Opened 3 years ago

Closed 3 years ago

#1452 closed task (invalid)

gzip doesn't work with nginx+modsecurity

Reported by: hamid.netinov@… Owned by:
Priority: major Milestone:
Component: nginx-module Version: 1.11.x
Keywords: Cc:
uname -a: Debian 3.16.7-ckt11-1+deb8u3 (2015-08-04) x86_64 GNU/Linux
nginx -V: nginx version: nginx/1.11.10
built by gcc 4.9.2 (Debian 4.9.2-10)
configure arguments: --prefix=/usr/local/nginx_fstack2/ --with-ff_module --add-module=/home/mine/ModSecurity/nginx/modsecurity/ --with-http_gzip_static_module

Description

Hi
I compiled nginx1.11.10 with modsecurity 2.9.0 and it works good. but the response doesn't zip. however when I disable modsecurity in config file, the response is zipped. why enabling modsecurity force response in plain?
the request is a static html file

Change History (5)

comment:1 by Maxim Dounin, 3 years ago

Resolution: invalid
Status: newclosed

The most likely answer looks obvious enough: likely the modsecurity module does something what disables gzipping. For questions about modsecurity please consider using modsecurity-related resources.

comment:2 by hamid.netinov@…, 3 years ago

Resolution: invalid
Status: closedreopened

comment:3 by hamid.netinov@…, 3 years ago

why this problem doesn't exist in apache while both using modsecurity?

in reply to:  3 comment:4 by Valentin V. Bartenev, 3 years ago

Replying to hamid.netinov@…:

why this problem doesn't exist in apache while both using modsecurity?

These modules aren't the same. Apache and nginx have different modsecurity modules, because they have absolutely different architecture and API.

Modsecurity for nginx can have bugs that modsecurity for Apache doesn't have and vice versa.

comment:5 by Maxim Dounin, 3 years ago

Resolution: invalid
Status: reopenedclosed
Note: See TracTickets for help on using tickets.