{"id":36245,"date":"2019-10-31T22:10:28","date_gmt":"2019-10-31T19:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novyj-bild-nemesida-waf-free-dlya-nginx\/"},"modified":"2019-10-31T22:10:28","modified_gmt":"2019-10-31T19:10:28","slug":"novyj-bild-nemesida-waf-free-dlya-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","title":{"rendered":"Nov\u00e9 vyd\u00e1n\u00ed Nemesida WAF Free pro NGINX","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Nov\u00e9 vyd\u00e1n\u00ed Nemesida WAF Free pro NGINX\" src=\"\/wp-content\/uploads\/2019\/07\/6d684f498688b4aab26911f30c0394d6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nMinul\u00fd rok jsme vydali Nemesida WAF Free \u2014 dynamick\u00fd modul pro NGINX, kter\u00fd blokuje \u00fatoky na webov\u00e9 aplikace. Na rozd\u00edl od komer\u010dn\u00ed verze, kter\u00e1 je zalo\u017eena na strojov\u00e9m u\u010den\u00ed, zdarma verze analyzuje po\u017eadavky pouze signaturn\u00edm zp\u016fsobem.<\/p>\n<h3>Funkce vyd\u00e1n\u00ed Nemesida WAF 4.0.129<\/h3>\n<p>\nP\u0159ed aktu\u00e1ln\u00edm vyd\u00e1n\u00edm dynamick\u00fd modul Nemesida WAF podporoval pouze Nginx Stable 1.12, 1.14 a 1.16. V nov\u00e9 verzi byla p\u0159id\u00e1na podpora Nginx Mainline, po\u010d\u00ednaje 1.17, a Nginx Plus, po\u010d\u00ednaje 1.15.10 (R18).<\/p>\n<h3>Pro\u010d vytv\u00e1\u0159et dal\u0161\u00ed WAF?<\/h3>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nNAXSI a mod_security jsou pravd\u011bpodobn\u011b nejpopul\u00e1rn\u011bj\u0161\u00ed bezplatn\u00e9 moduly WAF, p\u0159i\u010dem\u017e mod_security je aktivn\u011b propagov\u00e1n Nginx, i kdy\u017e byl p\u016fvodn\u011b pou\u017e\u00edv\u00e1n pouze v Apache2. Ob\u011b \u0159e\u0161en\u00ed jsou bezplatn\u00e1, maj\u00ed otev\u0159en\u00fd zdrojov\u00fd k\u00f3d a mnoho u\u017eivatel\u016f po cel\u00e9m sv\u011bt\u011b. Pro mod_security je k dispozici bezplatn\u00fd i komer\u010dn\u00ed bal\u00ed\u010dek signatur za 500 USD ro\u010dn\u011b, pro NAXSI \u2014 bezplatn\u00fd bal\u00ed\u010dek signatur \u201ez krabice\u201c, tak\u00e9 se daj\u00ed naj\u00edt dal\u0161\u00ed sady pravidel, jako doxsi.<\/p>\n<p>Letos jsme provedli testov\u00e1n\u00ed NAXSI a Nemesida WAF Free. Pokud shrneme v\u00fdsledky:<\/p>\n<ul>\n<li>NAXSI neprov\u00e1d\u00ed dvojit\u00fd URL-decode v cookie<\/li>\n<li>NAXSI se velmi dlouho nastavuje \u2014 v\u00fdchoz\u00ed nastaven\u00ed pravidel ve v\u00fdchoz\u00edm stavu zablokuje v\u011bt\u0161inu po\u017eadavk\u016f p\u0159i pr\u00e1ci s webovou aplikac\u00ed (autorizace, \u00faprava profilu nebo materi\u00e1lu, \u00fa\u010dast v anket\u00e1ch atd.) a je nutn\u00e9 generovat seznamy v\u00fdjimek, co\u017e negativn\u011b ovliv\u0148uje bezpe\u010dnost. Nemesida WAF Free s v\u00fdchoz\u00edm nastaven\u00edm b\u011bhem pr\u00e1ce s webem nezaznamenala \u017e\u00e1dn\u00e9 fale\u0161n\u00e9 aktivace.<\/li>\n<li>po\u010det p\u0159ijet\u00ed \u00fatok\u016f u NAXSI je n\u011bkolikan\u00e1sobn\u011b vy\u0161\u0161\u00ed atd.<\/li>\n<\/ul>\n<p>\nI p\u0159es nedostatky maj\u00ed NAXSI a mod_security minim\u00e1ln\u011b dv\u011b v\u00fdhody \u2014 otev\u0159en\u00fd zdrojov\u00fd k\u00f3d a velk\u00e9 mno\u017estv\u00ed u\u017eivatel\u016f. Podporujeme my\u0161lenku zve\u0159ejn\u011bn\u00ed zdrojov\u00e9ho k\u00f3du, ale zat\u00edm to nem\u016f\u017eeme ud\u011blat kv\u016fli mo\u017en\u00fdm probl\u00e9m\u016fm s \u201epir\u00e1tstv\u00edm\u201c komer\u010dn\u00ed verze, ale abychom tento nedostatek kompenzovali \u2014 pln\u011b zve\u0159ej\u0148ujeme obsah sady signatur. V\u00e1\u017e\u00edme si soukrom\u00ed a nab\u00edz\u00edme mo\u017enost to ov\u011b\u0159it samostatn\u011b pomoc\u00ed proxy.<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-los-angeles\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3507\">serveru<\/a>.<\/p>\n<p>Rys Nemesida WAF Free:<\/p>\n<ul>\n<li>kvalitn\u00ed datab\u00e1ze signatur s minim\u00e1ln\u00edm po\u010dtem False Positive a False Negative.<\/li>\n<li>instalace a aktualizace z repozit\u00e1\u0159e (to je rychl\u00e9 a pohodln\u00e9);<\/li>\n<li>jednoduch\u00e9 a srozumiteln\u00e9 ud\u00e1losti o incidentech, a ne \u201eka\u0161e\u201c, jako je tomu u NAXSI;<\/li>\n<li>zcela zdarma, bez omezen\u00ed na mno\u017estv\u00ed provozu, virtu\u00e1ln\u00edch hostitel\u016f atd.<\/li>\n<\/ul>\n<p>\nNa z\u00e1v\u011br uvedu n\u011bkolik dotaz\u016f pro hodnocen\u00ed v\u00fdkonu WAF (doporu\u010duje se pou\u017e\u00edvat v ka\u017ed\u00e9 oblasti: URL, ARGS, Hlavi\u010dky &amp; T\u011blo):<\/p>\n<p><code>')) un\",\"ion se\",\"lect 1,2,3,4,5,6,7,8,9,0,11#\"]<br \/>\n')) union\/**\/select\/**\/1,\/**\/2,\/**\/3,\/**\/4,\/**\/5,\/**\/6,\/**\/7,\/**\/8,\/**\/9,\/**\/'some_text',\/**\/11#\"]<br \/>\nunion(select(1),2,3,4,5,6,7,8,9,0x70656e746573746974,11)#\"]<br \/>\n')) union+\n\/*!select*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n')) \n\/*!uion*\/ \/*!seect*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9.),(0x70656e746573746974),(11)#\"]<br \/>\n')) **union**select (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n1807182982union<br \/>\nselect123456789%2some_text11<br \/>\ncat \/et?\/?pa?swd<br \/>\ncat \/et'c\/pa'ss'wd<br \/>\ncat \/et*\/pa**wd<br \/>\ne'c'ho 'swd test pentest' |awk '{print \"cat \/etc\/pas\"$1}' |bas'h<br \/>\ncat \/etc\/passwd<br \/>\ncat$u+\/etc$u\/passwd$u<br \/>\n&lt;svg\/onload=alert()\/\/<\/code><\/p>\n<p>Pokud nebudou dotazy zablokov\u00e1ny, je pravd\u011bpodobn\u00e9, \u017ee WAF propust\u00ed i skute\u010dn\u00fd \u00fatok. P\u0159ed pou\u017eit\u00edm p\u0159\u00edklad\u016f se ujist\u011bte, \u017ee WAF nezablokuje legitimn\u00ed dotazy.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/459976\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f NGINX, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0435 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u043b\u0438\u0437\u0430 Nemesida WAF 4.0.129 \u0414\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0435\u043b\u0438\u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c Nemesida WAF \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e Nginx Stable 1.12, 1.14 \u0438 1.16. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27112,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nov\u00e1 verze Nemesida WAF Free pro NGINX | ProHoster","description":"Minul\u00fd rok jsme vydali Nemesida WAF Free -","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:28+00:00","article:modified_time":"2019-10-31T19:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36245","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:36:49","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:26","updated":"2026-02-22 15:36:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36245"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36245\/revisions"}],"predecessor-version":[{"id":162033,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36245\/revisions\/162033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/27112"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}