السلام عليكم
الموضوع باين من العنوان, المهم من يستخدم mod_security يجرب هذا القانون
كود:
mkdir /etc/modsecurity
كود:
wget http://www.web4host.net/tools/modsecurity/mini.conf
عدل المطلوب في httpd.conf الى
كود:
<IfModule mod_security.c>
# Only inspect dynamic requests
# (YOU MUST TEST TO MAKE SURE IT WORKS AS EXPECTED)
#SecFilterEngine DynamicOnly
SecFilterEngine On
# Reject requests with status 500
SecFilterDefaultAction "deny,log,status:500"
# Some sane defaults
SecFilterScanPOST On
SecFilterCheckURLEncoding On
SecFilterCheckCookieFormat On
SecFilterCheckUnicodeEncoding Off
SecFilterNormalizeCookies On
# enable version 1 (RFC 2965) cookies
SecFilterCookieFormat 1
SecServerResponseToken Off
#If you want to scan the output, uncomment these
#SecFilterScanOutput On
#SecFilterOutputMimeTypes "(null) text/html text/plain"
# Accept almost all byte values
SecFilterForceByteRange 1 255
# Server masking is optional
#fake server banner - NOYB used - no one needs to know what we are using
SecServerSignature "Power MOD by web4host.net"
#SecUploadDir /tmp
#SecUploadKeepFiles Off
# Only record the interesting stuff
SecAuditEngine RelevantOnly
SecAuditLog logs/audit_log
# You normally won't need debug logging
SecFilterDebugLevel 0
SecFilterDebugLog logs/modsec_debug_log
#And now, the rules
Include /etc/modsecurity/mini.conf
</IfModule>
كود:
/sbin/service httpd restart
يجب تثبيت mod_security لتجربة القانون
بلتوفيق إن شاء الله
رد مع اقتباس
المشاركة الأصلية كتبت بواسطة explorer
