{"id":36245,"date":"2019-10-31T22:10:28","date_gmt":"2019-10-31T19:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novyj-bild-nemesida-waf-free-dlya-nginx\/"},"modified":"2019-10-31T22:10:28","modified_gmt":"2019-10-31T19:10:28","slug":"novyj-bild-nemesida-waf-free-dlya-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","title":{"rendered":"Den nye version af Nemesida WAF Free til NGINX","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Den nye version af Nemesida WAF Free til NGINX\" src=\"\/wp-content\/uploads\/2019\/07\/6d684f498688b4aab26911f30c0394d6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nI sidste \u00e5r lancerede vi Nemesida WAF Free - en dynamisk modul til NGINX, der blokerer angreb p\u00e5 webapplikationer. I mods\u00e6tning til den kommercielle version, som er baseret p\u00e5 maskinl\u00e6ring, analyserer den gratis version foresp\u00f8rgsler kun ved hj\u00e6lp af signaturmetoden.<\/p>\n<h3>Funktioner i Nemesida WAF 4.0.129<\/h3>\n<p>\nIndtil den nuv\u00e6rende version underst\u00f8ttede det dynamiske modul Nemesida WAF kun Nginx Stable 1.12, 1.14 og 1.16. I den nye version er der tilf\u00f8jet support til Nginx Mainline fra 1.17 og Nginx Plus fra 1.15.10 (R18).<\/p>\n<h3>Hvorfor lave endnu en WAF?<\/h3>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nNAXSI og mod_security er sandsynligvis de mest popul\u00e6re gratis WAF-moduler, hvor mod_security aktivt fremmes af Nginx, selvom det oprindeligt kun blev brugt i Apache2. Begge l\u00f8sninger er gratis, open source og har mange brugere verden over. For mod_security er der gratis og kommercielle signaturpakker tilg\u00e6ngelige, til $500 om \u00e5ret, mens der for NAXSI findes en gratis signaturpakke 'out of the box', samt yderligere regels\u00e6t som doxsi.<\/p>\n<p>I \u00e5r har vi testet NAXSI og Nemesida WAF Free. Kort opsummeret om resultaterne:<\/p>\n<ul>\n<li>NAXSI udf\u00f8rer ikke dobbelt URL-dekode i cookies<\/li>\n<li>NAXSI er meget tidskr\u00e6vende at konfigurere - som standard vil de grundl\u00e6ggende indstillinger blokere st\u00f8rstedelen af anmodningerne, n\u00e5r man arbejder med webapplikationen (login, redigering af profil eller materiale, deltagelse i afstemninger osv.), og det er n\u00f8dvendigt at generere undtagelseslister, hvilket er skadelig for sikkerheden. Nemesida WAF Free havde ingen falske positiver med standardindstillingerne under brugen af websitet.<\/li>\n<li>Antallet af angreb der ikke bliver blokeret af NAXSI er mange gange h\u00f8jere osv.<\/li>\n<\/ul>\n<p>\nP\u00e5 trods af ulemperne har NAXSI og mod_security mindst to fordele - open source og et stort antal brugere. Vi st\u00f8tter ideen om at \u00e5bne koden, men kan ikke g\u00f8re det endnu p\u00e5 grund af mulige 'pirateriproblemer' med den kommercielle version, men for at kompensere for denne mangel - afsl\u00f8rer vi fuldst\u00e6ndigt indholdet i signaturpakken. Vi v\u00e6rds\u00e6tter privatlivets fred og giver dig mulighed for selv at bekr\u00e6fte dette ved hj\u00e6lp af en proxy -<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/da\/server\/dts-los-angeles\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3507\">server<\/a>.<\/p>\n<p>Kendetegn ved Nemesida WAF Free:<\/p>\n<ul>\n<li>kvalitets signaturpakke med et minimalt antal falske positiver og falske negativer.<\/li>\n<li>let installation og opdatering fra depotet (det er hurtigt og bekvemt);<\/li>\n<li>enkle og klare h\u00e6ndelser om h\u00e6ndelser, ikke en 'suppe', som med NAXSI;<\/li>\n<li>helt gratis, uden begr\u00e6nsninger for trafik, virtuelle v\u00e6rter osv.<\/li>\n<\/ul>\n<p>\nTil slut vil jeg give nogle foresp\u00f8rgsler til vurdering af WAF's funktion (det anbefales at bruge i hver af zonerne: URL, ARGS, Headers &amp; Body):<\/p>\n<p><code>')) un\",\"ion se\",\"lect 1,2,3,4,5,6,7,8,9,0,11#\"]<br \/>\n')) union\/**\/select\/**\/1,\/**\/2,\/**\/3,\/**\/4,\/**\/5,\/**\/6,\/**\/7,\/**\/8,\/**\/9,\/**\/'some_text',\/**\/11#\"]<br \/>\nunion(select(1),2,3,4,5,6,7,8,9,0x70656e746573746974,11)#\"]<br \/>\n')) union+\/*!select*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n')) uion*\\\/ seect*\\\/ (1),(2),(3),(4),(5),(6),(7),(8),(9.),(0x70656e746573746974),(11)#\"]<br \/>\n')) **union**select (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n1807182982union<br \/>\nselect123456789%2some_text11<br \/>\ncat \/et?\/?pa?swd<br \/>\ncat \/et'c\/pa'ss'wd<br \/>\ncat \/et*\/pa**wd<br \/>\ne'c'ho 'swd test pentest' |awk '{print \"cat \/etc\/pas\"$1}' |bas'h<br \/>\ncat \/etc\/passwd<br \/>\ncat$u+\/etc$u\/passwd$u<br \/>\n&lt;svg\/onload=alert()\/\/<\/code><\/p>\n<p>Hvis foresp\u00f8rgslerne ikke bliver blokeret, er det sandsynligt, at WAF ogs\u00e5 vil tillade en reel angreb. F\u00f8r du bruger eksemplerne, skal du sikre dig, at WAF ikke blokerer legitime foresp\u00f8rgsler.<br \/>\n<br \/>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/459976\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f NGINX, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0435 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u043b\u0438\u0437\u0430 Nemesida WAF 4.0.129 \u0414\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0435\u043b\u0438\u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c Nemesida WAF \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e Nginx Stable 1.12, 1.14 \u0438 1.16. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27112,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ny build af Nemesida WAF Free til NGINX | ProHoster","description":"I sidste \u00e5r udgav vi Nemesida WAF Free \u2014.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:28+00:00","article:modified_time":"2019-10-31T19:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36245","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:36:49","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:26","updated":"2026-02-22 15:36:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/36245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=36245"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/36245\/revisions"}],"predecessor-version":[{"id":162033,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/36245\/revisions\/162033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/27112"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=36245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=36245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=36245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}