ReJeCtAll / naxsi

Automatically exported from code.google.com/p/naxsi
Other
0 stars 0 forks source link

nx_util generates an incorrect BasicRule #80

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?

Generate a BasicRule in order to put in whitelist this request:

2013/07/10 09:49:47 [error] 3709#0: *593 NAXSI_FMT: 
ip=212.25.179.138&server=joomla.XXX.it&uri=/administrator/index.php&total_proces
sed=277&total_blocked=2&zone0=REQUEST&id0=2&var_name0=BIG_REQU, client: 
XXX.25.179.138, server: , request: "POST 
/administrator/index.php?option=com_installer&view=install HTTP/1.1", host: 
"joomla.XXX.it", referrer: 
"http://joomla.XXX.it/administrator/index.php?option=com_installer"

This command has been issued:

nx_util -l /var/log/nginx/error.log -o

that has generated the following output:

BasicRule wl:2 "mz:$URL:/administrator/index.php|$REQUEST_VAR:BIG_REQU";

Restart nginx.

What is the expected output? What do you see instead?

The expected output is "The configuration file /etc/nginx/nginx.conf syntax is 
ok", but i obtain this error:

Starting nginx: nginx: [emerg] Naxsi-Config : Incorrect line BasicRule wl:2 
(../naxsi-core-0.50/naxsi_src//naxsi_skeleton.c/393)... in 
/etc/nginx/naxsi.rules:14
nginx: configuration file /etc/nginx/nginx.conf test failed

What version of the product are you using? On what operating system?

I've verified the problem using:

nginx-1.5.2
nx_util-1.0
naxsi-core-0.50
Debian GNU/Linux 6.0.4

Compiling and installing software from source, but there is the same problem 
installing "nginx-naxsi" package from official repository on Debian GNU/Linux 
7.1

Original issue reported on code.google.com by luca.erc...@gmail.com on 11 Jul 2013 at 1:54

Attachments: