{"id":146,"date":"2024-07-30T06:45:53","date_gmt":"2024-07-29T22:45:53","guid":{"rendered":"https:\/\/www.psradio.net\/blog\/?p=146"},"modified":"2024-07-30T07:21:31","modified_gmt":"2024-07-29T23:21:31","slug":"nginxmodsecurity-%e5%ae%9e%e7%8e%b0waf","status":"publish","type":"post","link":"https:\/\/www.psradio.net\/blog\/?p=146","title":{"rendered":"Debian12+Nginx+ModSecurity \u5b9e\u73b0WAF"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u4e00\u3001<strong>\u73af\u5883\u8bf4\u660e<\/strong><br>\u64cd\u4f5c\u7cfb\u7edf\uff1aDebian 12<br>APT\u4ed3\u5e93\uff1aStable\u4ed3\u5e93<br>Nginx\u7248\u672c\uff1a\u65e0\u7279\u5b9a\u7248\u672c\uff0c\u56e0\u4e3a\u7528\u7684\u662fDebian\u4ed3\u5e93\u7684\u7248\u672c\uff0c\u5e76\u975e\u81ea\u884c\u7f16\u8bd1<br>ModSecurity\uff1a\u7528\u7684\u662fDebian\u4ed3\u5e93\u7684\u914d\u5957\u6a21\u5757 libnginx-mod-http-modsecurity<br>Nginx-LUA\u652f\u6301\uff1a\u7528\u4e8e\u81ea\u5b9a\u4e49405\u62e6\u622a\u9875\u9762\uff08\u539f\u6765\u662f403\u7684\u8fd4\u56de\uff0c\u6211\u6539\u6210405\u4e86\uff09<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u4e8c\u3001Debian APT \u4ed3\u5e93\u914d\u7f6e<\/strong><br>apt\u6e90\u914d\u7f6e\u6587\u4ef6: \/etc\/apt\/sources.list<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>#\u8f6f\u4ef6\u4ed3\u5e93\ndeb http:\/\/deb.debian.org\/debian\/ bookworm main non-free-firmware\ndeb-src http:\/\/deb.debian.org\/debian\/ bookworm main non-free-firmware\n\n#\u5b89\u5168\u66f4\u65b0\u901a\u9053\ndeb http:\/\/security.debian.org\/debian-security bookworm-security main non-free-firmware\ndeb-src http:\/\/security.debian.org\/debian-security bookworm-security main non-free-firmware\n\n#\u8f6f\u4ef6\u5347\u7ea7\u901a\u9053\ndeb http:\/\/deb.debian.org\/debian\/ bookworm-updates main non-free-firmware\ndeb-src http:\/\/deb.debian.org\/debian\/ bookworm-updates main non-free-firmware<\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u4e09\u3001\u5b89\u88c5NGINX \u548c ModSecurity<\/strong><\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>#\u5b89\u88c5NGINX\napt install nginx\n\n#\u5b89\u88c5ModSecurity\napt install libnginx-mod-http-modsecurity\n\n#\u5b89\u88c5Nginx-LUA\u652f\u6301\napt install libnginx-mod-http-lua<\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u56db\u3001\u4fee\u6539NGINX\u914d\u7f6e\u6587\u4ef6\uff0c\u542f\u7528ModSecurity\u6a21\u5757<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u540e\u7eed\u5f85\u66f4\u65b0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001\u73af\u5883\u8bf4\u660e\u64cd\u4f5c\u7cfb\u7edf\uff1aDebian 12APT\u4ed3\u5e93&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,9],"tags":[28,23,27],"class_list":["post-146","post","type-post","status-publish","format-standard","hentry","category-debian","category-linux","tag-modsecurity","tag-nginx","tag-waf"],"_links":{"self":[{"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=146"}],"version-history":[{"count":12,"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/146\/revisions"}],"predecessor-version":[{"id":166,"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/146\/revisions\/166"}],"wp:attachment":[{"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psradio.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}