<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Just curious. I though the WAF and ModSecurity was only available with NGINX Plus on a paid subscription basis ?<div class=""><br class=""></div><div class="">Is it possible to implement that without a paid subscription if one is willing and able to compile and configure it on their own ?</div><div class=""><br class=""></div><div class="">What about using it with something like OpenResty ?</div><div class=""><br class=""></div><div class="">Thank you.</div><div class=""><br class=""></div><div class="">/sds<br class=""><div><blockquote type="cite" class=""><div class=""><br class="">When replying, please edit your Subject line so it is more specific<br class="">than "Re: Contents of nginx digest..."Today's Topics:<br class=""><br class=""> 1. Re: Help with nginx.conf (Jeremy Cocks)<br class=""><br class=""><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">From: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">Jeremy Cocks <<a href="mailto:jeremy@jeremy.cx" class="">jeremy@jeremy.cx</a>><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">Re: Help with nginx.conf</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">November 12, 2022 at 2:51:42 AM GMT+1<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:nginx@nginx.org" class="">nginx@nginx.org</a><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Reply-To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:nginx@nginx.org" class="">nginx@nginx.org</a><br class=""></span></div><br class=""><br class=""><div dir="ltr" class=""><div class="gmail_default" style="color:#444444">You need to install the modsec lib from <span style="color:rgb(36,41,47);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px" class="">here (it has instructions)</span></div><div class="gmail_default" style="color:#444444"><a href="https://github.com/SpiderLabs/ModSecurity/tree/v3/master" style="box-sizing:border-box;text-decoration-line:none;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px" class="">https://github.com/SpiderLabs/ModSecurity/</a><br class=""></div><div class="gmail_default" style="color:#444444"><br class=""></div><div class="gmail_default" style="color:#444444">Depending on what distribution you are on, there may also be a package for it.</div><div class="gmail_default" style="color:#444444"><br class=""></div><div class="gmail_default" style="color:#444444">Thanks</div><div class="gmail_default" style="color:#444444">J</div><div class="gmail_default" style="color:#444444"><br class=""></div><div class="gmail_default" style="color:#444444"><br class=""></div><div class="gmail_default" style="color:#444444"><br class=""></div><div class="gmail_default" style="color:#444444">Cheers</div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 11 Nov 2022 at 18:40, Gus Flowers Starkiller <<a href="mailto:relectgustfs@gmail.com" class="">relectgustfs@gmail.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr" class="">Hi ! Thanks a lot for your explanation ! Well I've installed some Nginx servers all cases like configured like Proxy Reverse, But, at first I installed Nginx from pages different from <a href="http://Nginx.org" class="">Nginx.org</a> but the source were get from nginx too (i think) and cases like nginx.conf is happening, different files with <a href="http://ngonx.org/" target="_blank" class="">ngonx.org</a> and other sources and for example that directories like sites-available and sites-enabled are missing after installation:<div class="">e.g. /etc/nginx/sites-available and /etc/nginx/sites-enabled are not in installation from <a href="http://nginx.org/" target="_blank" class="">nginx.org</a> and as you say I could configure them to my own target, but in these cases I must install Nginx + ModSecurity + OWASP (CRS) because we must have the most security network with web pages to publicate. </div><div class="">So, is there any configuration that you could recommend me? </div><div class="">Another point too, I read the book about Nginx+Modsecurity from these book</div><div class=""><br class=""></div><div class=""><span id="cid:ii_lacu6kba0"><image.png></span><br class=""></div><div class=""><br class=""></div><div class="">And I couldn't find in which directories of linux is installed Nginx, in my cases Nginx and OWASP is in /usr/local/src but in the moment where I must compile Nginx there is error about module</div><div class=""><b class="">"<span style="color:rgb(36,41,47);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji"" class="">./configure: error: ngx_http_modsecurity_module requires the ModSecurity library."</span></b></div><div class=""><span style="color:rgb(36,41,47);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji"" class=""><br class=""></span></div><div class=""><span style="color:rgb(36,41,47);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji"" class="">Well I hope all these words don't disturb you at all, please sorry and any word you can tell me about this, I will be so grateful. Thanks a lot, greetings from Argentina.</span></div><div class=""><span style="color:rgb(36,41,47);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji"" class=""><br class=""></span></div><div class=""><span style="color:rgb(36,41,47);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji"" class="">Gus Fls</span></div></div></blockquote></div></div></blockquote></div><br class=""></div></body></html>