Letractively / naxsi

Automatically exported from code.google.com/p/naxsi
Other
0 stars 0 forks source link

Naxsi crashes nginx worker process #54

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?

nginx vhost:
# HTTPS server
server {

    server_name  mail.example.com;

    location / {
        proxy_pass        http://localhost:8100;
        proxy_set_header  X-Real-IP  $remote_addr;
#        include    /etc/nginx/naxsi.rules;
    }
    location /RequestDenied {
        return 200;
    }
}

naxsi.rules:
LearningMode; #Enables learning mode
SecRulesEnabled;
#SecRulesDisabled;
DeniedUrl "/RequestDenied";

include "/tmp/naxsi_rules.tmp";

## check rules
CheckRule "$SQL >= 8" BLOCK;
CheckRule "$RFI >= 8" BLOCK;
CheckRule "$TRAVERSAL >= 4" BLOCK;
CheckRule "$EVADE >= 4" BLOCK;
CheckRule "$XSS >= 8" BLOCK;

2013/01/04 23:49:45 [alert] 22129#0: worker process 22141 exited on signal 11 
2013/01/04 23:50:12 [error] 22163#0: *2 NAXSI_FMT: 
ip=127.0.0.1&server=mail.example.com&uri=/&total_processed=4294967297&total_bloc
ked=-522414797380124263, client: 127.0.0.1, server: mail.example.com, request: 
"GET / HTTP/1.1", host: "mail.example.com" 2013/01/04 23:50:12 [alert] 22162#0: 
worker process 22163 exited on signal 11

What is the expected output? What do you see instead?

- Empty page

What version of the product are you using?

- nginx 1.2.6 (based on nginx.org deb)
- naxsi 0.48

On what operating system?

- Ubuntu 12.04

Original issue reported on code.google.com by hel...@gmail.com on 4 Jan 2013 at 11:59

GoogleCodeExporter commented 8 years ago
latest trunk release fixed this problem...

Original comment by hel...@gmail.com on 5 Jan 2013 at 12:32

GoogleCodeExporter commented 8 years ago

Original comment by ori...@gmail.com on 7 Jan 2013 at 6:03