Get the most out of your Centmin Mod LEMP stack
Become a Member

Nginx PageSpeed pagespeed admin pages open to all?

Discussion in 'Nginx, PHP-FPM & MariaDB MySQL' started by RPGX, Aug 15, 2014.

  1. RPGX

    RPGX New Member

    26
    4
    3
    Aug 14, 2014
    Ratings:
    +4
    Local Time:
    1:58 AM
    Nginx 1.9.15
    MariaDB 5.5.50
    I can get to all the locations in /usr/local/nginx/conf/pagespeedhandler.conf from the public site, despite the allow; deny setting in there (which I haven't changed).

    Interestingly, that conf file is not explicitly included (it is commented out) in both of the domains in conf.d, and a grep -R in the /usr/local/nginx/conf directory shows no place where I'd expect it to be loaded.

    Any idea what's going on?

    Thanks for you help.

    EDIT: to be clear, that location information shouldn't even be loading that I can see; if it is, it probably isn't from /usr/local/nginx/conf/pagespeedhandler.conf

    EDIT 2: the only place I can find that looks at all suspicious is /usr/local/nginx/conf/pagespeedadmin.conf
     
  2. RPGX

    RPGX New Member

    26
    4
    3
    Aug 14, 2014
    Ratings:
    +4
    Local Time:
    1:58 AM
    Nginx 1.9.15
    MariaDB 5.5.50
    I am now loading pagespeedhandler.conf, which has caused the pages to be blocked, but it's a little concerning that they are open in the default install.
     
  3. eva2000

    eva2000 Administrator Staff Member

    30,142
    6,781
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,131
    Local Time:
    3:58 PM
    Nginx 1.13.x
    MariaDB 5.5
    ngx_pagespeed is disabled by default so 3 include lines are commented out in vhosts and needs enabling as per instructions at ngx_pagespeed install on Centmin Mod - Menu based Nginx installer for CentOS servers (literally everything you need to know) ;)

    They shouldn't open the pagespeed locations by default as they're ip restricted to 127.0.0.1 only unless you add your ip to the locations as per instructions at ngx_pagespeed install on Centmin Mod - Menu based Nginx installer for CentOS servers

    You'd want to read the troubleshooting thread too if you have issues Nginx PageSpeed - Nginx Pagespeed Troubleshooting steps | Centmin Mod Community