Re: nginx modsecurity on Debian 8

2015-12-23 Thread Alt
Hello again :-) As said in my last message, in theory you shouldn't lose your configuration. But : backup, backup and backup :-) And compile and test on a test server, not on a production server :-) Best Regards. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,263657,263677#msg-263677

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Alt
Hello Thierry, Just rebuilding a Debian package and installing it shouldn't break anything. But a problem or mistake can always happen, so I don't recommend doing eveything I said in my previous message on your production server. I don't think you want to spend your XMas fixing your server :-) So

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Thierry
Bonjour nanaya, Ok, but if I recompile everything, do I lose the actual nginx's config ? Le mercredi 23 décembre 2015 à 19:33:11, vous écriviez : > On Thu, Dec 24, 2015, at 02:31, Thierry wrote: >> Bonjour Alt, >> >> Thx a lot But, I might mistaken ... >> My nginx is already working,

Re: nginx modsecurity on Debian 8

2015-12-23 Thread nanaya
On Thu, Dec 24, 2015, at 02:31, Thierry wrote: > Bonjour Alt, > > Thx a lot But, I might mistaken ... > My nginx is already working, as already been compiled with a certain > number of modules ... I do not want to break something ... > If I am doing what you said ... It might happen no ?

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Thierry
Bonjour Alt, Thx a lot But, I might mistaken ... My nginx is already working, as already been compiled with a certain number of modules ... I do not want to break something ... If I am doing what you said ... It might happen no ? Thx* Le mercredi 23 décembre 2015 à 18:47:18, vous écrivie

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Alt
Hello Thierry, Here's a quick howto build a nginx debian package, I hope it's clear and that I'm not making mistakes. First, you need to get the source of nginx and others files to build the package. You can probably do something like "apt-get source nginx", but I prefer to go on this page: https

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Thierry
Hi Nikolai, Seems for me to be a bit tricky. Not going to do something because I do not want to break something who is already working perfectly Why is it so complicated to install a module for nginx ? Thx anyway and happy christmas. Le mercredi 23 décembre 2015 à 15:03:10, vous écriviez

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Nikolai Lusan
Greetings, On Wed, 2015-12-23 at 14:21 +0200, Thierry wrote: > A bit lost ... > I know nothing concerning nginx, I am more confortable with Apache2. > I am using an email server who is using nginx on debian 8. > I would need to install modsecurity as module. > I have understood that I need to comp

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Anoop Alias
append the configure argument you already mentioned ./configure --add-module=/opt/ModSecurity-nginx with the --with-cc-opt='-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt=-Wl,-z,relro --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Thierry
What I have ... Could you please explain to me what do I have to do ? I do not understand ... Sorry nginx version: nginx/1.6.2 TLS SNI support enabled configure arguments: --with-cc-opt='-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt=-Wl,-z,rel

Re: nginx modsecurity on Debian 8

2015-12-23 Thread Anoop Alias
nginx -V will show configure arguments. You need to add mod_sec at the beginning of whatever is in there. On Wed, Dec 23, 2015 at 5:51 PM, Thierry wrote: > Hi, > > A bit lost ... > I know nothing concerning nginx, I am more confortable with Apache2. > I am using an email server who is using ngi

nginx modsecurity on Debian 8

2015-12-23 Thread Thierry
Hi, A bit lost ... I know nothing concerning nginx, I am more confortable with Apache2. I am using an email server who is using nginx on debian 8. I would need to install modsecurity as module. I have understood that I need to compile from the working directory of nginx ./configure --add-mo