WAF (Web Application Firewall) in Nginx

yong.y.luo · 2019-02-15T19:20:07+00:00

Hello! First of all let me say thanks to the creators of OpenResty, it seems a really neat product! That said, apologies in advance as I am fairly new t...

WAF (Web Application Firewall) in Nginx

yong.y.luo

Hi, I am looking for a WAF (Web Application Firewall) package in Nginx. Any recommendations?

ModSecurity is too big for me.

juzipeek

you can try naxsi, but recommend you write your own waf. its easy use lua-nginx or just nginx module to write waf.

On Friday, February 15, 2019 at 7:20:07 PM UTC+8, yong....@googlemail.com wrote:

Hi, I am looking for a WAF (Web Application Firewall) package in Nginx. Any recommendations?
ModSecurity is too big for me.

rpaprocki

Hi,

You might also want to have a look at https://github.com/p0pr0ck5/lua-resty-waf (full disclosure: I'm the author).

On Fri, Feb 15, 2019 at 5:10 AM chengjie zhou <juz...@163.com> wrote:

you can try naxsi, but recommend you write your own waf. its easy use lua-nginx or just nginx module to write waf.

On Friday, February 15, 2019 at 7:20:07 PM UTC+8, yong....@googlemail.com wrote:
Hi, I am looking for a WAF (Web Application Firewall) package in Nginx. Any recommendations?
ModSecurity is too big for me.

.

yong.y.luo

Hi Chengjie,

Thank you very much!

I found one on http://www.securitica.com

The program looks very small and easy to configure. Maybe it is just what I want at the moment.

On Friday, February 15, 2019 at 1:10:08 PM UTC, chengjie zhou wrote:

you can try naxsi, but recommend you write your own waf. its easy use lua-nginx or just nginx module to write waf.

On Friday, February 15, 2019 at 7:20:07 PM UTC+8, yong....@googlemail.com wrote:
Hi, I am looking for a WAF (Web Application Firewall) package in Nginx. Any recommendations?
ModSecurity is too big for me.

yong.y.luo

Hi,Thank you very much!

I found one on http://www.securitica.com

The program looks very small and easy to configure. Maybe it is just what I want at the moment.

On Friday, February 15, 2019 at 6:16:30 PM UTC, rpaprocki wrote:

Hi,

You might also want to have a look at https://github.com/p0pr0ck5/lua-resty-waf (full disclosure: I'm the author).

On Fri, Feb 15, 2019 at 5:10 AM chengjie zhou <juzi...@163.com> wrote:
you can try naxsi, but recommend you write your own waf. its easy use lua-nginx or just nginx module to write waf.

On Friday, February 15, 2019 at 7:20:07 PM UTC+8, yong....@googlemail.com wrote:
Hi, I am looking for a WAF (Web Application Firewall) package in Nginx. Any recommendations?
ModSecurity is too big for me.

.

incoming-mail

Binary blob with no source.. looks very sketchy.