Package: nginx-naxsi
Version: 1.2.1-2.2+wheezy2
Severity: important

Dear Maintainer,

When using naxsi installed through nginx-naxsi package, and by activating it in 
the config files, certain web-applications were affected and could not be 
loaded, even when Naxsi was set to be in LearningMode. The effects of the 
web-application where that sometimes the css files were not loaded, after 
another refresh the website seemed correct, another refresh and the logo was 
not loaded, etc. Random load issues of elements to describe it best.

In the naxsi wiki it is mentioned, that naxsi should be compiled as FIRST nginx 
module. This is not the case when naxsi is installed with the package 
nginx-naxsi. 

We have manually re-compiled nginx from the nginx sources (installed Debian 
source package for nginx) together with the current release of naxsi sources. 
After re-activation of naxsi in the config files, the above mentioned 
web-application is now working fine.

So there are two things to do:

1) Please redo the nginx-naxsi package with another order of compiled modules 
(naxsi first!) - necessary
2) Please compile nginx with the newest source of naxsi - many rules have 
changed since the naxsi release with Wheezy - optional

Thank you =)


-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 
'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/24 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages nginx-naxsi depends on:
ii  libc6         2.13-38+deb7u3
ii  libpcre3      1:8.30-5
ii  libssl1.0.0   1.0.1e-2+deb7u12
ii  nginx-common  1.2.1-2.2+wheezy2
ii  zlib1g        1:1.2.7.dfsg-13

nginx-naxsi recommends no packages.

nginx-naxsi suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to