Ervin Hegedus
Ervin Hegedus
Hi @mpitzl, thanks for reporting this - really sorry to hear this issue. I'm afraid this would be an OpenBSD specific bug. Currently, I don't have any OpenBSD VM around,...
In the initial comment above: ``` location / { # TEST proxy_pass http://127.0.0.1:12345; modsecurity_rules_file /etc/nginx/waf/modsecurity-Default_ModSecurity.conf; ``` could you share this file? (`/etc/nginx/waf/modsecurity-Default_ModSecurity.conf`)
> Ok, meanwhile I noticed the `SecAuditLog /tmp/dummy_audit_log_for_syntax_check` in the modsecurity config file. Removing this line makes the audit log working again. yes, that was my observation too, but I...
@dbc-ca, thanks for report - please check #336, we are fighting with this issue :).
@drexlma, thanks - the issue is under investigation. See #336.
Hi @jaysee, I apologize that missed out this issue - I try to take a look at this soon. Anyway, an example to reproduce the issue with the config you...
@jaysee thanks for detailed info - sorry to ask, but in which log you get `200`? It seems that your request is a regular one without any violation, which would...
Sorry, unfortunately I don't see exactly what do you want to achive and what configuration you use. Could you paste here your full vhost config, and `modsecurity.conf` relevant lines (skip...
I tried to rebuild the configuration based on given information above, and first time I got a different result - the `http_code` values was `404`, but when I compared the...
I think this is an interesting situation, because - as I understand - you use an internal redirect. And the mentioned PR above tried to fix that explained unexpected behavior....