加入收藏 | 设为首页 | 会员中心 | 我要投稿 李大同 (https://www.lidatong.com.cn/)- 科技、建站、经验、云计算、5G、大数据,站长网!
当前位置: 首页 > 运营中心 > Nginx > 正文

使用NGINX的WAF owasp modsecurity crs中“尚不支持SecCollectio

发布时间:2020-12-13 21:01:45 所属栏目:Nginx 来源:网络整理
导读:我用WAF安装nginx(使用Docker) mkdir -p /usr/src cd /usr/src/ git clone --depth 1 -b v3/master --single-branch https://github.com/SpiderLabs/ModSecurity cd ModSecurity git submodule init git submodule update ./build.sh ./config

我用WAF安装nginx(使用Docker)

    mkdir -p /usr/src 
    && cd /usr/src/ 
    && git clone --depth 1 -b v3/master --single-branch https://github.com/SpiderLabs/ModSecurity 
    && cd ModSecurity 
    && git submodule init 
    && git submodule update 
    && ./build.sh 
    && ./configure 
    && make -j$(getconf _NPROCESSORS_ONLN) 
    && make install

    ... previous commands to install nginx from source...

    && cd /usr/src 
    && git clone --depth 1 https://github.com/SpiderLabs/ModSecurity-nginx.git 
    && cd /usr/src/nginx-$NGINX_VERSION 
    && ./configure --with-compat --add-dynamic-module=../ModSecurity-nginx 
    && make modules 
    && cp objs/ngx_http_modsecurity_module.so /etc/nginx/modules 
    && mkdir /etc/nginx/modsec 
    && wget -P /etc/nginx/modsec/ https://raw.githubusercontent.com/SpiderLabs/ModSecurity/v3/master/modsecurity.conf-recommended 
    && mv /etc/nginx/modsec/modsecurity.conf-recommended /etc/nginx/modsec/modsecurity.conf 
    && sed -i 's/SecRuleEngine DetectionOnly/SecRuleEngine On/' /etc/nginx/modsec/modsecurity.conf 
    && sed -i 's/SecRequestBodyInMemoryLimit 131072//' /etc/nginx/modsec/modsecurity.conf 
    && sed -i 's#SecAuditLog /var/log/modsec_audit.log#SecAuditLog /var/log/nginx/modsec_audit.log#' /etc/nginx/modsec/modsecurity.conf 
    && mkdir /opt 
    && cd /opt 
    && git clone -b v3.0/master --single-branch https://github.com/SpiderLabs/owasp-modsecurity-crs.git 
    && cd owasp-modsecurity-crs/ 
    && cp /opt/owasp-modsecurity-crs/crs-setup.conf.example /opt/owasp-modsecurity-crs/crs-setup.conf

但突然开始标记这个错误:

nginx: [emerg] “modsecurity_rules_file” directive Rules error. File: /opt/owasp-modsecurity-crs/crs-setup.conf. Line: 96. Column: 43. SecCollectionTimeout is not yet supported.

在documentation:

==============

#
# -- [[ Collection timeout ]] --------------------------------------------------
#
# Set the SecCollectionTimeout directive from the ModSecurity default (1 hour)
# to a lower setting which is appropriate to most sites.
# This increases performance by cleaning out stale collection (block) entries.
#
# This value should be greater than or equal to:
# tx.reput_block_duration (see section "Blocking Based on IP Reputation") and
# tx.dos_block_timeout (see section "Anti-Automation / DoS Protection").
#
# Ref: https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#wiki-SecCollectionTimeout

# Please keep this directive uncommented.
# Default: 600 (10 minutes)
SecCollectionTimeout 600

==============

我通过在命令中添加此行来解决此问题(禁用规则):

&& sed -i 's/SecCollectionTimeout 600/# SecCollectionTimeout 600/' /opt/owasp-modsecurity-crs/crs-setup.conf

但我不知道它有什么后果,或者它是否是正确的应用方式.

一个可以指导我的例子?

最佳答案
我认为你需要重新配置WAF OWASP来解决这个问题.
检查那个链接…

上次我的朋友解决了这个问题以重新配置它…

https://support.cloudflare.com/hc/en-us/articles/115000223771-How-do-I-configure-the-WAF-

(编辑:李大同)

【声明】本站内容均来自网络,其相关言论仅代表作者个人观点,不代表本站立场。若无意侵犯到您的权利,请及时与联系站长删除相关内容!

    推荐文章
      热点阅读