3

I'm looking for a way to get my nginx to have reasonable abilities for auto-blocking various malicious requests.

E.g. since it doesn't serve any php scripts, any request for a php URLs that script kiddies seem to direct to my server should result in an immediate (temporary) ban of that IP.

3 Answers 3

3

update, mod_security now available for nginx: http://www.modsecurity.org/projects/modsecurity/nginx/index.html

1

You can try fail2ban. It scans log files and can update firewall rules to ban specific IP. Also, it can execute any other action if needed.

1

As far as I know Naxsi is the only web application firewall solution for Nginx at the moment. It does not rely on signatures, but instead it detects unexpected characters in the HTTP communication. It also comes with a learning daemon that can be used to generate profiles for your applications.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .