Naxsi Rules Set

[André P.]

Hi,

I wonder if anyone has a naxsi instance running in front of blesta and likes to share his/her rules with us.

We just switched to blesta and will start naxsi in learning mode soon. Whmcs was a mess, to be honest.

Cheers

André

[serge]

interesting if someone do have a naxsi rule, I think I tried naxsi but found it's make connection slow, so I was prefering having haproxy in front with some connection request limit by ip, and having also haproxy including the banned ip from csf firewall.

[André P.]

I already collected a great rule set, but am still pretty far away from complete.

It runs great so far.

[L3Y]

Hi André,

 

It's better if you can build your own set of rules, with Naxsi.

 

You may want to check on this tutorial : https://blog.stickleback.dk/compiling-nginx-with-naxsi-on-ubuntu-14-04-lts/

 

There was a method to generate quick rules with the Learning Mode.  You may want to take a look at my reply here : http://www.blesta.com/forums/index.php?/topic/1338-blesta-naxsi/

 

...but please be aware this automated method is now deprecated.   ...it may still help though.

 

Cheers

[André P.]

Hi Carl,

 

Thanks, I knew the "old method", too. Was a struggle to get the new log parser running. They use elasticsearch etc. know.

 

I already collected a huge set now, but it still needs some more testing. I also want to rewrite some rules to be more general.

 

Thanks for your answer!