転載・引用について

ユーザ用ツール

サイト用ツール


networkapp:waf:mod-security

差分

このページの2つのバージョン間の差分を表示します。

この比較画面へのリンク

両方とも前のリビジョン前のリビジョン
次のリビジョン
前のリビジョン
networkapp:waf:mod-security [2018/11/14 16:21] – [OSのInstall] seiriosnetworkapp:waf:mod-security [2018/11/14 17:00] (現在) – [MonitorModeWAF] seirios
行 623: 行 623:
       * <code diff MonitorModeBase.conf.diff>       * <code diff MonitorModeBase.conf.diff>
 # diff -u ../../modsecurity/modsecurity.conf.sample MM-Base.conf # diff -u ../../modsecurity/modsecurity.conf.sample MM-Base.conf
---- ../../modsecurity/modsecurity.conf.sample   2018-10-03 16:25:08.000000000 +0900 +--- ../../modsecurity/modsecurity.conf.sample   2018-11-04 09:12:19.000000000 +0900 
-+++ MM-Base.conf        2018-10-26 14:40:57.052583000 +0900++++ MM-Base.conf        2018-11-14 16:54:42.293424000 +0900
 @@ -35,7 +35,8 @@ @@ -35,7 +35,8 @@
  # to the size of data, with files excluded. You want to keep that value as  # to the size of data, with files excluded. You want to keep that value as
行 691: 行 691:
 # #
  
-# ModSecurity configuration for DropMode.+# ModSecurity configuration for DetectMode.
 Include /usr/local/etc/nginx/modsec/MM-Base.conf Include /usr/local/etc/nginx/modsec/MM-Base.conf
  
-OWASP CRS configuration.+Load signature configuration
 Include /usr/local/waf/owasp-modsecurity-crs/crs-setup.conf Include /usr/local/waf/owasp-modsecurity-crs/crs-setup.conf
 Include /usr/local/waf/local-modsecurity-sigs/local-setup.conf Include /usr/local/waf/local-modsecurity-sigs/local-setup.conf
行 701: 行 701:
 Include /usr/local/etc/nginx/modsec/MM-preLoad.conf Include /usr/local/etc/nginx/modsec/MM-preLoad.conf
  
-Include OWASP CRS Configurations and Signature Rules.+Load Signature Rules.
 Include /usr/local/waf/owasp-modsecurity-crs/rules/*.conf Include /usr/local/waf/owasp-modsecurity-crs/rules/*.conf
 Include /usr/local/waf/local-modsecurity-sigs/rules/*.conf Include /usr/local/waf/local-modsecurity-sigs/rules/*.conf
行 713: 行 713:
 # ModSecurity preload configuration. # ModSecurity preload configuration.
 # #
 +# id: 1000 - 1999 : for OWASP CRS
 +# id: 2000 - 2999 : Reserve
 +# id: 3000 - 4999 : for local Sigs
  
 #SecAction "id:'1000',phase:1,t:none,pass,nolog,ctl:ruleRemoveById=900000" #SecAction "id:'1000',phase:1,t:none,pass,nolog,ctl:ruleRemoveById=900000"
行 720: 行 723:
 # ModSecurity postload configuration. # ModSecurity postload configuration.
 # #
 +# id: 5000 - 5999 : for OWASP CRS
 +# id: 6000 - 6999 : Reserve
 +# id: 7000 - 8999 : for local Sigs
  
 #SecRuleRemoveById 900000 #SecRuleRemoveById 900000
networkapp/waf/mod-security.1542180097.txt.gz · 最終更新: 2018/11/14 16:21 by seirios

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki