{"id":36245,"date":"2019-10-31T22:10:28","date_gmt":"2019-10-31T19:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novyj-bild-nemesida-waf-free-dlya-nginx\/"},"modified":"2019-10-31T22:10:28","modified_gmt":"2019-10-31T19:10:28","slug":"novyj-bild-nemesida-waf-free-dlya-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","title":{"rendered":"Nieuwe build van Nemesida WAF Free voor NGINX","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Nieuwe build van Nemesida WAF Free voor NGINX\" src=\"\/wp-content\/uploads\/2019\/07\/6d684f498688b4aab26911f30c0394d6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nVorig jaar hebben we de Nemesida WAF Free gelanceerd \u2014 een dynamische module voor NGINX die aanvallen op webapplicaties blokkeert. In tegenstelling tot de commerci\u00eble versie, die gebaseerd is op machine learning, analyseert de gratis versie verzoeken alleen met de handtekeningmethode.<\/p>\n<h3>Kenmerken van de release Nemesida WAF 4.0.129<\/h3>\n<p>\nTot de huidige release ondersteunde de dynamische module Nemesida WAF alleen Nginx Stable 1.12, 1.14 en 1.16. In de nieuwe release is ondersteuning toegevoegd voor Nginx Mainline, te beginnen met 1.17, en Nginx Plus, te beginnen met 1.15.10 (R18).<\/p>\n<h3>Waarom nog een WAF maken?<\/h3>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nNAXSI en mod_security zijn misschien wel de populairste gratis WAF-modules, waarbij mod_security actief wordt gepromoot door Nginx, terwijl het oorspronkelijk alleen in Apache2 werd gebruikt. Beide oplossingen zijn gratis, hebben een open broncode en veel gebruikers over de hele wereld. Voor mod_security is er een gratis en commerci\u00eble set handtekeningen beschikbaar voor $500 per jaar, voor NAXSI is er een gratis set handtekeningen 'out of the box', en er zijn ook aanvullende regelsets beschikbaar, zoals doxsi.<\/p>\n<p>Dit jaar hebben we de werking van NAXSI en Nemesida WAF Free getest. In het kort over de resultaten:<\/p>\n<ul>\n<li>NAXSI voert geen dubbele URL-decode uit in cookies<\/li>\n<li>NAXSI is erg moeilijk in te stellen \u2014 de standaardinstellingen van de regels zullen de meeste verzoeken blokkeren bij het gebruik van de webapplicatie (authenticatie, profiel- of materiaalbewerking, deelname aan enqu\u00eates, enz.) en er moeten uitsluitingslijsten worden gegenereerd, wat de veiligheid negatief be\u00efnvloedt. Nemesida WAF Free heeft bij standaardinstellingen tijdens het gebruik van de website geen enkele valse positieven gegenereerd.<\/li>\n<li>het aantal gemiste aanvallen met NAXSI is vele malen hoger, enz.<\/li>\n<\/ul>\n<p>\nOndanks de nadelen hebben NAXSI en mod_security tenminste twee voordelen \u2014 open broncode en een groot aantal gebruikers. We steunen het idee van open-source, maar kunnen dit momenteel niet doen vanwege mogelijke problemen met 'piraterij' van de commerci\u00eble versie, maar om dit nadeel te compenseren, maken we de inhoud van de set handtekeningen volledig openbaar. We waarderen privacy en bieden de mogelijkheid om dit zelf te verifi\u00ebren met behulp van een proxy-<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/nl\/server\/dts-los-angeles\/\"   title=\"de server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3507\">de server<\/a>.<\/p>\n<p>Kenmerk van Nemesida WAF Free:<\/p>\n<ul>\n<li>een kwalitatieve set handtekeningen met een minimaal aantal False Positives en False Negatives.<\/li>\n<li>installatie en updates vanuit de repository (sneller en handiger);<\/li>\n<li>eenvoudige en duidelijke incidentmeldingen, in plaats van de 'soep' zoals bij NAXSI;<\/li>\n<li>volledig gratis, zonder beperkingen op het aantal verkeer, virtuele hosts, enz.<\/li>\n<\/ul>\n<p>\nTen slotte geef ik een aantal verzoeken om de werking van de WAF te beoordelen (aanbevolen voor gebruik in elke zone: URL, ARGS, Headers &amp; Body):<\/p>\n<p><code>')) un\",\"ion se\",\"lect 1,2,3,4,5,6,7,8,9,0,11#\"]<br \/>\n')) union\/**\/select\/**\/1\/**\/2\/**\/3\/**\/4\/**\/5\/**\/6\/**\/7\/**\/8\/**\/9\/**\/'some_text',\/**\/11#\"]<br \/>\nunion(select(1),2,3,4,5,6,7,8,9,0x70656e746573746974,11)#\"]<br \/>\n')) union+\n\/*!select*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n')) \n\/*!uion*\/ \n\/*!seect*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9.),(0x70656e746573746974),(11)#\"]<br \/>\n')) **union**select (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n1807182982union<br \/>\nselect123456789%2some_text11<br \/>\ncat \/et?\/?pa?swd<br \/>\ncat \/et'c\/pa'ss'wd<br \/>\ncat \/et*\/pa**wd<br \/>\ne'c'ho 'swd test pentest' |awk '{print \"cat \/etc\/pas\"$1}' |bas'h<br \/>\ncat \/etc\/passwd<br \/>\ncat$u+\/etc$u\/passwd$u<br \/>\n&lt;svg\/onload=alert()\/\/<\/code><\/p>\n<p>Als de verzoeken niet worden geblokkeerd, is de kans groot dat de WAF ook een echte aanval doorlaat. Zorg ervoor dat de WAF legitieme verzoeken niet blokkeert voordat u de voorbeelden gebruikt.<br \/>\n<br \/>Bron: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/459976\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f NGINX, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0435 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u043b\u0438\u0437\u0430 Nemesida WAF 4.0.129 \u0414\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0435\u043b\u0438\u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c Nemesida WAF \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e Nginx Stable 1.12, 1.14 \u0438 1.16. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27112,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"nl_NL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nieuwe build van Nemesida WAF Free voor NGINX | ProHoster","description":"Vorig jaar hebben we de Nemesida WAF Free uitgebracht -.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.","og:url":"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:28+00:00","article:modified_time":"2019-10-31T19:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36245","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:36:49","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:26","updated":"2026-02-22 15:36:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/36245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=36245"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/36245\/revisions"}],"predecessor-version":[{"id":162033,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/36245\/revisions\/162033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media\/27112"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=36245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=36245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=36245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}