Unencoded Location: header when redirecting

2016-01-20 Thread Jim Nelson
We’re seeing the following behavior in nginx 1.4.6: * User navigates to location w/ spaces in the URL ("http://example.org/When%20Harry%20Met%20Sally";). The location points to a directory on the filesystem with spaces in its name ("/items/When Harry Met Sally”). * nginx returns “301 Moved Pe

nginx mod security module issue

2016-01-20 Thread Dhanushka Parakrama
Hi All I have complied the* nginx 1.9.9* with ModSecurity support . and configured the nginx,conf as fallows *Nginx Version : 1.9.9* *Modsecurity Version : 2.9* #nginx -V nginx version: nginx/1.9.9 built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04) built with OpenSSL 1.0.1f 6 Jan 2014 TLS SNI

log rate limits violations without enforcing them

2016-01-20 Thread Adrien Saladin
Hi list, Before applying new rate limit values, I would like to check if these rules will have an impact on legitimate clients. Is there a way to either set these rules in a "log only" mode, or a tool to analyse existing logs and see if the rule would have been triggered ? Thanks, Adrien __