Naxsi:
- Fixed
IgnoreIP
andIgnoreCIDR
(#534 and #532) - Fixed non-c99 builds
- Added
config=ignore
mode to identify non blocked requests - Improved core rules (#450)
Special thanks to:
- kkadosh
- noahbailey
- rickygm
Debian/Ubuntu packages usage:
To enable naxsi include the following files in the configuration as follows:
# add inside http {}
include /usr/share/naxsi/naxsi_core.rules;
# add inside server {}
include /usr/share/naxsi/naxsi_denied_url.conf;
# add inside location /my/path {}
# you can't use both. choose one of the 2 modes.
include /usr/share/naxsi/naxsi_block_mode.conf; # use this to enable blocking mode
include /usr/share/naxsi/naxsi_learning_mode.conf; # use this to enable learning mode
All the BasicRules are available below and shall be added after naxsi_block_mode.conf
or after naxsi_learning_mode.conf
# to use them just include them within `location /my/path {}`
/usr/share/naxsi/rules/iris.rules
/usr/share/naxsi/rules/rutorrent.rules
/usr/share/naxsi/rules/wordpress.rules
/usr/share/naxsi/rules/dokuwiki.rules
/usr/share/naxsi/rules/drupal.rules
/usr/share/naxsi/rules/etherpad-lite.rules
/usr/share/naxsi/rules/zerobin.rules