[Feature request] modsecurity

[sptndc]

Please, add libnginx-mod-http-modsecurity.

Distribution (please complete the following information):

• OS: Ubuntu
• Architecture: amd64
• Repository: Ubuntu Nginx PPA

[abkrim]

or is possible compile nginx with-compat for every user can compile module modsecurity using Nginx doc.

A lot of thanks for your repo.

[oerdnj]

Bump for myself...

[bashgeek]

Bump for myself...

Sorry, had to bump your bump :-)

[dkorunic]

I can confirm the issue for libapache2-mod-security2 when using libpcre2-8-0 from deb.sury.org:
Package installed:

ii  libpcre2-8-0:amd64               10.42-3+ubuntu22.04.1+deb.sury.org+1                                 amd64        New Perl Compatible Regular Expression Library- 8 bit runtime files

From ModSecurity error logs:

ModSecurity: PCRE compiled version="8.39 "; loaded version="8.45 2021-06-15"
ModSecurity: Loaded PCRE do not match with compiled!

This results in various PCRE operators such as @rx to fail to match.

[oerdnj]

ModSecurity: PCRE compiled version="8.39 "; loaded version="8.45 2021-06-15"

That would be libpcre3* package, not libpcre2-8-0.

[dkorunic]

Agreed @oerdnj, sorry for the wrong c/p from the running system:

ii  libpcre3:amd64                         2:8.45-1+ubuntu22.04.1+deb.sury.org+1                                amd64        Perl 5 Compatible Regular Expression Library - runtime files

As we said, this happens from php*-dev dependancies that bring deb.sury.org+1 libpcre variants and ModSecurity PCRE ends up broken.

[jogoossens]

Please add libnginx-mod-http-modsecurity for nginx on Debian as well, we are coming from the bookworm nginx which DOES HAVE this package available :)