nginx mod security module issue
Dhanushka Parakrama
parakrama1282 at gmail.com
Wed Jan 20 12:55:35 UTC 2016
Hi All
I have complied the* nginx 1.9.9* with ModSecurity support . and
configured the nginx,conf as fallows
*Nginx Version : 1.9.9*
*Modsecurity Version : 2.9*
#nginx -V
nginx version: nginx/1.9.9
built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04)
built with OpenSSL 1.0.1f 6 Jan 2014
TLS SNI support enabled
configure arguments: --user=www-data --group=www-data --with-pcre-jit
--with-debug --with-ipv6 --with-http_ssl_module
--add-module=/opt/modsecurity-2.9.0/nginx/modsecurity
*nginx.conf=========*user www-data;
worker_processes 1;
error_log /var/log/nginx/error.log;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
access_log /var/log/nginx/access.log;
sendfile on;
keepalive_timeout 65;
gzip on;
server {
listen 80;
server_name example.org;
location / {
ModSecurityEnabled on;
ModSecurityConfig modsecurity.conf;
root html;
index index.html index.htm;
}
location /sonar {
ModSecurityEnabled on;
ModSecurityConfig modsecurity.conf;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://192.168.8.52:443/sonar;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
-> When i access the *http://example.org <http://example.org>* i can
access the web page and modsecurity lodged the access data to to Audit
log .
-> Then i access the * http://example.org/sonar <http://example.org/sonar>
*i get the following error in my logfile
2016/01/20 18:17:28 [alert] 3520#0: worker process 3549 exited on signal 11
(core dumped)
2016/01/20 18:17:29 [alert] 3520#0: worker process 3551 exited on signal 11
(core dumped)
2016/01/20 18:17:29 [alert] 3520#0: worker process 3553 exited on signal 11
(core dumped)
2016/01/20 18:17:29 [alert] 3520#0: worker process 3555 exited on signal 11
(core dumped)
Can you guys please how to over come this issue
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20160120/b2263302/attachment.html>
More information about the nginx
mailing list