Tag Info

New answers tagged

0

You can have weblogic use just TLS and termincate SSLv3/2 connections. Check this post "Weblogic Mitigate POODLE vulnerability after upgrade and still use CBC ciphers". He suggests upgrading java to 7u75 or using -Dweblogic.security.SSL.protocolVersion= Check this page for SSL weblogic, you will find it helpful ...


2

Change Host header from proxy_set_header Host $http_host; to proxy_set_header Host remote.example.com; Looks like I misinterpreted your sentences about document base. I thought it was a protection from java applet server so, it can't be downloaded unless we change the Host header. Apparently, document base that you ...


0

The following Apache configuration resolves the issue: ServerName domain.com ProxyRequests off ProxyPass /myapp http://localhost:8899/exist/apps/myapp ProxyPassReverse /myapp http://localhost:8899/exist/apps/myapp ProxyPassReverseCookiePath /exist / It changes the path from /exist to / in cookies so the session is properly mapped to ...


0

Biggest problem with your idea is that if you expect the reverse proxy to send cookies to the backend, but the client wouldn't send cookies to the frontend (unless the backend cookie domain was inferior to the frontend). I would suggest that mod_proxy would likely be too difficult to use, and in this case you'd get to your goal faster with mod_rewrite. ... ...


0

After hours of research I got simple solution with little luck. proxy_html.conf file was missing. I have copied this file from apache2.2 to /etc/apache/mods-available and made link in mods-enabled pointing to this file. vi /etc/apache2/mods-available added these lines: # Here's the declaration for W3C HTML 4.01 and XHTML 1.0 ProxyHTMLLinks a ...


1

There are a bunch of registry settings you can make, including to enable TLS 1.1 and 1.2 for TMG 2010, according to http://www.isaserver.org/articles-tutorials/configuration-security/improving-ssl-security-forefront-threat-management-gateway-tmg-2010-published-web-sites.html It’s also a good idea to enable new protocols such as Transport Layer Security ...


-1

Worked like a charm with the PT switch added <VirtualHost *:80> ServerName utorrent.yourdomain.com ProxyPreserveHost on RewriteEngine on RewriteRule ^/gui(/?)(.*)$ /$2 [PT] ProxyPass / http://127.0.0.1:8080/gui/ ProxyPassReverse / http://127.0.0.1:8080/gui/ </VirtualHost>


2

May be because you don`t have A DNS record for ubnt.aqtsolutions.com nslookup ubnt.aqtsolutions.com 8.8.8.8 Server: 8.8.8.8 Address: 8.8.8.8#53 ** server can't find ubnt.aqtsolutions.com: NXDOMAIN


3

"Server not found" from a browser often indicates a failure to resolve the host-name into an IP address. I notice that ubnt.aqtsolutions.com does not resolve, but the other two names do. It may be that your nginx configuration is fine and you just have a missing DNS entry.


2

You can modify nginx proxy server configuration like this: server { server_name example.com; listen 80; location / { proxy_pass http://127.0.0.1:3001; } location /foo { proxy_pass http://127.0.0.1:3002; } } server { server_name example.org; listen 80; location / { proxy_pass ...


0

Try using something like Fiddler (or a browser's developer tool network inspector with persisting of requests turned on) to watch what redirects are being sent that's causing the redirect loop. You could also try adding a slash at the end of your proxy URLs just in case that makes a difference - that's how I've set it up and how the example on ...


4

There's an apache module called mod_substitute that can do this. Here's a short example: <Location "/"> AddOutputFilterByType SUBSTITUTE text/html Substitute "s/uat.site.co.jp/jp.uat.site2uk.co.uk/ni" </Location> Or, when combined with mod_proxy: ProxyPass / http://uat.site.co.jp/ ProxyPassReverse / http://uat.site.co.jp/ Substitute ...


3

If you haven't restarted Apache, be sure to do that, but if you've already done so, you could try a global output filter that runs a custom PHP script to do your replacing just to see if that solves it for some reason. EDIT: based on your comment, it could be that substitute isn't working because the content is compressed. To turn off compression, add ...


0

As John Cave said, you could set up a remote desktop gateway. With this, you specify your connection with the internal name of the machine, and then use the RD Gateway server under the gateway settings of the connection. Alternatively, if you're just looking at a couple of machines, you could use port 3389 for C, and then a different port number for D.


1

Just to be different, Microsoft calls this an "RDP gateway", not a proxy server. I found this guide to setting one up here.


3

Nginx is being stopped from binding to SELinux pop_port_t ports. It possible is to alter the desired ports to be a type that nginx can bind to, e.g. http_port_t. # for port in {143,993,110,995} ; do semanage port -m -t http_port_t -p tcp $port ; done && semanage port -l -C SELinux Port Type Proto Port Number http_port_t ...


2

You just need to create a new VirutalHost section for loremipsum.bar.com. It would look something like: <VirtualHost *:80> ProxyPass / http://www.acme.com:8760/Application ProxyPassReverse / http://www.acme.com:8760/Application ServerName loremipsum.bar.com </VirtualHost>


0

This did it: <VirtualHost *:443> ServerName mydomain.com ServerAlias secure.mydomain.com <Proxy *> Order deny,allow Allow from all </Proxy> SSLEngine on SSLProxyEngine On SSLCertificateFile /etc/apache2/ssl/server.crt SSLCertificateKeyFile /etc/apache2/ssl/server.key ...


0

It seems to be a fairly simple thing to achieve. One simply needs to uncomment the following part in /etc/jetty.xml: <!-- Uncomment to enable handling of X-Forwarded- style headers <Call name="addCustomizer"> <Arg><New class="org.eclipse.jetty.server.ForwardedRequestCustomizer"/></Arg> </Call> --> so I was either ...


0

Ok, everything looks like it's running smoothly. Basically, I changed my Nginx server block to forward SSL requests to port 445, which Apache runs SSL on. Nginx Server Block proxy_redirect off; proxy_set_header X-Real-IP $remote_addr; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; ...


1

Simply have the FileZilla FTP server announce the correct external ip-address used by HA-proxy, which is something you can configure in Options --> Passive Mode Settings Normally the Linux kernel uses helper modules that scan the clear text FTP command channel for the PASV response to dynamically change that to the correct NAT response and/or to ...


0

Everything what do you need to setup - it's your case nginx as reverse proxy for zope: http://wiki.zenoss.org/Newsletter:5/Encrypt_All_the_Bits



Top 50 recent answers are included