Mod security - Revision history

Gvaikre at 07:30, 19 May 2014

2014-05-19T07:30:38Z

← Older revision		Revision as of 10:30, 19 May 2014
Line 53:		Line 53:

	http://blog.spiderlabs.com/2011/07/modsecurity-sql-injection-challenge-lessons-learned.html		http://blog.spiderlabs.com/2011/07/modsecurity-sql-injection-challenge-lessons-learned.html

			==Veateate muutmine==
			Mõne ründe avastamisel suunatakse vaikimisi ümber lehele, mis näitab veateadet "Forbidden".

			Et seda muuta, tuleks Apache VirtualHosti confi lisada järgmine rida:
			<pre>ErrorDocument 403 /sinu/custom/errori/leht.php</pre>

			''leht.php'' võiks olla näiteks lihtne php script, mis suunab tagasi lehele, kust tuldi (HTTP referer):
			<source lang="php"><?php
			header('Location: ' . $_SERVER['HTTP_REFERER']);
			?></source>

2013-05-08T12:17:02Z

← Older revision		Revision as of 15:17, 8 May 2013
Line 8:		Line 8:

	sudo wget https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/v2.2.5 -O modsecurity-crs_2.2.5.tar.gz		sudo wget https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/v2.2.5 -O modsecurity-crs_2.2.5.tar.gz

			sudo tar zxf modsecurity-crs_2.2.5.tar.gz

	sudo mv SpiderLabs-owasp-modsecurity-crs-5c28b52 modsecurity-crs_2.2.5		sudo mv SpiderLabs-owasp-modsecurity-crs-5c28b52 modsecurity-crs_2.2.5
	~~sudo tar zxf modsecurity-crs_2.2.5.tar.gz~~

	sudo cp -R modsecurity-crs_2.2.5/* /etc/modsecurity/		sudo cp -R modsecurity-crs_2.2.5/* /etc/modsecurity/

2013-05-08T12:08:03Z

← Older revision		Revision as of 15:08, 8 May 2013
Line 8:		Line 8:

	sudo wget https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/v2.2.5 -O modsecurity-crs_2.2.5.tar.gz		sudo wget https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/v2.2.5 -O modsecurity-crs_2.2.5.tar.gz
			sudo mv SpiderLabs-owasp-modsecurity-crs-5c28b52 modsecurity-crs_2.2.5
	sudo tar zxf modsecurity-crs_2.2.5.tar.gz		sudo tar zxf modsecurity-crs_2.2.5.tar.gz

2013-05-08T06:17:16Z

← Older revision		Revision as of 09:17, 8 May 2013
Line 7:		Line 7:
	cd /tmp		cd /tmp

	sudo wget ~~http~~://~~downloads~~.~~sourceforge.net~~/~~project~~/~~mod~~-~~security/~~modsecurity-crs/0-~~CURRENT/~~modsecurity-crs_2.2.5.tar.gz		sudo wget https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/v2.2.5 -O modsecurity-crs_2.2.5.tar.gz

	sudo tar zxf modsecurity-crs_2.2.5.tar.gz		sudo tar zxf modsecurity-crs_2.2.5.tar.gz

2012-10-17T11:29:17Z

← Older revision		Revision as of 14:29, 17 October 2012
Line 43:		Line 43:
	Include "/etc/modsecurity/activated_rules/*.conf"		Include "/etc/modsecurity/activated_rules/*.conf"
	# Include "/etc/modsecurity/optional_rules/*.conf"		# Include "/etc/modsecurity/optional_rules/*.conf"
			Include "/etc/modsecurity/base_rules/*.conf"
	</IfModule>		</IfModule>

2012-10-17T11:22:29Z

@@ Line 28: / Line 28: @@
 sudo a2enmod mod-security
 sudo service apache2 restart
 </source>

2012-10-17T10:49:57Z

← Older revision		Revision as of 13:49, 17 October 2012
Line 17:		Line 17:
	sudo rm modsecurity-crs_2.2.5 -r		sudo rm modsecurity-crs_2.2.5 -r

	sudo mv /etc/modsecurity/~~modsecurity_crs_10_config~~.conf.example /etc/modsecurity/~~modsecurity_crs_10_config~~.conf		sudo mv /etc/modsecurity/modsecurity_crs_10_setup.conf.example /etc/modsecurity/modsecurity_crs_10_setup.conf

2012-10-17T10:39:41Z

← Older revision		Revision as of 13:39, 17 October 2012
Line 31:		Line 31:

	https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project		https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project

			http://blog.spiderlabs.com/2011/07/modsecurity-sql-injection-challenge-lessons-learned.html

2012-10-17T10:39:11Z

← Older revision		Revision as of 13:39, 17 October 2012
Line 7:		Line 7:
	cd /tmp		cd /tmp

	sudo wget http://downloads.sourceforge.net/project/mod-security/modsecurity-crs/0-CURRENT/modsecurity-crs_2.2.4.tar.gz		sudo wget http://downloads.sourceforge.net/project/mod-security/modsecurity-crs/0-CURRENT/modsecurity-crs_2.2.5.tar.gz

	sudo tar ~~-zxvf~~ modsecurity-crs_2.2.4.tar.gz		sudo tar zxf modsecurity-crs_2.2.5.tar.gz

	sudo cp -R modsecurity-crs_2.2.4/* /etc/modsecurity/		sudo cp -R modsecurity-crs_2.2.5/* /etc/modsecurity/

	sudo rm modsecurity-crs_2.2.4.tar.gz		sudo rm modsecurity-crs_2.2.5.tar.gz

	sudo rm modsecurity-crs_2.2.4 -r		sudo rm modsecurity-crs_2.2.5 -r

	sudo mv /etc/modsecurity/modsecurity_crs_10_config.conf.example /etc/modsecurity/modsecurity_crs_10_config.conf		sudo mv /etc/modsecurity/modsecurity_crs_10_config.conf.example /etc/modsecurity/modsecurity_crs_10_config.conf


	#To enable rulesets create /etc/apache2/conf.d/modsecurity.conf file with following content:		#To enable rulesets create /etc/apache2/conf.d/modsecurity.conf file with following content:
	<ifmodule mod_security2.c>		<ifmodule mod_security2.c>

2012-10-17T09:33:49Z

← Older revision		Revision as of 12:33, 17 October 2012
Line 18:		Line 18:

	sudo mv /etc/modsecurity/modsecurity_crs_10_config.conf.example /etc/modsecurity/modsecurity_crs_10_config.conf		sudo mv /etc/modsecurity/modsecurity_crs_10_config.conf.example /etc/modsecurity/modsecurity_crs_10_config.conf
			#To enable rulesets create /etc/apache2/conf.d/modsecurity.conf file with following content:
			<ifmodule mod_security2.c>
			SecRuleEngine On
			</ifmodule>


	sudo a2enmod mod-security		sudo a2enmod mod-security
	sudo service apache2 restart		sudo service apache2 restart