On Sun, Aug 08, 2010 at 02:36:57AM -0400, nginx_newbie wrote: > Dear Nginx Experts / Friends, > > I am new to nginx. Just getting my feet wet since around 15 days. > I am sorry for this extremely long post. Just wanted to give all > details > for quick understanding of the problem hence long code attachments. > > I have installed CentOS 5.5 + nginx + php-fpm on linode.coby Igor Sysoev - Nginx Mailing List - English
On Sat, Aug 07, 2010 at 08:11:09PM +0400, Igor Sysoev wrote: > On Sat, Aug 07, 2010 at 06:46:15PM +0400, Алексей Сундуков wrote: > > > Сейчас наверное у любого администратора nginx ассоциируется с веб > > сервером стоящим на страже бэкэнда в виде Apache. Но он же > >by Igor Sysoev - Nginx Mailing List - Russian
On Sat, Aug 07, 2010 at 06:46:15PM +0400, Алексей Сундуков wrote: > Сейчас наверное у любого администратора nginx ассоциируется с веб > сервером стоящим на страже бэкэнда в виде Apache. Но он же > позиционируется в том числе и как почтовый проby Igor Sysoev - Nginx Mailing List - Russian
On Sat, Aug 07, 2010 at 09:56:53AM -0400, aarrtt wrote: > Что -то совсем немогу логику понять. > > В конфиге следующее: > > error_page 500 502 503 504 /50x.html; > location = /50x.html{ > internal; > return 503; > } > > > > Бекенд возвращает ответ с кодом 500 , nginx > пby Igor Sysoev - Nginx Mailing List - Russian
On Sat, Aug 07, 2010 at 09:13:14AM -0400, aarrtt wrote: > Нет http://sysoev.ru/nginx/docs/http/ngx_http_proxy_module.html#proxy_intercept_errors -- Игорь Сысоев http://sysoev.ru _______________________________________________ nginx-ru mailing list nginx-ru@nginx.org http://nginx.org/mailman/listinfo/nginx-ruby Igor Sysoev - Nginx Mailing List - Russian
On Sat, Aug 07, 2010 at 06:51:29AM -0400, idrum wrote: > спасибо. есть одно но, при > > location = /viewforum.php { > rewrite ^ /forums/view/$arg_id permament; > } > > c http://site.ru/viewforum.php?id=39 перенаправляет на > http://site.ru/forums/view/39?id=39 > > можно ли избавится от "?id=39" вby Igor Sysoev - Nginx Mailing List - Russian
On Sat, Aug 07, 2010 at 05:52:29AM -0400, huandu wrote: > When requesting a static file with HTTP header "Range: bytes=0-", nginx > always return 206 Partial Content. Is it a bug? > > This issue can be reproduced like this: > > curl -v -o /dev/null -H "Range: bytes=0-" > 'http://wiki.nginx.org/local/propaganda/postgresql.gif' > > * About to connecby Igor Sysoev - Nginx Mailing List - English
On Sat, Aug 07, 2010 at 05:41:35AM -0400, aarrtt wrote: > Какойто баг с proxy_intercept_errors. > Директива установлена в on. > При этом все ошибки с кодом более 400 > обрабатывает nginx, а с кодом 400 обработал > бекенд(Tomcat): А "error_page 400 ..." есть ? > >by Igor Sysoev - Nginx Mailing List - Russian
On Sat, Aug 07, 2010 at 06:24:45AM -0400, idrum wrote: > не могу сделать простейший rewrite. > поменялась структура сайт и поэтому > необходимо перенаправлять > пользователей c http://site.ru/viewforum.php?id=3 на > http://site.ru/forums/view/3 > > нынешний конфиг >by Igor Sysoev - Nginx Mailing List - Russian
On Thu, Aug 05, 2010 at 11:48:39PM +0200, Stanley Sh wrote: > Igor, the mistake was my own. Monit was the culprit, it was turning off > nginx because I had it misconfigured. > > However, after changing the virtualhost conf to reflect your > suggestions, I now get the 403 forbidden error. Try this: location / { - try_files $uri $uri/ @unicorn; + try_filesby Igor Sysoev - Nginx Mailing List - English
On Fri, Aug 06, 2010 at 02:43:19AM +0300, Gena Makhomed wrote: > On 06.08.2010 2:13, Anton Yuzhaninov wrote: > > >> случайно сделал несколько ошибок в конфиге, > >> но nginx -t вернул 0 код завершения: > >> > >> # nginx -t ; echo $? > >> : conflicting server name "example.com" oby Igor Sysoev - Nginx Mailing List - Russian
On Thu, Aug 05, 2010 at 08:44:46PM +0200, Rainer Duffner wrote: > > Am 05.08.2010 um 18:55 schrieb Igor Sysoev: > > > On Thu, Aug 05, 2010 at 06:49:21PM +0200, rainer@ultra-secure.de > > wrote: > > > >>> On Thu, Aug 05, 2010 at 12:24:23PM -0400, Alex Sergeyev wrote: > >> > >>> varnish relies on OS internals too: it mmap()s a huge filby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 03:05:44PM +0100, Jools Wills wrote: > Is it possible to exclude certain ip's from a limit_conn > (so they dont have the limit?) No, currently nginx can not exclude. -- Igor Sysoev http://sysoev.ru/en/ _______________________________________________ nginx mailing list nginx@nginx.org http://nginx.org/mailman/listinfo/nginxby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 01:00:29PM -0400, Jim Ohlstein wrote: > On 8/5/10 12:56 PM, Igor Sysoev wrote: > > > > > It's interesting to see core dump backtrace, if you still have old > > binary and its sources. > > I rebuilt the binary using ports and the old one was over written. All I > have is the core dump. I'm afraid it's almost useless without the old binarby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 12:54:39PM -0400, Jim Ohlstein wrote: > I'm not sure if this is a big issue or not, but here goes: > > Yesterday I upgraded from FreeBSD 8.0 to 8.1. At the final reboot nginx > did not start and gave a core dump. I had built nginx using gcc 4.5.1. > Rebuilding from source cleared the problem. Logs show nothing as nginx > never started. > > # ngby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 06:49:21PM +0200, rainer@ultra-secure.de wrote: > > On Thu, Aug 05, 2010 at 12:24:23PM -0400, Alex Sergeyev wrote: > > > varnish relies on OS internals too: it mmap()s a huge file that > > may be larger tens times physical memory and perfomance relies on > > how OS flushes modified pages to a disk and how then OS reads them > > back to memby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 12:24:23PM -0400, Alex Sergeyev wrote: > > On Thu, 2010-08-05 at 19:40 +0400, Igor Sysoev wrote: > > On Thu, Aug 05, 2010 at 10:08:54AM -0500, Raina Gustafson wrote: > > > How does it compare with Varnish? > > > What tools do you use for stress testing/performance measurements? > > I did not run tests. > > Raina, my 2 cents belowby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 06:31:10PM +0200, Fernando Perez wrote: > > Sorry, we can diagnose a problem using debug/error log. > > We can not diagnose a "it does not work" problem. > > What should I be looking for? Specific headers that Firefox was sending? http://nginx.org/en/docs/debugging_log.html -- Igor Sysoev http://sysoev.ru/en/ ______________________________by Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 10:08:54AM -0500, Raina Gustafson wrote: > Ok. Thanks for the vote of confidence. I will look into Nginx FastCgi. nginx supports caching for both proxied and FastCGI servers. You may use this scheme: nginx/cache -> Apache/APC > How does it compare with Varnish? > > What tools do you use for stress testing/performance measurements? I did not run testby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 01:51:26PM +0200, Fernando Perez wrote: > Ok so for some obscure reason, I had to clear my history in Firefox to > make things work. > > I still don't understand why that would perturb Nginx in detecting the > blog's subdomain. Sorry, we can diagnose a problem using debug/error log. We can not diagnose a "it does not work" problem. -- Igor Sby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 03:09:14PM +0400, Igor Sysoev wrote: > On Thu, Aug 05, 2010 at 12:53:26PM +0200, Grzegorz Nosek wrote: > > > Yes, Nginx is aware of files, of course :) but unlike Apache, where > > everything must be a file, it prefers operating on URLs and uses files > > as late as possible. That's my understanding of its philosophy, at > > least. > >by Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 12:53:26PM +0200, Grzegorz Nosek wrote: > Yes, Nginx is aware of files, of course :) but unlike Apache, where > everything must be a file, it prefers operating on URLs and uses files > as late as possible. That's my understanding of its philosophy, at > least. I believe NSCA/Apache was being developed primarily as static web server. So all these <Directory&by Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 12:16:32PM +0200, Grzegorz Nosek wrote: > On Thu, Aug 05, 2010 at 01:58:04PM +0400, Igor Sysoev wrote: > > Then it can be easy fixed by > > > > location ^~ /uploads/ { > > or > > location ~ ^/uploads/ { > > Sure. However this requires cooperation between the application user and > the server admin, which isn't always possibby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 04:57:24AM +0200, Stanley Sh wrote: > I am running unicorn behind nginx to host Rails 3 > > Both nginx and unicorn run flawlessly when first started but nginx dies > inexplicably about 5-10 minutes later. Unicorn, however, stays up and is > still accessible through its own port. What do you mean by "dies" ? Are you able to download any static filby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 10:49:52AM +0200, Grzegorz Nosek wrote: > On Thu, Aug 05, 2010 at 12:19:22PM +0400, Igor Sysoev wrote: > > The issue is that someone is able to upload a image file to a directory > > with scripts (I do not know why he is not able to override some valid > > images or even the scripts themself in this case). Then someone requests > > I guess it coby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 10:11:29AM +0200, Grzegorz Nosek wrote: > On Thu, Aug 05, 2010 at 12:09:33PM +0400, Igor Sysoev wrote: > > What's about when "/dir/1.gif/2.php" is proxied to remote server ? > > nginx has no access to a filesystem of the file. > > It doesn't go via the static module then and the patch won't do > anything. The issue is that someone is ablby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 10:06:08AM +0200, Grzegorz Nosek wrote: > On Thu, Aug 05, 2010 at 11:29:55AM +0400, Igor Sysoev wrote: > > How may this prevent from the exploit if a requested file is > > "/dir/1.gif/2.php" ? As I understand the file will have > > "application/x-httpd-php" type ? > > The patch hooks into the static module ngx_http_static_hanby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 09:17:17AM +0200, Grzegorz Nosek wrote: > On śro, sie 04, 2010 at 02:48:07 -0700, Michael Shadle wrote: > > Someone just posted this on my blog: > > > > location ~ \.php$ { > > .... > > try_files $uri =404; > > ... > > } > > > > exploit http://site.ru/images/as5df3.jpeg/.php > > > > might be an intereby Igor Sysoev - Nginx Mailing List - English
On Thu, Aug 05, 2010 at 12:01:38AM -0700, Michael Shadle wrote: > Yeah I expect nginx to only be aware of the filesystem it has access to. So open_file_cache saves stat calls? How do you invalidate the cache if a file is removed? Or if I put a new file that wasn't there I want it to instantly show up not 404 for a while? Apologies if you've covered this already. open file cache entries are vaby Igor Sysoev - Nginx Mailing List - English
On Wed, Aug 04, 2010 at 02:48:07PM -0700, Michael Shadle wrote: > On Wed, Aug 4, 2010 at 2:44 PM, Ed W <lists@wildgooses.com> wrote: > > > However, all the default configs that I have seen for PHP setups on the > > wiki, etc, seem insecure to my mind. They nearly all point *all* files > > named xx.php to be processed by the your php interpreter. Coupled with >by Igor Sysoev - Nginx Mailing List - English
![]() |
![]() |
![]() |
![]() |
|