Might have more luck asking on webhostingtalk.com for security stuff. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,27636,27795#msg-27795