Bug#1068797: modsecurity-crs: IncludeOptional in file owasp-crs.load is incompatible with nginx

Thank you Ervin, I was wondering about the possibility of a trigger that would change the IncludeOptional to Include if the debian machine is running nginx. Best regards, Salil On Mon, 15 Apr 2024 at 22:18, Ervin Hegedüs wrote: > Hi Salil, > > Thanks for reporting. > > Unfortunately this is

Bug#1068797: modsecurity-crs: IncludeOptional in file owasp-crs.load is incompatible with nginx

Hi Salil, Thanks for reporting. Unfortunately this is a known bug of libmodsecurity3 + Nginx: this installation does not support the `IncludeOptional` directive. The workaround is that you change it manually. Note, that CRS team suggest (since CRS 4) to use the `Include` form in all cases -

Bug#1068797: modsecurity-crs: IncludeOptional in file owasp-crs.load is incompatible with nginx

Package: modsecurity-crs Version: 3.3.4-1 Severity: important Tags: newcomer X-Debbugs-Cc: salilsa...@gmail.com Dear Maintainer, I configured modsecurity for nginx using the available packages in the bookworm repository; namely, libmodsecurity3 and libnginx-mod-http-modsecurity. It worked like