jeremyjpj0916 comments

Results 114 comments of


                                            jeremyjpj0916

trafficstars

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

Okay, so 400 HTTPStatus is problematic still, but your solution should help for 403's and 504's my Kong instance treats as a connection/read timeout's going into the error_page redirect causing...

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

Okay starting from the top again I recognize the issue is ```error_page``` resetting the Originating HTTP Method Header being sent by the client from whatever they had set (POST PUT...

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

Wallarm CEO Ivan made the comments: ``` Thanks for sharing! We solved some similar problems while developing Wallarm Nginx module. The short answer is yes, the wrong Nginx phase was...

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

I think I had an epiphany on this today in my ponderings since is the last step in getting ModSecurity Nginx "productionalized" for us. Rather than write the above code...

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

Added my own PR as the solution to my stack overflow too: https://stackoverflow.com/questions/61805876/nginx-module-code-error-page-directive-problems/61950152#61950152 https://github.com/SpiderLabs/ModSecurity-nginx/pull/204

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

Stahp closing thingsssssss

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

indeed, yalls bot is misbehaving.

ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive

If I get some time I will take a look but no promises as my current gig keeps me busy, been over a year since I was messing with this...

kong_api_authz: Latest Rocks Build

Tried to do something quick and dirty for yah to play with but seems the way it references errors out: ``` # luarocks upload kong-plugin-opa2-0.1.1-2.rockspec --api-key=XXXXXXXXXXX chmod: cannot access ‘/root/.luarocks/upload_config.lua’:...

kong_api_authz: Latest Rocks Build

Can try using this, see if it works for your needs: https://luarocks.org/modules/optum-ross/kong-plugin-opa2 https://luarocks.org/modules/optum-ross/kong-plugin-opa2/0.1.1-2 Dropped the original source ref pointing at the other repo(https://github.com/open-policy-agent/contrib.git), so now it just references the source...