# Nginx mod security module issue

**URL:** <https://www.ruby-forum.com/t/nginx-mod-security-module-issue/243872>\
**Category:** NGINX\
**Created:** [January 20, 2016, 1:55pm UTC](https://www.ruby-forum.com/t/nginx-mod-security-module-issue/243872 "2016-01-20T13:55:53Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sadaf\_N](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/858c86/32.png) [@Sadaf\_N](https://www.ruby-forum.com/u/Sadaf_N)\
**Post date:** [January 20, 2016, 1:55pm UTC](https://www.ruby-forum.com/t/nginx-mod-security-module-issue/243872/1 "2016-01-20T13:55:53Z")

</div>

Hi All

I have complied the\* nginx 1.9.9\* with ModSecurity support . and  
configured the nginx,conf as fallows

_Nginx Version : 1.9.9_  
_Modsecurity Version : 2.9_

#nginx -V

nginx version: nginx/1.9.9  
built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04)  
built with OpenSSL 1.0.1f 6 Jan 2014  
TLS SNI support enabled  
configure arguments: --user=www-data --group=www-data --with-pcre-jit  
–with-debug --with-ipv6 --with-http\_ssl\_module  
–add-module=/opt/modsecurity-2.9.0/nginx/modsecurity

\*nginx.conf=========\*user www-data;  
worker\_processes 1;

error\_log /var/log/nginx/error.log;

events {  
worker\_connections 1024;  
}

http {  
include mime.types;  
default\_type application/octet-stream;  
access\_log /var/log/nginx/access.log;

```
sendfile on;
keepalive_timeout 65;

 gzip on;

server {
    listen 80;
    server_name example.org;
    location / {

       ModSecurityEnabled on;
       ModSecurityConfig modsecurity.conf;

        root html;
        index index.html index.htm;
    }

 location /sonar {

 ModSecurityEnabled on;
 ModSecurityConfig modsecurity.conf;
 proxy_set_header X-Forwarded-Host $host;
 proxy_set_header X-Forwarded-Server $host;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_pass http://192.168.8.52:443/sonar;
}

    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

}

```

→ When i access the _[http://example.org](http://example.org) [http://example.org](http://example.org)_ i can  
access the web page and modsecurity lodged the access data to to Audit  
log .

→ Then i access the \* [http://example.org/sonar](http://example.org/sonar)  
[http://example.org/sonar](http://example.org/sonar)  
\*i get the following error in my logfile

2016/01/20 18:17:28 [alert] 3520#0: worker process 3549 exited on signal  
11  
(core dumped)  
2016/01/20 18:17:29 [alert] 3520#0: worker process 3551 exited on signal  
11  
(core dumped)  
2016/01/20 18:17:29 [alert] 3520#0: worker process 3553 exited on signal  
11  
(core dumped)  
2016/01/20 18:17:29 [alert] 3520#0: worker process 3555 exited on signal  
11  
(core dumped)

Can you guys please how to over come this issue