Re: OT / Re: nginx segfaulting with mod_security

2014-04-14 Thread Robert Paprocki
Hi mex! Thanks for the tip! I've known about naxsi for a while. I'm researching various WAF options that will scale well for my Master's thesis, and mod_security + nginx interested me (my other research is pointing towards using Varnish, for which several WAF solutions have already been somewhat i

OT / Re: nginx segfaulting with mod_security

2014-04-14 Thread mex
hi robert, if you dont depend on mod_security's advanced features like output-filtering'n'stuff you might want to try naxsi https://github.com/nbs-system/naxsi/wiki its stable, its fast, rules are easy to create and understand and it provides a set of basic features for a waf. the community is

Re: nginx segfaulting with mod_security

2014-04-14 Thread Robert Paprocki
I realized that I spoke too soon about gzip shortly after sending this. My apologies for making a silly assumption; I am a sysadmin by trade and not so skilled at developing or troubleshooting complex server software. I've contact mod_security mailing list but haven't heard back from them. Thank yo

Re: nginx segfaulting with mod_security

2014-04-14 Thread Maxim Dounin
Hello! On Sun, Apr 13, 2014 at 08:42:04PM -0700, Robert Paprocki wrote: > Hi Maxim! > > Thank you for your response, always nice to actually hear back from > someone knowledgeable. Once thing I had noticed while looking at > backtraces (coredumps seem to indicate segfaults occurring in a number

Re: nginx segfaulting with mod_security

2014-04-13 Thread Robert Paprocki
Hi Maxim! Thank you for your response, always nice to actually hear back from someone knowledgeable. Once thing I had noticed while looking at backtraces (coredumps seem to indicate segfaults occurring in a number of places, not just filter_module.c:121) was that every bt seemed to include gzip mo

Re: nginx segfaulting with mod_security

2014-04-13 Thread Henry Suhatman
B. On Apr 13, 2014 5:18 PM, "Maxim Dounin" wrote: > Hello! > > On Sat, Apr 12, 2014 at 04:44:28PM -0700, Robert Paprocki wrote: > > > Hello, > > > > I have compiled nginx-1.5.13 with modsecurity-2.7.7 and am seeing > > occasional segfaults when sending requests to the server. mod_security > > was

Re: nginx segfaulting with mod_security

2014-04-13 Thread Maxim Dounin
Hello! On Sat, Apr 12, 2014 at 04:44:28PM -0700, Robert Paprocki wrote: > Hello, > > I have compiled nginx-1.5.13 with modsecurity-2.7.7 and am seeing > occasional segfaults when sending requests to the server. mod_security > was compiled as a standalone module per the instructions made availabl

nginx segfaulting with mod_security

2014-04-12 Thread Robert Paprocki
Hello, I have compiled nginx-1.5.13 with modsecurity-2.7.7 and am seeing occasional segfaults when sending requests to the server. mod_security was compiled as a standalone module per the instructions made available at https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#Installation_fo