ModSecurity:MediaWiki Rules: Difference between revisions
No edit summary |
No edit summary |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 4: | Line 4: | ||
*Pindah ke directory <code>/usr/local/modsecurity-crs/rules/</code> | *Pindah ke directory <code>/usr/local/modsecurity-crs/rules/</code> | ||
cd /usr/local/modsecurity-crs/rules/ | cd /usr/local/modsecurity-crs/rules/ | ||
| Line 15: | Line 16: | ||
"id:959100,\ | "id:959100,\ | ||
phase:4,\ | phase:4,\ | ||
allow,\ | |||
t:none,\ | t:none,\ | ||
msg:'Outbound Anomaly Score Exceeded (Total Score: %{TX.OUTBOUND_ANOMALY_SCORE})',\ | msg:'Outbound Anomaly Score Exceeded (Total Score: %{TX.OUTBOUND_ANOMALY_SCORE})',\ | ||
| Line 24: | Line 25: | ||
*Setelah itu buka file selanjutnya di <code>REQUEST-949-BLOCKING-EVALUATION.conf</code>, dengan cara yang sama | *Setelah itu buka file selanjutnya di <code>REQUEST-949-BLOCKING-EVALUATION.conf</code>, dengan cara yang sama | ||
vim REQUEST-949-BLOCKING-EVALUATION.conf | |||
SecRule TX:ANOMALY_SCORE "@ge %{tx.inbound_anomaly_score_threshold}" \ | SecRule TX:ANOMALY_SCORE "@ge %{tx.inbound_anomaly_score_threshold}" \ | ||
"id:949110,\ | "id:949110,\ | ||
phase:2,\ | phase:2,\ | ||
allow,\ | |||
t:none,\ | t:none,\ | ||
msg:'Inbound Anomaly Score Exceeded (Total Score: %{TX.ANOMALY_SCORE})',\ | msg:'Inbound Anomaly Score Exceeded (Total Score: %{TX.ANOMALY_SCORE})',\ | ||
| Line 41: | Line 42: | ||
*Setelah dirubah cek kembali server nginx dan restart | *Setelah dirubah cek kembali server nginx dan restart | ||
sudo nginx -t | sudo nginx -t | ||