A couple of days before nginx announced it was being acquired by F5 Networks, I came across a Metztli Reiser4 deployment of new Modsecurity v3.0.3 standalone module and Engine X, i.e., nginx which, unbeknownst to me -- more familiar with Apache HTTPD builds -- required an 'nginx connector'. I tried to install packages from the Linux OS metaframework, i.e., Debian, --which Stretch AMD64 flavour underlies Metztli Reiser4-- to no avail as those packages will be available in next Debian Buster distribution. And even then, as of yet, the modsecurity nginx connector does not appear to be included in the Buster nginx packages.

...continue reading Nginx at Metztli IT: ModSecurity v3 module, Engine X v1.15.9, and libmodsecurity3 Connector, Integrated Hack.