Update Otomatis Mod security atomic

Discussion in 'Masalah Teknik dan Keamanan' started by jetdino, 25 Feb 2013.

Thread Status:
Not open for further replies.
  1. jetdino

    jetdino Apprentice 2.0

    Messages:
    401
    Likes Received:
    32
    Trophy Points:
    28
    Script ini terinspirasi dari script bash buatan secmas di forum cpanel _http://forums.cpanel.net/f185/modsecurity-auto-updater-147745.html

    Saya kira buatan secmas itu otomatis ternyata harus manual juga, daripada daripada akhirnya bikin script sendiri mudah-mudahan berguna bagi yang lain :D

    folder modsec yang digunakan disini adalah modsec_rules silahkan gunakan nama lain dan jangan lupa di update Include pada file MODSEC2.USER.CONF

    File modsec dari cpanel yang harus diubah adalah:

    MODSEC2.USER.CONF

    Code:
    SecComponentSignature 201205101758
    SecRequestBodyAccess On
    SecResponseBodyAccess On
    SecResponseBodyMimeType (null) text/html text/plain text/xml
    SecResponseBodyLimit 2621440
    SecServerSignature Apache
    SecUploadDir /var/asl/data/suspicious
    SecUploadKeepFiles Off
    SecAuditLogParts ABIFHZ
    SecArgumentSeparator "&"
    SecCookieFormat 0
    SecRequestBodyInMemoryLimit 131072
    SecDataDir /var/asl/data/msa
    SecTmpDir /tmp
    SecAuditLogStorageDir /var/asl/data/audit
    SecResponseBodyLimitAction ProcessPartial
    
    # USE THE FOLLOWING TWO COMMANDS ONLY IF YOU HAVE MOD_SEC 2.6.X or better
    # SecPcreMatchLimit 50000
    # SecPcreMatchLimitRecursion 5000
     
    # Include /usr/local/apache/conf/modsec2.whitelist.conf
    
    #ASL Rules
    Include /usr/local/apache/conf/modsec_rules/*asl*.conf
    Include /usr/local/apache/conf/modsec2.whitelist.conf
    

    Script bisa di download di
    _http://azhariahmad.com/dl/updatemodsec.sh

    Script ini masih jauh dari sempurna, jika ingin di modif silahkan, tapi alangkah baiknya jika di share juga disini :D


    Semoga bermanfaat
     
  2. galuh82

    galuh82 Hosting Guru Web Hosting (Company)

    Messages:
    2,514
    Likes Received:
    186
    Trophy Points:
    63
    /root/modsec/ kayaknya mesti create dulu ya ?
     
  3. jetdino

    jetdino Apprentice 2.0

    Messages:
    401
    Likes Received:
    32
    Trophy Points:
    28
    iya mas betul
     
Loading...
Thread Status:
Not open for further replies.

Share This Page

Loading...