nanog mailing list archives

Re: Malicious code just found on web server


From: Gadi Evron <ge () linuxbox org>
Date: Mon, 20 Apr 2009 21:03:36 +0300

Ingo Flaschberger wrote:
Hi,

I see this every day at my webservers with a lot of *outdated* *exploitable* customer websites [I love old joomla's];
but mod_security does a great job nuking sql and various other exploits.

mod_security saves our collective behinds every day at nearly every very big Internet service provider I know of, and definitely hosting operations.

Mostly I like tweaking with it to see patterns of people who try to mess with me, rather than use most of the usual rules it has.

        Gadi.


Current thread: