WAF - mod security(Reverse Proxy)

安裝

> apt-get install apache2 libapache2-modsecurity libapache2-mod-proxy-html

> a2enmod proxy proxy_http
> service apache2 restart

> apachectl -M

security2_module (shared)  <<<
proxy_module (shared) <<<

設定 mod_proxy

> vi /etc/apache2/mods-enabled/proxy.conf

<IfModule mod_proxy.c>
ProxyRequests Off
<Proxy *>
        AddDefaultCharset off
        Order deny,allow
        Deny from all
        #Allow from .example.com
        Allow from all
</Proxy>
ProxyVia Block

ProxyPass / http://192.168.7.62/
ProxyPassReverse / http://192.168.7.62/
</IfModule>

192.168.7.62 是實際 Web Server 的內部 IP。

>service apache2 restart

設定 mod_security

> mv /etc/modsecurity/modsecurity.conf-recommend /etc/modsecurity/modsecurity.conf

編輯 /etc/apache2/mods-enabled/mod-security.conf

<IfModule security2_module>
        Include "/etc/modsecurity/*.conf"
</IfModule> 

編輯 /etc/modsecurity/modsecurity.conf，加上這一行

# -- Hiding the Apache engine
SecServerSignature "Microsoft-IIS/5.0"

> service apache restart

參考

• https://www.digitalocean.com/communi...-debian-ubuntu
• http://cyrilwang.blogspot.tw/2014/01...dsecurity.html
• http://www.openfoundry.org/tw/tech-c...ebapp-firewall
• http://secure-ubuntu-server.blogspot...tu-server.html