angie 1.2.0 and modsecurity

[emiliocamposmartin]

HI, I have tried to compile angie with modsecurity as follow:

1-COmpile modsecurity 2.9.1 in standalone
2-Compile Angie 1.2.0 adding the module compiled in the configure (--add-module=../modsecurity-2.9.1/nginx/modsecurity), in the make the following error is shown:

/opt/modsec/modsecurity-2.9.1/nginx/modsecurity//ngx_http_modsecurity.c

/opt/modsec/modsecurity-2.9.1/nginx/modsecurity//ngx_http_modsecurity.c: In function ‘ngx_http_modsecurity_save_headers_in’:
/opt/modsec/modsecurity-2.9.1/nginx/modsecurity//ngx_http_modsecurity.c:358:39: error: ‘ngx_http_headers_in_t’ {aka ‘struct ’} has no member named ‘cookies’; did you mean ‘cookie’?
if (ngx_array_init(&r->headers_in.cookies, r->pool, 2,
^~~~~~~
cookie
/opt/modsec/modsecurity-2.9.1/nginx/modsecurity//ngx_http_modsecurity.c: In function ‘ngx_http_modsecurity_save_request_body’:
/opt/modsec/modsecurity-2.9.1/nginx/modsecurity//ngx_http_modsecurity.c:531:17: error: ‘ngx_http_connection_t’ {aka ‘struct ’} has no member named ‘nfree’; did you mean ‘free’?
if (hc->nfree && size == cscf->large_client_header_buffers.size) {
^~~~~
free
/opt/modsec/modsecurity-2.9.1/nginx/modsecurity//ngx_http_modsecurity.c:533:34: error: ‘ngx_http_connection_t’ {aka ‘struct ’} has no member named ‘nfree’; did you mean ‘free’?
buf = hc->free[--hc->nfree];
^~~~~
free
make[1]: *** [objs/Makefile:1304: objs/addon/modsecurity/ngx_http_modsecurity.o] Error 1

Is mod security supported in Angie? I tried modsecurity version 2.9.1 maybe another version is required.

Thanks!

[VBart]

ModSecurity 2.9.1 isn't compatible with nginx 1.23 and above, while Angie 1.2.0 is based on nginx 1.25.
See here: owasp-modsecurity/ModSecurity#2882 - you should try to build with ModSecurity v3.0.x.

[emiliocamposmartin]

Thanks for the prompt response, I will try as indicated. Regards! El jue, 1 jun 2023 a las 16:01, Valentin V. Bartenev (< ***@***.***>) escribió:

…

ModSecurity 2.9.1 isn't compatible with nginx 1.23 and above, while Angie 1.2.0 is based on nginx 1.25. See here: owasp-modsecurity/ModSecurity#2882 <owasp-modsecurity/ModSecurity#2882> - you should try to build with ModSecurity v3.0.x. — Reply to this email directly, view it on GitHub <#31 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AMFCBLCRLW3GVNDOO4FFGOTXJCOD7ANCNFSM6AAAAAAYW6VJQI> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[ihard]

Are there any plans to build the module similarly to the others?

[VBart]

Are there any plans to build the module similarly to the others?

^^ @lonerr

[lonerr]

Are there any plans to build the module similarly to the others?

I think we should at least try.
Thank you for idea.

[lonerr]

@ihard, We've just released angie-module-modsecurity packages for all supported platforms:
https://angie.software/en/howto/modsecurity/

Please have a look and let us know how it helps.

[ihard]

works great, thanks!