Re: Naxsi Nginx High performance WAF

2016-12-23 Thread Robert Paprocki
Naxsi and ModSecurity are... very different. They have distinct (and largely incomparable) backgrounds, philosophies, goals, implementation details, and, most importantly for this context, vastly different DSLs that support their operations. A 1-1 translation of the OWASP CRS (particularly v3, j

Naxsi Nginx High performance WAF

2016-12-23 Thread c0nw0nk
So I recently got hooked on Naxsi and I am loving it to bits <3 thanks to itpp2012 :) https://github.com/nbs-system/naxsi I found the following Rule sets here. http://spike.nginx-goodies.com/rules/ But I am curious does anyone have Naxsi written rules that would be the same as/on Cloudflare's W