at >>

Re: Question about reverse proxies and WAFs

> > There are also several WAFs built upon Openresty (nginx + luajit at > openresty.com) however I haven't set any of them up yet so I can't > comment on their production readiness. > Speaking as the author of one of these (lua-resty-waf, https://github.com/p0pr0ck5/lua-resty-waf), I can tell you

Re: Question about reverse proxies and WAFs

for a nice and simple*) but yet powerfull WAF-solution for nginx you might want to try naxsi https://github.com/nbs-system/naxsi *) simple in terms of: easy to setup, easy to maintain, easy to adjust cheers, mex Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266350,266356#msg-

Re: Question about reverse proxies and WAFs

There is a version of modsecurity for Nginx - https://github.com/SpiderLabs/ModSecurity - however it tends to cause random mysterious problems including segfaults so maybe not what your looking for. There are also several WAFs built upon Openresty (nginx + luajit at openresty.com) however I haven'

Re: Question about reverse proxies and WAFs

With respect the ModSecurity and the CRS, the current nginx implementation of ModSecurity is still pretty buggy and likely won't get any attention. It's known to cause segfaults and server-side errors during requests. You'd be better off looking at the libmodsec v3 integration, which is still in

Re: question about client certs

On Wed, Feb 03, 2016 at 09:37:25AM +0100, Aleksandar Lazic wrote: > Am 02-02-2016 23:22, schrieb Alex Samad: Hi there, > Cool it would be nice if you can tell us if it's works and how was > your solution ;-) I think that "location" does not take variables, and so this will not work. More below.

Re: question about client certs

Am 02-02-2016 23:22, schrieb Alex Samad: Yep I think thats what i was asking. Cool it would be nice if you can tell us if it's works and how was your solution ;-) BR Aleks We have a home grown RP at work that does it and IIS used to do it, apply cert requirements on part of the tree. On

Re: question about client certs

Yep I think thats what i was asking. We have a home grown RP at work that does it and IIS used to do it, apply cert requirements on part of the tree. On 2 February 2016 at 20:56, Aleksandar Lazic wrote: > Dear Alex. > > Am 02-02-2016 04:32, schrieb Alex Samad: >> >> Hi >> >> Is it possible wit

Re: question about client certs

Dear Alex. Am 02-02-2016 04:32, schrieb Alex Samad: Hi Is it possible with nginx to do this https://www.abc.com / /noclientcert/ /clientcert/ so you can get to / with no client cert, but /clientcert/ you need a cert, but for /noclientcert/ you don't need a cert. Looks like from the config d

Re: question about client certs

Your question shows you need to understand how HTTP over TLS works. TLS enciphers HTTP content, thus nothing is readable (either headers or body). How do you select the right certificate based on HTTP content? You can't. Wait, Host-HTTP-Header-based certificate delivery exists, how is that possib

Re: question about client certs

Alex Samad: Is it possible with nginx to do this https://www.abc.com / /noclientcert/ /clientcert/ so you can get to / with no client cert, but /clientcert/ you need a cert, but for /noclientcert/ you don't need a cert. as far as I learned it's not possible and the usual answer to such fea

Re: Question about rewrite directive

> Am 29.01.2016 um 00:06 schrieb Lukas : > >> Lukas [2016-01-28 22:04]: >> >>> rai...@ultra-secure.de [2016-01-28 15:12]: >>> >>> a customer has this in his .htaccess file (among other things): >>> >>> RewriteCond %{REQUEST_FILENAME} !-f >>> RewriteCond %{REQUEST_FILENAME} !-d >>> RewriteRul

Re: Question about rewrite directive

> Lukas [2016-01-28 22:04]: > > > rai...@ultra-secure.de [2016-01-28 15:12]: > > > > a customer has this in his .htaccess file (among other things): > > > > RewriteCond %{REQUEST_FILENAME} !-f > > RewriteCond %{REQUEST_FILENAME} !-d > > RewriteRule ^(.+)\.(\d+)\.(php|js|css|png|jpg|gif|gzip)$ $1.

Re: Question about rewrite directive

On Thu, Jan 28, 2016 at 03:12:16PM +0100, rai...@ultra-secure.de wrote: Hi there, > RewriteCond %{REQUEST_FILENAME} !-f > RewriteCond %{REQUEST_FILENAME} !-d > RewriteRule ^(.+)\.(\d+)\.(php|js|css|png|jpg|gif|gzip)$ $1.$3 [L] > location ~* ^(.+)\.(\d+)\.(js|css|png|jpg|gif|gzip)$ { >

Re: Question about rewrite directive

> rai...@ultra-secure.de [2016-01-28 15:12]: > > Hi, > > > a customer has this in his .htaccess file (among other things): > > RewriteCond %{REQUEST_FILENAME} !-f > RewriteCond %{REQUEST_FILENAME} !-d > RewriteRule ^(.+)\.(\d+)\.(php|js|css|png|jpg|gif|gzip)$ $1.$3 [L] > > This is to enable versio

Re: Question about source code: Any need to call ngx_event_pipe_remove_shadow_links in ngx_event_pipe_read_upstream?

Hello! On Sun, May 17, 2015 at 02:36:08PM +0800, J.J J wrote: > Hi, all: > > nginx code version: 1.7.9 ( I have checked v1.9.0, no change about this) > > The bufs used to invoke ngx_event_pipe_remove_shadow_links in > ngx_event_pipe_read_upstream come from p->preread_bufs or p->free_raw_bufs >

Re: question on some simple codes in ngx_buf.c

Hello! On Thu, Jan 16, 2014 at 02:04:45AM -0500, microwish wrote: > Hello there, > > code snippet in the definition of ngx_chain_add_copy in ngx_buf.c: > > > ll = chain; > >

Re: Question about failure and fail-over

Hello! On Thu, Jul 18, 2013 at 07:10:27AM -0400, Branden Visser wrote: > Hi all, I have a general question about server failure and failover > within an upstream group to ensure I understand it correctly. > > Lets say I have the configuration: > > proxy_next_upstream timeout; > proxy_connect_ti

Re: question about nginx/modsecurity

I do a custom-build for our own servers (in private pkg-ng repository) with a handful of useful modules included. Because the truth is: only you know what modules you want or need. This is absolutely true. (And I'm running CentOS and have been very happy as well.) Thanks. _

Re: question about nginx/modsecurity

Am 19.06.2013 um 21:04 schrieb AJ Weber : > Is anyone maintaining a "current" version of nginx with mod-security > linked-in? > > I realize this is a bit lazy on my part -- the instructions seem relatively > straightforward to build -- but I didn't want to "re-invent the wheel" if I > didn't

Re: Question about multiple applicable locations in a server config

On 13 June 2013 20:31, John Barton wrote: > I have read documentation from several sources, and there is still 1 detail > about nginx configuration that I do not fully understand, and would like > some additional guidance. In the nginx location configuration, how does one > handle locations that w

Re: Question about UPSTREAM configuration...

Thank you for your prompt reply. just one more ... If I have 5 servers on the upstream, use the IP_HASH, is the load distribution based on a round robin when requests would go to the first on the list. then the second, the third, Or does NGIX create some kind of distribution array.

Re: Question about UPSTREAM configuration...

Hello! On Wed, May 01, 2013 at 01:30:14PM -0400, lflacayo wrote: > Hello All, > > Hope some one out there can help me a clear up my understanding. > > If I have 5 server on an upstream configuration list, to help load balance > the load across the 5 servers. Once in a while I am seen "(110