Finally managed to implement #ModSecurity on the web server. Something I had planned weeks ago but never found the time to do it.
Nginx 1.23.1 / ModSecurity v3 Connector v1.0.3 for Debian Bullseye Backports
#nginx #debian #linux #modsecurity
https://github.com/Metztli/debian-modsecurity-nginx-connector
#NGINX #Debian #Linux #ModSecurity
Metztli #Reiser4 < https://sourceforge.net/projects/metztli-reiser4/ > with reiser4 -enhanced #Zstd -compressed Linux kernel 5.5.19-2 and initramfs 0.136 on #Linode < https://www.linode.com/ > #Cloud. Engine X 1.19.0 fresh build with #ModSecurity v1.0.1 #NGINX Connector (observe arrow pointer) is already installed as well
#Chingon! 😎
#Reiser4 #Zstd #Linode #cloud #ModSecurity #NGINX #Chingon
Debian packaging hack for newer upstream #Nginx 1.17.8 (source included) which builds and integrates #ModSecurity v3 Nginx Connector v1.0.1 (source included) module. Additionally, includes a sample #b2evolution Blog/CMS configuration file. 😎 #Chingon!
https://github.com/Metztli/debian-nginx-modsec-connector
#NGINX #ModSecurity #b2evolution #Chingon
#ModSecurity v3.0.4 announcement:
https://sourceforge.net/p/mod-security/mailman/message/36899090/
#Nginx #Apache #HTTPD
#ModSecurity #NGINX #Apache #HTTPD
Integrated New #ModSecurity Nginx Connector v1.0.1 [1] as http-modsecurity into a hack of a Debian packaging for Nginx 1.17.7 [2] to generate DEB components and, most importantly, to dynamically load the http-modsecurity module in nginx-full *but* may also work with nginx-light: "Making NGX_HTTP_MODSECURITY dyn module loadable in other than nginx-full"
https://github.com/Metztli/debian-nginx-modsec-connector
[1] https://github.com/SpiderLabs/ModSecurity-nginx
[2] #Nginx 1.17.7 mainline is available
http://nginx.org/en/download.html
'#ModSecurity #Nginx connector version 1.0.1 announcement'
https://sourceforge.net/p/mod-security/mailman/message/36880559/
(?!) - Negative look ahead assertion: foo(?!bar[\d]+$) matches foo when not followed by bar and any digit sequence until the end.
#b2evolution #CMS #ModSecurity v3.x
Ref: Negative #regex for #Perl string pattern match.
https://stackoverflow.com/questions/6361312/negative-regex-for-perl-string-pattern-match
#b2evolution #CMS #ModSecurity #regex #Perl