ModSecurity: Instalasi ModSecurity dan ModEvasive - Revision history

Onnowpurbo: /* Instalasi ModEvasive */

2015-03-30T07:14:55Z

Instalasi ModEvasive

Onnowpurbo: /* Instalasi ModEvasive */

2015-03-30T07:10:39Z

Instalasi ModEvasive

Onnowpurbo: /* Download dan Install OWASP Core Rule Set yang terakhir */

2015-03-30T07:04:42Z

Download dan Install OWASP Core Rule Set yang terakhir

Onnowpurbo: /* Download dan Install OWASP Core Rule Set yang terakhir */

2015-03-30T06:37:47Z

Download dan Install OWASP Core Rule Set yang terakhir

Onnowpurbo: /* Instalasi & Konfigurasi ModSecurity */

2015-03-30T06:24:49Z

Instalasi & Konfigurasi ModSecurity

Onnowpurbo: /* Instalasi & Konfigurasi ModSecurity */

2015-03-30T06:23:57Z

Instalasi & Konfigurasi ModSecurity

Onnowpurbo: /* Instalasi & Konfigurasi ModSecurity */

2015-03-30T06:12:02Z

Instalasi & Konfigurasi ModSecurity

Onnowpurbo: /* Instalasi & Konfigurasi ModSecurity */

2015-03-30T06:09:24Z

Instalasi & Konfigurasi ModSecurity

Onnowpurbo: /* Kebutuhan */

2015-03-30T05:46:07Z

Kebutuhan

Onnowpurbo: /* Kebutuhan */

2015-03-30T05:43:18Z

Kebutuhan

@@ Line 124: / Line 124: @@
 Buat file mod-evasive.conf dan konfigurasi ModEvasive.
-  sudo vi /etc/apache2/mods-available/mod-evasive.conf
+  sudo vi /etc/apache2/mods-available/evasive.conf
 Tambahkan kalimat berikut, dan ubah nilai email maupun nilai lainnnya yang perlu diubah:
-  <ifmodule mod_evasive20.c>
+  <IfModule mod_evasive20.c>
-    DOSHashTableSize 3097
+     DOSHashTableSize    3097
-    DOSPageCount  2
+     DOSPageCount        2
-    DOSSiteCount  50
+     DOSSiteCount        50
-     DOSPageInterval 1
+     DOSPageInterval     1
-     DOSSiteInterval  1
+     DOSSiteInterval     1
-    DOSBlockingPeriod  10
+     DOSBlockingPeriod   10
-    DOSLogDir   /var/log/mod_evasive
-    DOSEmailNotify  EMAIL@DOMAIN.com
+     DOSEmailNotify      username@domain.com
-    DOSWhitelist   127.0.0.1
+     # DOSSystemCommand    "su - someuser -c '/sbin/... %s ...'"
-  </ifmodule>
+     DOSLogDir           "/var/log/mod_evasive"
- ln -s /etc/apache2/mods-available/mod-evasive.conf /etc/apache2/mods-enabled/mod-evasive.conf
+* Jika ada kesulitan e-mail yang tidak jalan, kita dapat mencoba membuat symlink berikut
   sudo ln -s /etc/alternatives/mail /bin/mail/
-. Check if ModEvasive is enabled and restart Apache.
+* Cek ModEvasive apakah sudah enable
-  sudo a2enmod mod-evasive
+  sudo a2enmod evasive
-Restart Apache2 webserver
+* Restart Apache2 webserver
   sudo /etc/init.d/apache2 restart

@@ Line 117: / Line 117: @@
   sudo apt-get install libapache2-mod-evasive
-. Create log file directory for mod_evasive.
+Buat directory untuk log file dari mod_evasive.
   sudo mkdir /var/log/mod_evasive
   sudo chown www-data:www-data /var/log/mod_evasive/
-. Create mod-evasive.conf file and configure ModEvasive.
+Buat file mod-evasive.conf dan konfigurasi ModEvasive.
   sudo vi /etc/apache2/mods-available/mod-evasive.conf
-    and add the following, changing the email value, and other options below as required :
+Tambahkan kalimat berikut, dan ubah nilai email maupun nilai lainnnya yang perlu diubah:
   <ifmodule mod_evasive20.c>
@@ Line 146: / Line 139: @@
      DOSWhitelist   127.0.0.1
   </ifmodule>
 . Fix mod-evasive email bug

@@ Line 85: / Line 85: @@
 * Tambahkan rule ke Apache2. Buka terminal dan lakukan:
-  sudo vi /etc/apache2/mods-available/mod-security.conf
+  sudo vi /etc/apache2/mods-avaolable/security2.conf
-tambahkan di akhir file
+tambahkan di akhir ke dua file tersebut
   Include "/etc/modsecurity/activated_rules/*.conf"
@@ Line 94: / Line 95: @@
   sudo a2enmod headers
-  sudo a2enmod mod-security
+  sudo a2enmod security2
 Restart Apache2 webserver
-  sudo /etc/init.d apache2 restart
+  sudo /etc/init.d/apache2 restart
 atau
-service apache2 restart
+ service apache2 restart
-. Install ModEvasive.
+==Instalasi ModEvasive==
-    Open the Terminal Window and enter :
+Instalasi
   sudo apt-get install libapache2-mod-evasive

@@ Line 61: / Line 61: @@
 ==Download dan Install OWASP Core Rule Set yang terakhir==
-    We need to download and install the latest OWASP ModSecurity Core Rule Set from the project website. Click here for more information.
+* Kita perlu men-download dan meng-instalasi OWASP ModSecurity Core Rule Set terbaru dari web https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/master
-    We will also activate the default CRS config file modsecurity_crs_10_setup.conf.example
+* Kita perlu mengaktifkan file konfigurasi CRS default
-    If you prefer not to use the latest rules, replace master below with the a specific version you would like to use e.g :  v2.2.5
-    Open the Terminal Window and enter :
+ modsecurity_crs_10_setup.conf.example
   cd /tmp
@@ Line 70: / Line 72: @@
   sudo tar -zxvf SpiderLabs-owasp-modsecurity-crs.tar.gz
   sudo cp -R SpiderLabs-owasp-modsecurity-crs-*/* /etc/modsecurity/
   sudo rm SpiderLabs-owasp-modsecurity-crs.tar.gz
   sudo rm -R SpiderLabs-owasp-modsecurity-crs-*
   sudo mv /etc/modsecurity/modsecurity_crs_10_setup.conf.example /etc/modsecurity/modsecurity_crs_10_setup.conf
-    Now we create symbolic links to all activated base rules. Open a terminal window and enter :
+* Kita perlu membuat link simbolik untuk mengaktifkan semua base rule. Buka terminal dan lakukan:
   cd /etc/modsecurity/base_rules
@@ Line 82: / Line 83: @@
   for f in * ; do sudo ln -s /etc/modsecurity/optional_rules/$f /etc/modsecurity/activated_rules/$f ; done
-    Now add these rules to Apache2. Open a terminal window and enter:
+* Tambahkan rule ke Apache2. Buka terminal dan lakukan:
   sudo vi /etc/apache2/mods-available/mod-security.conf
-    Add the following to towards the end of the file with other includes  and save the file :
+tambahkan di akhir file
   Include "/etc/modsecurity/activated_rules/*.conf"
-. Check if ModSecurity is enabled and restart Apache.
+* Cek apakah ModSecurity sudah enabled. Sebelum me-restart Apache2 cek apakah modules sudah diload dengan baik. Buka terminal dan lakukan:
   sudo a2enmod headers

← Older revision		Revision as of 06:24, 30 March 2015
Line 54:		Line 54:
	SecRequestBodyInMemoryLimit 16384000		SecRequestBodyInMemoryLimit 16384000

		+	atau biarkan sesuai dengan default
		+
		+	SecRequestBodyLimit 13107200
		+	SecRequestBodyNoFilesLimit 131072

	==Download dan Install OWASP Core Rule Set yang terakhir==		==Download dan Install OWASP Core Rule Set yang terakhir==

@@ Line 30: / Line 30: @@
 Konfigurasi rules / aturan di ModSecurity
 * Aktifkan aturan / rules default agar bisa beroperasi. Konfigurasi apa yang kita butuhkan.
@@ Line 37: / Line 36: @@
   sudo mv /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf
-* The default folder for ModSecurity rules is /etc/modsecurity/ . All .conf files will be included and need to be configured as required.
+* Folder default rules ModSecurity adalah /etc/modsecurity/ . Semua file .conf yang perlu dikonfigurasi terdapat disitu.
-* We need to activate all the base rules and make sure they also get loaded.
+* Kita perlu mengaktifkan semua rule dasar dan meyakinkan bahwa ModSecurity dapat di load.
-* You might want to edit the SecRequestBodyLimit option in the modsecurity.conf file.
+* Kita perlu mengedit opsi SecRequestBodyLimit di file modsecurity.conf
-* SecRequestBodyLimit limits the page request size and limits file uploads to 128 KB by default. Change this to the size of files you would accept uploaded to the server.
+* SecRequestBodyLimit membatasi ukuran page yang di minta dan membatasi upload file menjadi default 128 KB. Ubah ini sesuai dengan kebutuhan / ijin yang kita berikan untuk meng-upload file ke server.
-* This settings is very important as it limits the size of all files that can be uploaded to the server. For CMS sites using Drupal or Wordpress this setting is the source of much pain.
+* Konfigurasi ini sangat penting karena akan membatasi besarnya file yang dapat di upload ke server. Untuk situs CMS yang menggunakan Drupal atau Wordpress konfigurasi ini yang akan menjadi sumber pening di kepala.
+* Buka terminal dan edit:
   sudo vi /etc/modsecurity/modsecurity.conf
-* Aktifkan aturan / rule dengan mengedit SecRuleEngine menjadi On.
+* Aktifkan aturan / rule dengan mengedit SecRuleEngine dari DetectionOnly menjadi On.
   SecRuleEngine On
@@ Line 56: / Line 54: @@
   SecRequestBodyInMemoryLimit 16384000
-. Download and install the latest OWASP Core Rule Set.
      We need to download and install the latest OWASP ModSecurity Core Rule Set from the project website. Click here for more information.

← Older revision		Revision as of 06:12, 30 March 2015
Line 32:		Line 32:


−	~~Activate the recommended~~ default ~~rules to get things going. Configure as needed~~. ~~For complete information refer to the ModSecurity Reference Manual - click here~~.	+	* Aktifkan aturan / rules default agar bisa beroperasi. Konfigurasi apa yang kita butuhkan.
		+	* Copy konfigurasi rekomended

	sudo mv /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf		sudo mv /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf

@@ Line 27: / Line 27: @@
 Instalasi
-  sudo apt-get install libapache-mod-security
+  sudo apt-get install libapache2-mod-security2
      Activate the recommended default rules to get things going. Configure as needed. For complete information refer to the ModSecurity Reference Manual - click here.

@@ Line 7: / Line 7: @@
 * Instalasi Ubuntu LTS server, or yang terbaru di mesin anda.
-* Apache2 webserver di setup dan di konfigurasi.
+* Instalasi Apache2 webserver, di setup dan di konfigurasi:
 * Instalasi dependensi yang dibutuhkan untuk modsecurity