Hi mex! Thanks for the tip! I've known about naxsi for a while. I'm researching various WAF options that will scale well for my Master's thesis, and mod_security + nginx interested me (my other research is pointing towards using Varnish, for which several WAF solutions have already been somewhat implemented). Naxsi doesn't seem to offer the extensive logging and detailed features like state tracking that mod_sec does, so I have been wary to research further into it. But thanks for the suggestion!
Sincerely, Robert Paprocki On 04/14/2014 03:24 PM, mex wrote: > hi robert, > > > if you dont depend on mod_security's advanced features like > output-filtering'n'stuff you might want to try naxsi > https://github.com/nbs-system/naxsi/wiki > > its stable, its fast, rules are easy to create and understand and it > provides a set of basic features for a waf. > > the community is responsive and open for feature-requests or bugreports. > > > > regards, > > mex > > Posted at Nginx Forum: > http://forum.nginx.org/read.php?2,249248,249294#msg-249294 > > _______________________________________________ > nginx mailing list > nginx@nginx.org > http://mailman.nginx.org/mailman/listinfo/nginx _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx
