Re: preventing requests with unknown host names

2015-08-21 Thread Igal @ Lucee.org
On 8/21/2015 4:49 AM, navern wrote: > On 21.08.2015 10:30, Francis Daly wrote: >> On Thu, Aug 20, 2015 at 11:35:58PM -0700, Igal @ Lucee.org wrote: >>> On 8/20/2015 3:55 PM, Igal @ Lucee.org wrote: >> Hi there, >> >> I do not know the full answer to your question. >> >>> when I tried to add listen

Re: preventing requests with unknown host names

2015-08-21 Thread Igal @ Lucee.org
> You will need at least a proper ssl configuration in that server{} > block -- possibly setting it at http level. that makes sense. thanks again! Igal Sapir Lucee Core Developer Lucee.org On 8/21/2015 12:30 AM, Francis Daly wrote: > On Thu, Aug 20, 2015 at 11:35:58PM -0700,

Re: preventing requests with unknown host names

2015-08-21 Thread navern
On 21.08.2015 10:30, Francis Daly wrote: On Thu, Aug 20, 2015 at 11:35:58PM -0700, Igal @ Lucee.org wrote: On 8/20/2015 3:55 PM, Igal @ Lucee.org wrote: Hi there, I do not know the full answer to your question. when I tried to add listen for port 443 it broke the https for requests with th

Re: preventing requests with unknown host names

2015-08-21 Thread Francis Daly
On Thu, Aug 20, 2015 at 03:55:51PM -0700, Igal @ Lucee.org wrote: Hi there, > > For each "listen" directive with a unique ip:port, add one server{} > > block which contains "listen ip:port default_server; return 444;" > This seems to do the trick. > > I expected there to be a way to do all of th

Re: preventing requests with unknown host names

2015-08-21 Thread Francis Daly
On Thu, Aug 20, 2015 at 11:35:58PM -0700, Igal @ Lucee.org wrote: > On 8/20/2015 3:55 PM, Igal @ Lucee.org wrote: Hi there, I do not know the full answer to your question. > when I tried to add listen for port 443 it broke the https for requests > with the valid hostname as well. > > ## disable

Re: preventing requests with unknown host names

2015-08-20 Thread Igal @ Lucee.org
So while this worked well for port 80: On 8/20/2015 3:55 PM, Igal @ Lucee.org wrote: > Thank you, Francis. >> For each "listen" directive with a unique ip:port, add one server{} >> block which contains "listen ip:port default_server; return 444;" > This seems to do the trick. when I tried to add

Re: preventing requests with unknown host names

2015-08-20 Thread Igal @ Lucee.org
Thank you, Francis. > For each "listen" directive with a unique ip:port, add one server{} > block which contains "listen ip:port default_server; return 444;" This seems to do the trick. I expected there to be a way to do all of the IP addresses at once. Thanks for your help! Igal On 8/20/201

Re: preventing requests with unknown host names

2015-08-20 Thread Francis Daly
On Thu, Aug 20, 2015 at 02:46:57PM -0700, Igal @ Lucee.org wrote: > I want to disable processing of all requests that do not have a valid > hostname Check your entire configuration for "listen" directives. http://nginx.org/r/listen There will be zero or more in each server{} block. If there are

preventing requests with unknown host names

2015-08-20 Thread Igal @ Lucee.org
I want to disable processing of all requests that do not have a valid hostname I'm tried to follow the advice on: http://nginx.org/en/docs/http/request_processing.html#how_to_prevent_undefined_server_names so I have (inside http directive): server { listen 80; server_na