generic term for set of software, web server extensions or hardware designed to filter WWW traffic at the application level in TCP network model.

learn more… | top users | synonyms (1)

2
votes
1answer
198 views

What is the funniest firewall rule set? [closed]

What is the finniest firewall rule set that you know of? It doesn't necessarily have to stop attacks, you could just be having fun with the attacker. Any type of firewall will do, Packet Filter ...
2
votes
1answer
201 views

Examples where an AWS Security Group is not sufficient as a firewall?

Currently I am using only an AWS security group for one of my EC2 instances but have given some thought to adding a firewall to that stack as well. I'd be looking at using either iptables, or ...
2
votes
2answers
120 views

What tech. is required to build a firewall that dynamically opens ports after users authenticate through a web form against Active Directory?

I need to expose via Internet an insecure internal web app that can't be modified to be made intrinsically more secure. The most common solution for this problem is to access the web app through VPN. ...
2
votes
1answer
110 views

Is there any application/firewall to detect content scrapers? [closed]

We are noticing that a significant amount of web traffic is from content scrapers (determined due to their crawling pattern). They are useless visitors to us but consume a lot of our resources ...
2
votes
0answers
185 views

Barracuda 660 WAF SNMP - Barracuda-BWS::totalAttacks

I've come across a little problem with retrieving stats via SNMP from a Barracuda Web Application Firewall 660. According to both the documentation (page 211), and the MIB defination, doing an SNMP ...
2
votes
1answer
2k views

node-waf nodejs failing

When trying to compile Gilt Hummingbird for NodeJS, I get this error, as node-waf is missing. rm -rf build .lock-wscript bson.node node-waf configure build make[1]: node-waf: Command not found ...
1
vote
2answers
1k views

Securing Apache Solr in production

I am setting up Apache Solr 4.1 that will be used to index data for a web app. Only the web app should have access to the Solr. Users and other clients will not talk directly to Solr. What are some ...
1
vote
1answer
385 views

What web application firewall do you use? What should I use?

What web application firewall do you use? I'm primarily interested in something I can deploy on the perimeter that can protect multiple Apache and IIS servers, but I'd like to hear all answers. Tell ...
1
vote
0answers
535 views

ActiveSync on iOS 4.2 no longer supports cookies?

We have a in-house developed WAF protecting our OWA (activesync) webserver, and part of its function requires long-lived Cookies on the "browsers". We're trying to get it to support iPhones via the ...
0
votes
1answer
207 views

F5 - URL redirect without irule

I have a main domain - url which is getting load-balanced through VIP between 2 Real Servers in F5 and I want a sub-domain of the main url not to be loadbalanced but to be pointed to a single real ...
0
votes
0answers
111 views

Deny All Allow Video Streaming Site Firewall Proxy

I need to build a hotspot for children to view a video streaming site with random tablet devices that a client is going to provide. The req uested environment should restrict access to only the video ...
0
votes
1answer
58 views

Spoof IPP response in firewall?

How I do to spoof a IPP "Unauthorized" response? Have read the IPP specification documents but cannot find exactly how a IPP response should look like. Any examples? Basically, I have a IPP printer ...
0
votes
1answer
100 views

HTTP-CLASS-Redirecting traffic-F5

Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
0
votes
1answer
244 views

SonicWALL SRA blocks load test as a DoS attack

I am evaluating the Web Application Firewall (WAF) service on a SonicWALL SRA virtual appliance. When I try to load test the protected website, SonicWALL blocks my requests with this error: "Reset ...
-1
votes
1answer
713 views

Apache2 mod_security simple default deny rules for specific directory

How to configure the simplest useful default-deny rule set for mod_security? I want to configure mod_security to allow only very specific queries to single directory: In short: I use Apache as a ...
-2
votes
0answers
25 views

Segmentation fault(coredump) When loading mod_security2.so [on hold]

My environment Details : Operating System : UNIX-AIX 6.1 Web Server : IBM HTTP Server ( IHS ) V 7.0.0 What I did : installed ModSecurity ( WAF ) v 2.8.0 . Problem : When I load mod_security2.so I ...