Have ModSecurity-nginx variable in nginx?

[spiderlabs]

Have ModSecurity-nginx variable in nginx?

[zimmerle]

Hi @patsevanton,

ModSecurity does not export back to nginx any of its internal variables. However, you can use environment variables establish a communication between ModSecurity and other process.

[victorhora]

Hi @patsevanton,

I'm not sure if I'm getting 100% what you're trying to do. Maybe you're trying to add this "if" condition inside your nginx.conf to have ModSecurity enabled based on an externally set variable (set by a request or another program?)

You're trying to use the If condition of ngx_http_rewrite_module?

[patsevanton]

What modsec variable i can use?

Examples from link:

if ($http_user_agent ~ MSIE) {
    rewrite ^(.*)$ /msie/$1 break;
}

if ($http_cookie ~* "id=([^;]+)(?:;|$)") {
    set $id $1;
}

if ($request_method = POST) {
    return 405;
}

if ($slow) {
    limit_rate 10k;
}

if ($invalid_referer) {
    return 403;
}

Thank for answer