Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Recently I got an abuse report from aws for "Open Proxy". Following this url http://www.wikihow.com/Enter-Proxy-Settings-in-Firefox, I can see that my proxy is open.

I am using nginx with php-fpm. In my access log I do not see anything abnormal. I tried

cat /var/log/httpd/access_log | awk -F' ' '{print $1}' | sort -u > ips.txt
for ip in $(cat ips_in.txt) ; do  whois $ip | grep -i country | grep -o -E '[a-zA-Z]+$' > ip_countries.txt; done

The countries does not look like my server is being used as spam. But I do want to close this "Open Proxy". I tried to add

location / {    
 proxy_pass off;
}

nginx complained that this is syntax error. What can I do to stop this open proxy.

Update:

I found fastcgi_pass is mentioned in www.site.com.conf file after checking all of the configuration files.

location ~ \.php$ {
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    # A handy function that became available in 0.7.31 that breaks down
    # The path information based on the provided regex expression
    # This is handy for requests such as file.php/some/paths/here/

    fastcgi_param   PATH_INFO   $fastcgi_path_info;
    fastcgi_pass 127.0.0.1:9000;
    fastcgi_param   SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_index   index.php;
    include /etc/nginx/fastcgi.conf;
    fastcgi_connect_timeout 70;
    fastcgi_send_timeout 120;
    fastcgi_read_timeout 400;
    fastcgi_buffer_size 128k;
    fastcgi_buffers 8 128k;
    fastcgi_busy_buffers_size 256k;
    fastcgi_temp_file_write_size 256k;
    fastcgi_intercept_errors on;
}

can fastcgi_pass is reason nginx doing this?

share|improve this question
    
In order for nginx to be an open proxy then you probably have done something very horrible in the configuration file. You shall post any configuration areas of your configuration files that include references to proxy things. –  Florin Asavoaie Apr 20 at 12:11
    
@FlorinAsavoaie I checked all the configuration files nginx.conf & other configuration files in sites-enabled there is nothing mentioned about proxy. Do you thing its good idea to post configuration files here? –  Zakir Hyder Apr 21 at 6:21
    
Why do you think the open proxy problem has anything to do with nginx? Exactly what evidence did you receive? –  Michael Hampton Apr 21 at 13:16
    
@MichaelHampton AWS did not send any evidence just an abuse report. nginx is listening to port 80 and i can browse other site following this wikihow.com/Enter-Proxy-Settings-in-Firefox. So basically i assumed its problem with nginx. Am I correct or I am doing something wrong? –  Zakir Hyder Apr 21 at 13:37

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.