🚀 go-pugleaf

--=-ycmUaCYSIzpLg7IlIHQL
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Gisteren ben ik in mij mail oof even vergeten te melden dat mod_security
bestaat (voor apache natuurlijk)

Quote:
"ModSecurity is an Apache module that adds intrusion detection and
prevention features to the Web server. In principle it is similar to an
IDS you would use to analyse your network traffic, except that it works
on the HTTP level and understands it really well. Because of this it
allows you to do things that are normal from the HTTP point of view but
are difficult to do from an classical IDS."


Om mogelijke (nog niet bekende) attacks te blokeren dmv mod_security
kan je vb deze extra regels bijvoegen:
SecFilterSelective THE_REQUEST "wget "
SecFilterSelective THE_REQUEST "perl "
SecFilterSelective THE_REQUEST "lynx "
SecFilterSelective THE_REQUEST "ftp "
SecFilterSelective THE_REQUEST "scp "
SecFilterSelective THE_REQUEST "rcp "
SecFilterSelective THE_REQUEST "cvs "
SecFilterSelective THE_REQUEST "telnet "
SecFilterSelective THE_REQUEST "ssh "
SecFilterSelective THE_REQUEST "echo "
SecFilterSelective THE_REQUEST "nc "
SecFilterSelective THE_REQUEST "mkdir "
SecFilterSelective THE_REQUEST "cd /tmp"
SecFilterSelective THE_REQUEST "cd /var/tmp"



een artikel over mod_security kan je hier vinden=20
 http://www.securityfocus.com/infocus/1739

De officiele website http://www.modsecurity.org/


groeten


--=20
-------------------------------------
Christophe 'ElCascador' Vandeplas
GSM: +32 (0)486/64.10.33
email: christophe(at)vandeplas(dot)com
http://www.vandeplas.com
GnuPG:1024D/14913897: 66BD A9EB 0357 D80F 20D4  D698 3B2B E562 1491 3897
-------------------------------------
*** PLEASE ***
"Never send mass-mails/forward to this email address.
 Please add the email-address to the BCC field (Blind Carbon Copy)
 or send the mail separately to me."

--=-ycmUaCYSIzpLg7IlIHQL
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBB08PdOyvlYhSROJcRArYeAJ4qGmaz7ZvGZWcL48LPyzOPfMsBewCgio3A
dZ2nzaCU3cc3sPH4snsgB/Q=
=SdJH
-----END PGP SIGNATURE-----

--=-ycmUaCYSIzpLg7IlIHQL--