{"id":36245,"date":"2019-10-31T22:10:28","date_gmt":"2019-10-31T19:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novyj-bild-nemesida-waf-free-dlya-nginx\/"},"modified":"2019-10-31T22:10:28","modified_gmt":"2019-10-31T19:10:28","slug":"novyj-bild-nemesida-waf-free-dlya-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","title":{"rendered":"Uus Nemesida WAF Free versioon NGINX-ile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Uus Nemesida WAF Free versioon NGINX-ile\" src=\"\/wp-content\/uploads\/2019\/07\/6d684f498688b4aab26911f30c0394d6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nM\u00f6\u00f6dunud aastal lansseerisime Nemesida WAF Free - d\u00fcnaamiline moodul NGINX-ile, mis blokeerib veebirakenduste r\u00fcnnakud. Erinevalt kaubanduslikust versioonist, mis p\u00f5hineb masin\u00f5ppel, anal\u00fc\u00fcsib tasuta versioon p\u00e4ringuid ainult allkirjastamise meetodil.<\/p>\n<h3>Nemesida WAF 4.0.129 versiooni omadused<\/h3>\n<p>\nKuni praeguse versiooni v\u00e4ljaandmiseni toetas d\u00fcnaamiline moodul Nemesida WAF ainult Nginx Stable 1.12, 1.14 ja 1.16. Uues v\u00e4ljaandes on lisatud tugi Nginx Mainline'i jaoks alates 1.17 ja Nginx Plus'i jaoks alates 1.15.10 (R18).<\/p>\n<h3>Miks teha veel \u00fcks WAF?<\/h3>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nNAXSI ja mod_security on ilmselt k\u00f5ige populaarsemad tasuta WAF moodulid, kusjuures mod_security on aktiivselt edendatud Nginxi toetusel, kuigi algselt kasutati seda ainult Apache2-s. M\u00f5lemad lahendused on tasuta, avatud allikakoodiga ja neil on palju kasutajaid \u00fcle kogu maailma. mod_security jaoks on saadaval tasuta ja tasuline, 500 dollari aastase tasuga, allkirjakomplekt; NAXSI jaoks on saadaval tasuta 'karbist v\u00e4lja' allkirjakomplekt, samuti v\u00f5ib leida t\u00e4iendavaid reeglite komplekte, nagu doxsi.<\/p>\n<p>Sel aastal tegime testimise NAXSI ja Nemesida WAF Free toimimise kohta. L\u00fchidalt tulemuste kohta:<\/p>\n<ul>\n<li>NAXSI ei teosta kahekordset URL-dekodeerimist k\u00fcpsistes<\/li>\n<li>NAXSI seadistamine v\u00f5tab v\u00e4ga kaua aega - vaikev\u00f5imalustega reeglid blokeerivad enamikku p\u00e4ringutest veebirakenduse kasutamise ajal (autentimine, profiili v\u00f5i materjali redigeerimine, k\u00fcsitlustest osav\u00f5tt jne) ja on vajalikud erandite nimekiri loomine, mis halvendab turvalisust. Nemesida WAF Free ei teinud vaikeseadistustes veebilehe t\u00f6\u00f6 k\u00e4igus \u00fchtegi valeh\u00e4ire.<\/li>\n<li>NAXSI-l on r\u00fcnnakute m\u00f6\u00f6dumistase mitmeid kordi k\u00f5rgem jne.<\/li>\n<\/ul>\n<p>\nHoolimata puudustest on NAXSI ja mod_security-l v\u00e4hemalt kaks eelist - avatud allikakood ja suur kasutajaskond. Me toetame avatud l\u00e4htekoodi ideed, kuid hetkel ei saa me seda teha v\u00f5imalike probleemide t\u00f5ttu kaubandusliku versiooniga 'piraatimise' osas, kuid selle puuduse tasakaalustamiseks avaldame t\u00e4ielikult allkirjakomplekti sisu. Me hindame privaatsust ja pakume selleks faktide t\u00e4ielikku kontrollimist proxy-<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-los-angeles\/\"   title=\"serverilt\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3507\">serverilt<\/a>.<\/p>\n<p>Nemesida WAF Free erip\u00e4ra:<\/p>\n<ul>\n<li>k\u00f5rge kvaliteediga allkirjade komplekt, minimaalse valeh\u00e4irete ja vale negatiivsete tulemuste arv.<\/li>\n<li>paigaldamine ja v\u00e4rskendamine repostaariumist (see on kiire ja mugav);<\/li>\n<li>lihtsad ja arusaadavad s\u00fcndmused intsidentide kohta, mitte 'sopp', nagu NAXSI-l;<\/li>\n<li>t\u00e4ielikult tasuta, ilma liiklus, virtuaalhostide jne piiranguteta.<\/li>\n<\/ul>\n<p>\nKokkuv\u00f5tteks toetan m\u00f5ned p\u00e4ringud WAFi toimimise hindamiseks (soovitatav kasutada igas piirkonnas: URL, ARGS, p\u00e4ised &amp; keha):<\/p>\n<p><code>'') un\",\"ion se\",\"lect 1,2,3,4,5,6,7,8,9,0,11#\"]<br \/>\n'') union\/**\/select\/**\/1,\/**\/2,\/**\/3,\/**\/4,\/**\/5,\/**\/6,\/**\/7,\/**\/8,\/**\/9,\/**\/'some_text',\/**\/11#\"]<br \/>\nunion(select(1),2,3,4,5,6,7,8,9,0x70656e746573746974,11)#\"]<br \/>\n'') union+\/*!select*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n')) \/*!u%6eion*\/ \/*!se%6cect*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9.),(0x70656e746573746974),(11)#\"]<br \/>\n')) %2f**%2funion%2f**%2fselect (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n%5B%221807182982%27%29%29%20uni%22%2C%22on<br \/>\n%20sel%22%2C%22ect%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C%2some_text%27%2C11%23%22%5D<br \/>\ncat \/et?\/pa?swd<br \/>\ncat \/et'c\/pa'ss'wd<br \/>\ncat \/et*\/pa**wd<br \/>\ne'c'ho 'swd test pentest' |awk '{print \"cat \/etc\/pas\"$1}' |bas'h<br \/>\ncat \/etc\/passwd<br \/>\ncat$u+\/etc$u\/passwd$u<br \/>\n&lt;svg\/onload=alert()\/\/<\/code><\/p>\n<p>Kui p\u00e4ringud ei blokeerita, siis t\u00f5en\u00e4oliselt WAF j\u00e4tab isegi reaalset r\u00fcnnakut ignoreerima. Enne n\u00e4idiste kasutamist veenduge, et WAF ei blokeeriks legitiimseid p\u00e4ringuid.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/459976\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f NGINX, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0435 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u043b\u0438\u0437\u0430 Nemesida WAF 4.0.129 \u0414\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0435\u043b\u0438\u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c Nemesida WAF \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e Nginx Stable 1.12, 1.14 \u0438 1.16. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27112,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uus Nemesida WAF Free versioon NGINX | ProHoster","description":"Eelmisel aastal vabastasime Nemesida WAF Free \u2014.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:28+00:00","article:modified_time":"2019-10-31T19:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36245","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:36:49","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:26","updated":"2026-02-22 15:36:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36245"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36245\/revisions"}],"predecessor-version":[{"id":162033,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36245\/revisions\/162033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27112"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}