> nginx recompile, because the module could be still hooking in requests.

Did read a bit further in the thread and could even confirm this:

"ModSecurity using resources even if it is disabled"
https://github.com/SpiderLabs/ModSecurity/issues/644

which leads to "nginx: Returning 500 if SecRuleEngine is set to Off"
https://github.com/SpiderLabs/ModSecurity/issues/645

which is kind of fixed in
https://github.com/SpiderLabs/ModSecurity/commit/fe14d9df4d590e348a8ee232e4b318fc5e5a87f8
tagged as 2.9.0-rc2 so way after the version you use.


rr

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx