Re: Question about reverse proxies and WAFs

2016-04-24 Thread CJ Ess
There is a version of modsecurity for Nginx - https://github.com/SpiderLabs/ModSecurity - however it tends to cause random mysterious problems including segfaults so maybe not what your looking for. There are also several WAFs built upon Openresty (nginx + luajit at openresty.com) however I haven'

Re: Question about reverse proxies and WAFs

2016-04-24 Thread Robert Paprocki
With respect the ModSecurity and the CRS, the current nginx implementation of ModSecurity is still pretty buggy and likely won't get any attention. It's known to cause segfaults and server-side errors during requests. You'd be better off looking at the libmodsec v3 integration, which is still in

Question about reverse proxies and WAFs

2016-04-24 Thread Francisco V.
Hi all, How are you? First of all excuse my english as it is not my mother tongue. I'd like to ask a rather general question which is not nginx specific: In my new job they use an Apache webserver running mod_proxy as a reverse proxy that works as the single entry point from the outside

Configure NGINX on windows to use LDAP

2016-04-24 Thread v_shirin
Hello All I would like to know what configuration is needed to configure NGINX on windows to use LDAP. My nginx.conf looks like below but am not able to start the nginx service. I have added the 'ldap_server ProdLDAP ' section under http and 2 other paramaters named 'auth_ldap_xxx' under server