Search found 114 matches

By using the IP Address Control, you can block certain IP address and by using the * you can block an entire range:

For IPv4 you can use for example aaa.bbb.*
For IPv6 I tried: aaaa:bbbb:cccc:ddd ...

Again the possibility of a remote code execution.
Even an opt-in mailinglist for this kind of warnings/PHP updates would be nice.

We're working on such a list. Not only PHP, but also many other t ...

Again the possibility of a remote code execution.
Even an opt-in mailinglist for this kind of warnings/PHP updates would be nice.

I have the following File Expiration Times set:

https://tweakers.net/fotoalbum/image/Af7fSlZkUVMbGN6gPF1zLZ7I.png

but I still see quite a lot of requests for for example the font & CSS files ...

In the meantime started using a new PC as a webserver, so... the stats have been reset:

https://tweakers.net/fotoalbum/image/4oHSoz5tDtiDG0XT4Tsft5Wq.png

I haven't tried this, but... all the IP address that you block in the "Denied IP Addresses" list end up in your abyss.conf in the following section:

<ipcontrol>
<rules>
...

Since this exploit allowes Remote Code Execution, maybe send an e-mail to users would be more appropiate?

It's been kind of quiet regarding new features/releases?

Time for a little celebration:

https://tweakers.net/fotoalbum/image/ulP7P927HC1hfRewuqM2c6mb.png

In the meantime I have reconsidered indeed. Too many things still use http/1.1

Thanks for your input!

Is there a way to use the rewrite rules to only accept http/2 connections and to forward http/1.1 requests to a defined error page?

Although I'd still like to do some testing with this, I just real ...

LOL... No, the double post was not a reaction to you :)

I (as in ME) actually made a double post (By replying my own message instead of editting it). So i deleted the content of that message and re ...

Double post. Please delete

Wow.... 43 of them:

https://www.fusionwings.com/JMM/screenshots/Abyss-processes-02.png

When I stopped my Abyss service, they did not disappear. And when I restarted the Abyss service, there wer ...

Same here, 22H2.

But the problem also happens when I access the site(s) locally. Both from the local network, but also on the server itself. Even the accessing the Abyss Web Server console on the l ...

Hi,
I doubt you'll get into problems with this news post. And I can confirm these issues, like I did in the previous threads.
A similar setup here: Windows 10 Pro 22H2, AMD Ryzen 5 4650 Pro, 16GByte ...

It appears the logs were enough (phew). There appears to be a bug in the HTTP/2 module, so we've disabled HTTP/2 on the server that responds weirdly.

tfh: They also said to stop using the statisti ...

tfh: I was finally able to capture enough information to generate a support ticket. Hopefully, this will lead to some info.

The user reports were never specific enough, so I created a sensor that r ...

I just noticed in the download section there is a 2.16.4.2?

tfh:
My issue appears to be a little different. The few random reports I've gotten don't appear to time-out. They "eventually" display the full response.
Well, that's also what I mean.... ...

I sometimes even have the problem when accessing it on the local machine itself. So the root of the problem is not physical network related.
It seems that sometimes a thread hangs and because of that ...

Well, it's a very usefull thread. I've used it a few years ago to setup AWSTATS and it works fine :)

A bit less happy with the stability these days. Already filed some bugs quite some time ago, but it kind of remains quiet. I'll should e-mail support I guess.

As we discussed by email, the 20-secon ...

https://tweakers.net/fotoalbum/image/Dlp2ZoGQaI2o6IDnyKqjh4wh.png

Running 2 domains, about 10 sub-domains. Moved to X2 a bit over a year ago and VERY VERY happy with the quality of stability of Aby ...

Hi
Any update on the matter, either by @tfh or by @admin?
I'm willing to update to the latest version but I'm hesitant since the bug reports..
Thanks! :)
Well, the http/2 support is worth the iss ...

https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html
Does this affect Abyss Webserver? If zo, will we see an updated version soon?

The bug affects version 3.0 of OpenSSL. Ab ...

Well, I'm using the most recent Abyss, so TLS 1.3.
The best way to get the full report is by going here:
https://www.ssltrust.com.au/ssl-tools/website-security-check?domain=www.arnauddeklerk.com
Yo ...

https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html
Does this affect Abyss Webserver? If zo, will we see an updated version soon?

Well, I'm using the most recent Abyss, so TLS 1.3.
The best way to get the full report is by going here:
https://www.ssltrust.com.au/ssl-tools/website-security-check?domain=www.arnauddeklerk.com
Yo ...

When doing some test on my website, https://www.ssltrust.com.au/ tells me that my server is at risk for secure_client_renego, or better: SSL Renogotation vulnerability.
Should I be worried?

tfh,

Thank you for your feedback about 2.16.4. The bug you have experienced could also be related to stopping the server when it is very busy with very long standing connections.

We will investi ...

tfh,

Thank you for your feedback about 2.16.4. The bug you have experienced could also be related to stopping the server when it is very busy with very long standing connections.

We will investi ...

Also going to the Server Activity in the console can still cause a crash of the server.

I have just upgraded to v2.16.4 -> The bug in the installer is still there: It says that the service has been restarted, and for a brief moment you see the webserver starting in the Task Manager, a ...

Thanks for the help! It works great!

What is the correct rewrite to do this? Including for all underlying URL's of course. So just to add the "www." in front of a URL in case it's missing.

Yes, you're right. Silly me. But it is impressive how much data has been served by your Abyss instance!

I just checked and my total uptime is 1614 days and the transferred data is 1278583694 KB ( ...

By the way, the screenshots suggest that we'd better pretty print the values and use other units (MB/GB/TB) instead of KB only!

Sorry to drop in on this thread a month later... Haven't been to the ...

tfh,

The figures are pretty impressive!

By the way, the screenshots suggest that we'd better pretty print the values and use other units (MB/GB/TB) instead of KB only!

Some percentages and a ...

https://tweakers.net/fotoalbum/image/Dlp2ZoGQaI2o6IDnyKqjh4wh.png

Running 2 domains, about 10 sub-domains. Moved to X2 a bit over a year ago and VERY VERY happy with the quality of stability of Aby ...

For the price of this single vendor-locked RPi board that cannot be upgraded I can just use a random old computer I have at home, and put Abyss X2 on it.
Well, I've asked for a version for my RPi4 ...

I can't believe how stupid I was, and deeply embarrassed.

It turns out that I ad neglected to port-forward 443 in my ISP's modem :-).

All is good now, and working perfectly. I even found a post ...

Looking at the above, I would say that the 3 certificates are downloaded and working. When trying to visit your server it seems that it's not responding ar port 443. Have you forwarded those in your f ...

Great! But we don't guarantee that the mapping idea will be implemented in the very near future. The console feature would see the light first.
Great. Looking forward to it :)

Especially if you could also make it available as a webpage :)

Inside the console or even outside of it? (in other words as a page mapped in one of the sites?
Preferably also as a page mapped to a ...

That would be very nice indeed ;-) Especially if you could also make it available as a webpage :)

https://tweakers.net/fotoalbum/image/Dlp2ZoGQaI2o6IDnyKqjh4wh.png

Running 2 domains, about 10 sub-domains. Moved to X2 a bit over a year ago and VERY VERY happy with the quality of stability of Aby ...

It's up to you :) I'll happily put up a mirror. In that case, feel free to send me the files. But I can also imagine that one location is enough & more clear for the users.
I'd like to thank Pige ...

If needed, I can host your website as well. Bandwith and space are not an issue. I can give it a subdomain like trustabyss.file-hunter.com.
It would be a shame if this information and those scripts g ...

Is there any experience with 2.16.1.9 running on Windows 11 Pro?

Windows 11 is Windows 7 + Eye Candy + DRM and user tracking. The kernel, networking and the Win32 API what Abyss Web Server uses h ...