github nbs-system/naxsi 1.1

latest releases: 1.3, 1.2, 1.1a...
3 years ago

Naxsi:

  • Fixed various compilation issues (#515 #497 #491).
  • Fixed valid JSON blocked by Rule ID 15 (#457).
  • Fixed documentation (#505).
  • Updated libinjection to 3.9.2 (commit: 991433e7 #523)
  • Added Content-type: application/vnd.api+json (#513).
  • Added JSON logging output for events (#488 #522).
  • Implemented Whitelist for IPs and CIDRs and support for IPv4 and IPv6 (#488 #522).

Special thanks to:

  • 0xflotus
  • marcinguy
  • squedgy

Debian/Ubuntu packages usage:

To enable naxsi include the following files in the configuration as follows:

# add inside http {}
include /usr/share/naxsi/naxsi_core.rules;

# add inside server {}
include /usr/share/naxsi/naxsi_denied_url.conf;

# add inside location /my/path {}
# you can't use both. choose one of the 2 modes.
include /usr/share/naxsi/naxsi_block_mode.conf; # use this to enable blocking mode
include /usr/share/naxsi/naxsi_learning_mode.conf; # use this to enable learning mode

All the BasicRules are available below and shall be added after naxsi_block_mode.conf or after naxsi_learning_mode.conf

# to use them just include them within `location /my/path {}`
/usr/share/naxsi/rules/iris.rules
/usr/share/naxsi/rules/rutorrent.rules
/usr/share/naxsi/rules/wordpress.rules
/usr/share/naxsi/rules/dokuwiki.rules
/usr/share/naxsi/rules/drupal.rules
/usr/share/naxsi/rules/etherpad-lite.rules
/usr/share/naxsi/rules/zerobin.rules

Don't miss a new naxsi release

NewReleases is sending notifications on new releases.