Sorry if I present this question wrong... I have GeoIP2 filtering installed - and it seems to work well in most cases, especially if a request comes in from a disallowed country for a resource that exists. My question is about what nginx is doing if the resource does not exist... I recently received a hack'ish request to "POST /cgi-bin/..." I do not have such a directory, andby aweber - How to...
On 8/30/2019 12:33 PM, Reinis Rozitis wrote: >> When this is all done, and I import the p12 client certificate on my Windows PCs (tested 2) Chrome and Firefox show me the "400 Bad Request\n No required SSL certificate was sent". The very strange thing is IE11 on one of the two PCs, actually prompts me to use my newly-installed cert the first time, and it works. No other browser (by aweber - Nginx Mailing List - English
I have been trying to configure client certificates (really just one cert for now) for two days on CentOS 7, Nginx 1.16.1, and have had very limited success. I have tried various online guides and they are mostly the same - but all have resulted in the same exact scenario. One such guide is here, for example: https://gist.github.com/mtigas/952344 (Another is here: https://www.guyrutenbergby aweber - Nginx Mailing List - English
I have a few users that are having issues with my website now that I disabled SSLv3. Turns out the only cipher that would/should work with XP/IE8 is TLS1.0: "TLS_RSA_WITH_3DES_EDE_CBC_SHA" (there are two RC4's that also work, but I understand that is really not recommended). Can anyone tell me how to add this to my ssl_ciphers? (I don't fully understand the shorthand in the list.)by aweber - Nginx Mailing List - English
Looking through the results for my server, I noticed these two lines in the "Protocol Details" section: Session resumption (caching) No (IDs assigned but not accepted) Session resumption (tickets) No INTOLERANT Should I change my config to alter these two results (for performance OR security)? If so, can anyone identify what config options I should add/change? Alby aweber - Nginx Mailing List - English
Has anyone tried using the Maxmind GeoIP Organization database to allow/block access to directories? I am currently using the GeoIP.dat (country) file -- which I believe is "version 1" of their binary db -- and this works great. I am investigating making a more "narrow" filter of IP Addresses and think this Organization database would work well. So, again, wondering ifby aweber - Nginx Mailing List - English
This may be obvious, but as such, the OpenSSL 1.0.1e package is available to virtually all CentOS 6.x via the official yum repos, so it's not just for CentOS 6.5 (technically). -AJ On 3/7/2014 3:16 PM, Per Hansson wrote: > I second this request, it would be very welcome :) > > Posted at Nginx Forum: http://forum.nginx.org/read.php?2,245553,248234#msg-248234 > > ________________by aweber - Nginx Mailing List - English
Ugh. Thanks. I missed that. -AJ On 9/9/2013 11:10 AM, Valentin V. Bartenev wrote: > On Monday 09 September 2013 17:53:54 AJ Weber wrote: >> This is a nice write-up. Thank you. >> >> Does anyone know why SPDY is not enabled for the default builds yet, if >> it's in the "stable branch"? I just tried downloading 1.4.2 (CentOS 6 >> x64) and it's not coby aweber - Nginx Mailing List - English
This is a nice write-up. Thank you. Does anyone know why SPDY is not enabled for the default builds yet, if it's in the "stable branch"? I just tried downloading 1.4.2 (CentOS 6 x64) and it's not configured. Thanks, AJ On 9/8/2013 1:50 PM, mex wrote: > hi list, > > i recently had to dig deeper into nginx + ssl-setup and came up with a > short documentation on how to sby aweber - Nginx Mailing List - English
I have this working pretty well (ok, I think _very_well_ ) with GeoIP. I used a MAP in the main nginx.conf like this: map $geoip_country_code $allowed_country { default 0; US 1; GB 1; CA 1; EU 1; } Then, in my default.conf, the first statement(s) in the relevant "location's" is: if ($allowed_by aweber - Nginx Mailing List - English
I do a custom-build for our own servers (in private pkg-ng repository) with a handful of useful modules included. Because the truth is: only you know what modules you want or need. This is absolutely true. (And I'm running CentOS and have been very happy as well.) Thanks. _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listby aweber - Nginx Mailing List - English
Is anyone maintaining a "current" version of nginx with mod-security linked-in? I realize this is a bit lazy on my part -- the instructions seem relatively straightforward to build -- but I didn't want to "re-invent the wheel" if I didn't have to. Thanks, AJ _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailmanby aweber - Nginx Mailing List - English
yum repolist -v nginx Loading "fastestmirror" plugin Config time: 0.019 Yum Version: 3.2.29 Loading mirror speeds from cached hostfile * base: centosp4.centos.org * extras: centosc5.centos.org * updates: centosy3.centos.org Setting up Package Sacks pkgsack time: 0.015 Repo-id : nginx Repo-name : nginx repo Repo-status : enabled Repo-revision: 1364910404 Repo-updated : Tueby aweber - Nginx Mailing List - English
I followed the instructions for adding the "mainline" repo to my yum config, ran a clean but I still only find 1.2.8 available for install (CentOS6 x64). What might I be doing wrong? -AJ On 4/3/2013 9:08 AM, Sergey Budnevitch wrote: > Hello > > We've added new repository with pre-build linux packages for nginx 1.3.*. > Documentation/instruction: http://nginx.org/en/linby aweber - Nginx Mailing List - English
OK, So I'm still working on my caching "issue", but this is a more general question, so for the sake of indexing and helping others in the future with (hopefully) a response... How do I use a map to map the lack of a variable/header/cookie (NULL?) to a value? I can't use "default", because when there IS a value it will be a random set of characters. So that said, if a rby aweber - Nginx Mailing List - English
On 3/13/2013 10:40 AM, Jonathan Matthews wrote: > > It looks to me like > http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_no_cache > is what you need to use. > If the backend is returning a Content-Length header, you could refer > to that. If not, you may have to get creative in assembling a map{} > variable. I looked at that, but it appears that it only tests fby aweber - Nginx Mailing List - English
I have a case where a user requires authorization to retrieve content. Ngnix correctly returns the tomcat's 401, and then the user attempts authentication. However, if the user fails to authenticate, tomcat returns a 200 but zero bytes returned. This comes through nginx as a cache-miss, status=200, 0 bytes returned. Unfortunately, if the user tries again, even if he/she is successful, theby aweber - Nginx Mailing List - English
http://nginx.org/en/docs/http/ngx_http_geoip_module.html#geoip_org OK, that's great! I was looking here: http://wiki.nginx.org/HttpGeoipModule Should I always assume that the nginx.org/en/docs... URLs have the most up-to-date information? Thx, AJ _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginxby aweber - Nginx Mailing List - English
I see older pages referencing the ability to use geoip_org (I assume if you purchase MaxMind's Organization DB), but the latest documentation that I looked at only specifies country/city directives. Can anyone confirm whether the recent versions of Ngnix (like 1.3.9 and later) still allow the organization directives when the geoip module is compiled-in? Thanks, AJ __________________________by aweber - Nginx Mailing List - English
This solution worked. Many thanks to you AND Francis for your replies to help. I always cringe when using the if-statement because of the "bad press" it's gotten in the past. I understand the push to use "location" wherever possible, but sometimes a well-placed, simple if-statement is exactly what's needed! Now the logging is working, and I wrote a (really just modifiedby aweber - Nginx Mailing List - English
>> I have a login page that redirects (actually appends the parameter >> "?error=true" to the URL and lets the user try again). >> >> I was trying to re-define "access_log" with a full path and (for now) >> "combined" to a separate file in that location > nginx chooses configuration based (primarily) on the "location", whichby aweber - Nginx Mailing List - English
I have a login page that redirects (actually appends the parameter "?error=true" to the URL and lets the user try again). I was trying to re-define "access_log" with a full path and (for now) "combined" to a separate file in that location in hopes of tracking failed logins in a separate log. Originally, I had a regex nested location for the error redirect, thenby aweber - Nginx Mailing List - English
I'm still relatively new to nginx but find it to be great. My high-level recommendation would be twofold: 1) Make sure you define a "proxy_cache" (check the nginx website for details on these directives). In there you can define further how to cache anything that's even a bit "static" from tomcat. And if you're overriding specific paths or regex'es from tomcat (like if yby aweber - Nginx Mailing List - English
Does anyone have any "best practices" on filtering using the GeoIP variables? I'd like to filter my entire site based upon "allowed countries" (it's a very specialized site), and am wondering the best place to check country-code so that it's efficient (performance wise), and applies to the entire http or server block. Any tips and tricks are very much appreciated! -AJ _by aweber - Nginx Mailing List - English
"There are no special directives at all. It just works. " > Those are the best updates! ;) > Thank you! On 11/27/2012 10:55 AM, Valentin V. Bartenev wrote: > On Tuesday 27 November 2012 19:35:34 AJ Weber wrote: >> Does the "support for chunked transfer encoding..." mean I don't need >> the extra "chunkin" module to be compiled and linked-in?by aweber - Nginx Mailing List - English
Does the "support for chunked transfer encoding..." mean I don't need the extra "chunkin" module to be compiled and linked-in? Is there a new list of directives I should switch-over to (replacing the external, chunkin ones)? Maybe there's a more thorough list of release notes, I'm just not sure where they are offhand. Thanks, AJ On 11/27/2012 9:26 AM, Maxim Dounin wroteby aweber - Nginx Mailing List - English
Thank you for the reply! Is it better if I rebuild without the debug information in the binary (for performance or other reasons)? If so, are there some recommended options to pass to cc-opt and/or ld-opt? Thank you again! -AJ On 10/28/2012 11:57 AM, Sergey Budnevitch wrote: > On 28 Oct2012, at 03:24 , AJ Weber<aweber@comcast.net> wrote: > >> I was attempting to build ngby aweber - Nginx Mailing List - English
I was attempting to build nginx 1.2.4 from source, and include the chunkin module. I also included the autolib module, because from what I could understand, it would help reduce the need for some of the other source/devel packages to build. I ended up with a clean build, but nginx is 6.3MB, and the version I installed from a binary package is only 813KB. So I'm wondering whether this is noby aweber - Nginx Mailing List - English
Asking, because the documentation looks like it's a little outdated on this... Is Chunked Transfer still not enabled OOTB? This would seem like almost a mandatory feature of HTTP 1.1 to implement, and the only reference I could find is to separate source code/module/patch that I would have to download and recompile all of nginx for? Has it been implemented or added to the default, pre-compiby aweber - Nginx Mailing List - English
One of these requests is sent by my program. One is sent by curl (it's easy to tell which). They are identical as far as I can tell. However, the curl request returns the expected result (204) from my servlet. The program keeps getting this 302 returned with some generic "302 Found" html from nginx. My eyes are blurry from staring at it. Can anyone tell me why my test with cuby aweber - Nginx Mailing List - English