New firewall filters

Started by Toruk Makto, August 19, 2013, 11:10:32 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Toruk Makto

Well, it's not all that simple. I do have flexible SSL turned on at Cloudflare, but supporting SSL on the server here is not just flipping a config switch. I also can't justify the cost of a public cert for this site.  If China has firewalled Cloudflare, then they have essentially screwed the people out of a lot of content on the net. At the risk of sounding insensitive, I cannot overcomplicate the working of this server to try to work around Chinese government policy. We are going to have to support a massive load when the next films come out on what we have.

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Irtaviš Ačankif

#21
Quote from: Toruk Makto on September 10, 2013, 09:06:12 PM
Well, it's not all that simple. I do have flexible SSL turned on at Cloudflare, but supporting SSL on the server here is not just flipping a config switch. I also can't justify the cost of a public cert for this site.  If China has firewalled Cloudflare, then they have essentially screwed the people out of a lot of content on the net.
I don't mean the China firewalling thing. I do mean the SSL offered through Cloudflare - it does not work properly because SMF uses absolute URLs, and must be told to use HTTPS to use URLs starting in HTTPS - the switch I'm talking about. I mean that access from China would be much faster, even through Cloudflare, if the SSL is enabled properly and HTTP is redirected to SSL. It also makes people feel safer entering their passwords on public Wi-Fi ;) and Cloudflare makes SSL very simple.

Flexible SSL also does not increase server load.
Previously Ithisa Kīranem, Uniltìrantokx te Skxawng.

Name from my Sakaš conlang, from Sakasul Ältäbisäl Acarankïp

"First name" is Ačankif, not Eltabiš! In Na'vi, Atsankip.

Toruk Makto

I am not aware of that SMF switch. Is that a v1.1x feature?

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Irtaviš Ačankif

Quote from: Toruk Makto on September 10, 2013, 09:11:17 PM
I am not aware of that SMF switch. Is that a v1.1x feature?
I think there is a 'forum root URL' setting somewhere.
Previously Ithisa Kīranem, Uniltìrantokx te Skxawng.

Name from my Sakaš conlang, from Sakasul Ältäbisäl Acarankïp

"First name" is Ačankif, not Eltabiš! In Na'vi, Atsankip.

Toruk Makto

There is the forum URL, but no option for SSL.

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Tìtstewan


-| Na'vi Vocab + Audio | Na'viteri as one HTML file | FAQ | Useful Links for Beginners |-
-| Kem si fu kem rä'ä si, ke lu tìfmi. |-

Irtaviš Ačankif

Quote from: Toruk Makto on September 10, 2013, 09:14:13 PM
There is the forum URL, but no option for SSL.
So the forum URL does not start with http:// (which would be changeable to https://) but with the bare domain? Hmm...
Previously Ithisa Kīranem, Uniltìrantokx te Skxawng.

Name from my Sakaš conlang, from Sakasul Ältäbisäl Acarankïp

"First name" is Ačankif, not Eltabiš! In Na'vi, Atsankip.

Toruk Makto

I will take a look at this over the next few days.  Thanks for the pointers!

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Kemaweyan

#28
I'm sorry. I solved the issue. There was wrong record in my /etc/hosts (when my ISP had problems with DNS I wrote some addresses into /etc/hosts manually) :-[ I removed that record and now forum works fine. Thanks.
Nìrangal frapo tsirvun pivlltxe nìNa'vi :D

Toruk Makto

Well, the Secure login mod does NOT play well with several existing mods, so I think that is out. I did get Apache SSL up on a self-signed cert, but the forums will likely have a problem with it, as you said.

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Toruk Makto

Quote from: Kemaweyan on September 11, 2013, 12:28:05 AM
I'm sorry. I solved the issue. There was wrong record in my /etc/hosts (when my ISP had problems with DNS I wrote some addresses into /etc/hosts manually) :-[ I removed that record and now forum works fine. Thanks.

Wou!  Good one!

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Tìtstewan

#31
Quote from: Toruk Makto on September 11, 2013, 12:22:58 PM
Well, the Secure login mod does NOT play well with several existing mods, so I think that is out.
I've afraid that. *never touch a running system* :)

-| Na'vi Vocab + Audio | Na'viteri as one HTML file | FAQ | Useful Links for Beginners |-
-| Kem si fu kem rä'ä si, ke lu tìfmi. |-

Toruk Makto

Yeah, I think we have been down enough lately without me going in and turning the forums into mince pie.  ;)

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Tìtstewan

#33
I will try it....

Edit 1:
Seems it works

But I lost the SSL after write a post.

Edit 2:
There was a post before...

-| Na'vi Vocab + Audio | Na'viteri as one HTML file | FAQ | Useful Links for Beginners |-
-| Kem si fu kem rä'ä si, ke lu tìfmi. |-

Toruk Makto

Disregard. It keeps dropping back out of SSL. That mod breaks things with the pretty URLs rewrites and I am not sure I want to get into to all that.

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf