Sitruc Wrote: ------------------------------------------------------- > I need to block access to log files that are stored in a publicly > accessible directory from being viewed publicly. These are stored as > CGI files and as things are right now, anyone can view the directory > directly and download the .CGI file which is a huge security concern > as it showcases IP addressby itpp2012 - How to...
Roman Arutyunyan Wrote: ------------------------------------------------------- > Moreover the mp4 module does not work over proxy cache. That means > even if you fix the cache key issue > mp4 seeking will not work. You need to have a local mp4 file to be > able to seek mp4 like that. Hmm, what about a hack, if the file is cached keep a link to the cached file and its originaby itpp2012 - Nginx Mailing List - English
12:37 21-6-2014 nginx 1.7.3.1 RedKnight Based on nginx 1.7.3 (20-6-2014) with; + new best practice ssl_ciphers example (nginx-win.conf) + fastcgi/upstream fix: http://forum.nginx.org/read.php?29,250947,251007#msg-251007 + form-input-nginx-module (https://github.com/calio/form-input-nginx-module) + Naxsi WAF conf\naxsi_core.rules updated 15-6-2014; File uploads: 1500-1600 + nginx-auth-ldapby itpp2012 - Nginx Mailing List - English
It was a malformed request so a 400 is correct, a valid HEAD in this case does return a 412.by itpp2012 - Nginx Mailing List - English
The log entries are both in access.log, nothing in error.log, maybe a try_files thing ? though the IF is after try_files and works for a GET.by itpp2012 - Nginx Mailing List - English
For example: map $request $testvar { default 0; ~*montytest 1; } if ($testvar) { return 412; } [20/Jun/2014:xx:xx:20 +0200] 69.64.xxxx:52393 - - "GET /montytest/ HTTP/1.1" 412 712 "-" "Mozilla/5.0........ [20/Jun/2014:xx:xx:29 +0200] 115.254.xxxx:59855 - - "HEAD /montytest/ HTTP/1by itpp2012 - Nginx Mailing List - English
shahzaib1232 Wrote: ------------------------------------------------------- > > Btw, our local ISP provided us with some testing ip prefixes to check > nginx > based caching. i.e > geo { > default 0; > 10.0.0.0/8 > 39.23.2.0/24 1; > 112.50.192.0/18 1; > } > Typo?? geo { default 0; 10.0.0.0/8 1; 39.23.2.0/24 1; 112.50.192.0/18 1; }by itpp2012 - Nginx Mailing List - English
c0nw0nk Wrote: ------------------------------------------------------- > Upon the change it gets worse now i do not even get a error the > browser just time's out. I have no idea if it is a Joomla issue or if > it is actualy something with PHP on windows. I get the feeling it is a > bit of both. Then you first need to figure out why joomla needs so much time, maybe it is waitinby itpp2012 - Nginx Mailing List - English
c0nw0nk Wrote: ------------------------------------------------------- > error_log logs/error.log crit; > > Is my current setting should i change it to debug ? No option is required to get error messages about backend issues. Remove that first server {} block with the return 200, for fcgi try this; fastcgi_pass web_rack; fastcgi_index index.php;by itpp2012 - Nginx Mailing List - English
PHP_FCGI_MAX_REQUESTS=0, try the recommended value of 10000.by itpp2012 - Nginx Mailing List - English
Lets see some logging.by itpp2012 - Nginx Mailing List - English
You don't need to do anything with a dns that is only local to the clients served by the ISP. Suppose I am in Africa; Question to my ISP: I'd like to go to new-york ISP: new-york is located in south-Africa Suppose I am in the US; Question to my ISP: I'd like to go to new-york ISP: new-york is located in the US The DNS is just a pointer, where ever you have an edge server make the dnsby itpp2012 - Nginx Mailing List - English
shahzaib1232 Wrote: ------------------------------------------------------- > i don't think the solution rdns will be suitable for us. I have > checked the > zebra software to make linux a BGP router > http://www.techrepublic.com/article/use-zebra-to-set-up-a-linux-bgp-os > pf-router/ > > Could you tell me if BGP is capable of doing what we want? Because our > locby itpp2012 - Nginx Mailing List - English
shahzaib1232 Wrote: ------------------------------------------------------- > Thanks itpp but the issue is still same and still the ip is from the > main > server in inspect element as well as in local-caching nginx access > logs, i > am getting the client ip as main-server's ip instead of original > client ip It could be the case the traffic you are getting is from theby itpp2012 - Nginx Mailing List - English
shahzaib1232 Wrote: ------------------------------------------------------- > Maybe i need to add some variable to get original server ip ? https://www.google.nl/#q=nginx+geo+remote+ip+address http://www.cyberciti.biz/faq/nginx-redirect-backend-traffic-based-upon-client-ip-address/by itpp2012 - Nginx Mailing List - English
Thats about it when it comes to support, though it is weekend maybe as of monday there might be more activity, Roman is very active there.by itpp2012 - Nginx Mailing List - English
Use email or some other media to handle change requests until you have something like SIT (http://sitracker.org/) in place.by itpp2012 - How to...
Yes, setup and use change management and stop allowing access to 'idiots'. http://en.wikipedia.org/wiki/Change_managementby itpp2012 - How to...
Specific rtmp issues are better placed here: https://groups.google.com/forum/#!forum/nginx-rtmpby itpp2012 - Nginx Mailing List - English
http://nginx.org/en/docs/http/ngx_http_headers_module.html http://wiki.nginx.org/HttpHeadersMoreModule https://www.google.nl/#q=nginx%20add%20headerby itpp2012 - How to...
For this you need to setup a dns wildcard; *.domain.com A 123.4.5.6by itpp2012 - New Member Introductions
shahzaib1232 Wrote: ------------------------------------------------------- > @itpp I am currenlty proceeding with proxy_cache method just because i > had > to done this in emergency mode due to boss pressure :-|. I have a > quick > question, can i make nginx to cache files for specific clients ? > > Like, if our caching servers are deployed by only single ISP namedby itpp2012 - Nginx Mailing List - English
See http://trac.nginx.org/nginx/ticket/132by itpp2012 - Nginx Mailing List - English
20:13 5-6-2014 nginx 1.7.2.2 RedKnight Based on nginx 1.7.2 (5-6-2014) with; + Openssl-1.0.1h (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470) + New nginx Windows icon + Source changes back ported + Source changes add-on's back ported + Changes for nginx_basic: Source changes back ported * Scheduled release: no (openssl fixes) * Additional speby itpp2012 - Nginx Mailing List - English
shahzaib1232 Wrote: ------------------------------------------------------- > @itpp, i just used your method try_files and it worked flawlessly :). > Following is the testing config : > > server { > listen 80; > server_name domain.com; > root /var/www/html/files; > > location / { location ~* (\.mp3|\.avi|\.mp4)$ { > Should i usby itpp2012 - Nginx Mailing List - English
This "cloud_addons/ngx_http_url_filtering_module.c" is an addon which can cause the 'bug', can you try without any addons? or with the mainline version? alot has changed since 1.2.5by itpp2012 - Other discussion
Without seeing your patches and holding it against the 1.7 branch, which has several patches already in this area, its impossible to say anything.by itpp2012 - Other discussion
shahzaib1232 Wrote: ------------------------------------------------------- > Thanks itpp. So according to you the more preferable way is > non-caching > replication of main content servers to local ISP servers and than run > rsync > periodically for replication. So if file not found in local ISP nginx, > it > should forward request to main content server using try_filby itpp2012 - Nginx Mailing List - English
Of course this will work but when nginx restarts or the cache gets damaged/corrupted the whole shebang starts again.... And you can't control the cached files versus try_files and a normal filesystem.by itpp2012 - Nginx Mailing List - English
I'm not seeing where you determine if a file is present on an edge system, the try_files directive allows you to redirect or not (locally present or not). I don't really see a point for using (proxy)cache, the file is present or it is not. location / { try_files $uri @getfrom_origin; } location @getfrom_origin { proxy_pass ......; }by itpp2012 - Nginx Mailing List - English