Apache – mod_security – web application firewall
November 24th, 2008
Comments off
ModSecurity is a web application firewall (WAF) for the Apache server.
I’m a big fan** of this Open Source solution – Once you install the module you can use it to:
- filter at the server level (directly in httpd.conf or as include files),
- filter at the directory/location/folder level (via .htaccess files),
- stop specific (i.e. known) attacks,
- stop generic attacks.
You can also use it to simply monitor your web traffic at a more detailed level.
Recent log
