starred/nginx-proxy-manager-NginxProxyManager

Fork 0

mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-04-26 01:45:54 +03:00

[GH-ISSUE #1044] is nginx build with modsecurity? #874

New issue

Closed

opened 2026-02-26 06:34:46 +03:00 by kerem · 5 comments

kerem commented

2026-02-26 06:34:46 +03:00

Owner

Originally created by @gent99 on GitHub (Apr 28, 2021).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1044

I'd like to ask, if nginx modsecurity is included in this project?

Kind regards

Originally created by @gent99 on GitHub (Apr 28, 2021). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1044 I'd like to ask, if nginx modsecurity is included in this project? Kind regards

kerem

2026-02-26 06:34:46 +03:00

closed this issue
added the
enhancement
label

kerem commented

2026-02-26 06:34:46 +03:00

Author

Owner

@jc21 commented on GitHub (Apr 28, 2021):

This is using a custom built OpenResty instance.

The parameters of the build can be found here.

Though I don't see mod security listed, I'm not sure if it's an internal module or not.

@jc21 commented on GitHub (Apr 28, 2021): This is using a custom built OpenResty instance. The parameters of the build [can be found here](https://github.com/jc21/docker-nginx-full/blob/master/scripts/build-openresty). Though I don't see mod security listed, I'm not sure if it's an internal module or not.

kerem commented

2026-02-26 06:34:47 +03:00

Author

Owner

@gent99 commented on GitHub (Apr 29, 2021):

as far as i know, modsecurity has to be build for the nginx version you are using. See here: https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/

The goal behind my question actually is: What's behind the setting "Block Common Exploits" in an proxy host?

@gent99 commented on GitHub (Apr 29, 2021): as far as i know, modsecurity has to be build for the nginx version you are using. See here: https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/ The goal behind my question actually is: What's behind the setting "Block Common Exploits" in an proxy host?

kerem commented

2026-02-26 06:34:47 +03:00

Author

Owner

@l4rm4nd commented on GitHub (May 4, 2021):

You can view the content of block-exploits.conf by yourself. Basically some regex stuff to block well known malicious actors, exploit strings, user agents and stuff.

Location is: /etc/nginx/conf.d/include/block-exploit.conf

@l4rm4nd commented on GitHub (May 4, 2021): ![image](https://user-images.githubusercontent.com/21357789/117022984-fe1b4900-acf8-11eb-8872-14c2cd6bb965.png) You can view the content of ``block-exploits.conf`` by yourself. Basically some regex stuff to block well known malicious actors, exploit strings, user agents and stuff. Location is: ``/etc/nginx/conf.d/include/block-exploit.conf``

kerem commented

2026-02-26 06:34:47 +03:00

Author

Owner

@gent99 commented on GitHub (May 6, 2021):

integrating modsecurity should be considerated for a new major version of npm, if it's possible. Especially with modsecurity it's kind of easy to include OWASP CRS https://owasp.org/www-project-modsecurity-core-rule-set/ wich could make npm to a fairly robust WAF

@gent99 commented on GitHub (May 6, 2021): integrating modsecurity should be considerated for a new major version of npm, if it's possible. Especially with modsecurity it's kind of easy to include OWASP CRS https://owasp.org/www-project-modsecurity-core-rule-set/ wich could make npm to a fairly robust WAF

kerem commented

2026-02-26 06:34:47 +03:00

Author

Owner

@chaptergy commented on GitHub (May 12, 2021):

Feature request: https://github.com/jc21/nginx-proxy-manager/issues/847

@chaptergy commented on GitHub (May 12, 2021): Feature request: https://github.com/jc21/nginx-proxy-manager/issues/847

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#874

No description provided.

Rows
Columns