Questions tagged [nginx]
nginx [engine x] is an HTTP and reverse proxy server, written by Igor Sysoev
18
questions
57
votes
4
answers
78k
views
Strange requests to web server
I have a Linode VPS running Nginx, which currently serves only static content.
Once I was looking at the log and noticed some strange requests:
XXX.193.171.202 - - [07/Aug/2013:14:04:36 +0400] "GET /...
17
votes
6
answers
7k
views
Server compromised for 2nd time, cannot locate source of attack
I need some help tracing a vulnerability on my server. For the second time, my server has been compromised with files being replaced with virus-ridden downloads.
According to the filesystem dates, ...
3
votes
1
answer
6k
views
My web server is hit by strange traffic, what is that?
I'm a noob and just set-up a linode account to play around with linux development.
I started nginx and made a simple homepage for my domain (giuliopizzini.com).
Today I checked the nginx logs and ...
2
votes
1
answer
2k
views
Understanding a suspicious HTTP request
While debugging my server for issues, I checked my logs frequently. Here is one weird one I've found, which seems like an attempt to run something on my server. I am using nginx on Ubuntu 14.04. Below ...
19
votes
1
answer
11k
views
Current State of BREACH (GZIP SSL Attack)?
It has been one year since BREACH made our way into our hearts, and there does not seem to be any articles or posts or patches since then, is my Google-fu weakening?
Has BREACH been mitigated or ...
37
votes
7
answers
65k
views
Recommended ssl_ciphers for security, compatibility - Perfect Forward secrecy
I'm currently using nginx with the following ciphers:
ssl_ciphers HIGH:!aNULL:!eNULL:!LOW:!ADH:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS;
I would like to maintain compatibility to older browsers, ...
20
votes
4
answers
3k
views
Dealing with SSL Certificates on Products
We are developing a product (device / system) that will be installed on customer sites. Many of our customers will (should) be concerned about security, and should be thinking about it seriously.
Our ...
5
votes
3
answers
7k
views
NGINX Hacking Attempt
Every time I start my test-server and let it run for some days I get this in my log-files (in different variations):
111.241.26.165 - - [18/Feb/2014:22:16:45 +0100] "\x04\x01\x00\x19\xCBER!\x00" 400 ...
0
votes
1
answer
1k
views
Some bot keeps posting this to my server
Some bot keeps posting strings like this to my server. What do they mean and what's the best way from preventing them?
RaxfkI/...
70
votes
7
answers
83k
views
Trying to make a Django-based site use HTTPS-only, not sure if it's secure?
The EFF recommends using HTTPS everywhere on your site, and I'm sure this site would agree. When I asked a question about using Django to implement HTTPS on my login page, that was certainly the ...
16
votes
4
answers
26k
views
nginx - How to prevent processing requests with undefined server names with HTTPS
How do I avoid nginx processing a request with an undefined server name using the https protocol.
The following configuration makes this work for normal http requests. It resets the connection for ...
9
votes
1
answer
2k
views
Regenerating dhparam periodically
Does it increase connection security if I regenerate the dhparam files used with NGINX on our servers periodically e.g. every week?
What issues may arise from this?
Is there any benefit in doing ...
4
votes
2
answers
2k
views
How can nginx run a file with jpg extension as a php file?
I have a follow up question on this answer about executing image files as php. The answer explains that nginx support virtual directories. One can run
www.something.com/blan.php/one/two/3
and one/...
2
votes
1
answer
877
views
What security does nginx provide between server blocks?
What security does nginx provide between server blocks?
Here is an example scenario. Say I have two server blocks configured with nginx. Each serves up a web application to authenticated users. I am ...
1
vote
1
answer
323
views
Do you encrypt traffic between GKE nodes and external Load balancers?
I have a GKE standard deployment in GCP. I have TLS terminating at an IAAS managed load balancer, provided by their Ingress controller. The certificates are GoogleManagedCertificates. I'm fine with ...
1
vote
1
answer
2k
views
Changing $_SERVER['REMOTE_ADDR'] remotely
On a nginx web-server running the following config is to possible to change $_SERVER['REMOTE_ADDR'] remotely?:
user www;
pid /run/nginx.pid;
error_log /dev/stderr info;
events {
...
0
votes
1
answer
325
views
How might I rate-limit in nginx against a distributed attacker that has set the number of parallel connections in xerxes to 1?
An attacker tweaks xerxes by setting the number of CONNECTIONS in xerxes to 1 instead of 8, like so:
#define CONNECTIONS 1
They then attack with xerxes-executable mydomain 433.
Their strategy is to ...
0
votes
2
answers
300
views
Unusal GET requests in my nodejs journal - has my nginx/node been hacked? [duplicate]
Saw this in the journalctl for a service I have:
jul 29 12:39:05 ubuntu-18 node[796]: GET http://www.123cha.com/ 200 147.463 ms - 8485
jul 29 12:39:10 ubuntu-18 node[796]: GET http://www.rfa.org/...