nbs-system/naxsi — pull request #100 by nzin (2013-12-08 19:10:02+00:00)
Title: redirect naxsi log to a separate log file

Hi,

this patch is not "production ready" but I would like to see with you if it could be possible to integrate such patch.

My main concern: when using naxsi, it produce its whitelist in the error log. I don't think it is a good place to place these informations: it is not errors per se. Moreover in my case, I am a big fan of OSSec, and these messages in the error log enter in conflict with OSSec, which forbid me to use naxsi.

So I work (hard :-) ) to create a patch to store logs into another location.
By default it stores that in /var/log/nginx/naxsi.log. You can override it by using the "naxsi_logfile" keyword (i.e. "naxsi_logfile /var/log/nginx/naxsi2.log"), in location part of the nginx configuration.

My code needs to be reviewed
- simply because I was not familiar with nginx developpement, and I'm sure some code is not in the "nginx spirit".
- I don't have tested extensively for the moment
- the default logfile ("/var/log/nginx/naxsi.log") is hardcoded. I didn't figure out how to make it a autoconf variable

But I would really see this patch included, else I will not be able to push it more in my production environment.

Regards,

Nicolas Zin (nicolas.zin@gmail.com)