modsecurity系列二：主文件配置

最新推荐文章于 2024-05-12 10:53:36 发布

美了美了

最新推荐文章于 2024-05-12 10:53:36 发布

阅读量1.1k

点赞数

分类专栏： modsecurity 文章标签： modsecurity

modsecurity 专栏收录该内容

9 篇文章

订阅专栏

本文深入探讨了ModSecurity的主要配置指令及其作用，包括参数分隔符、Cookie格式设置、持久存储文件夹设置等，并详细解释了如何通过日志开关来控制交易日志的记录，提供了一个关于交易相关错误和警告的日志记录策略。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Main configuration directives

主要的有如下几个：

SecArgumentSeparator Sets the application/x-www-form-urlencoded parameter separator
SecCookieFormat Sets the cookie parser version
SecDataDir Sets the folder for persistent storage
SecRequestBodyAccess Controls request body buffering
SecRequestBodyInMemoryLimit Sets the size of the per-request memory buffer
SecRequestBodyLimit Sets the maximum request body size ModSecurity will accept
SecRequestBodyNoFilesLimit Sets the maximum request body size, excluding uploaded files
SecResponseBodyAccess Controls response body buffering
SecResponseBodyLimit Specifies the response body buffering limit
SecResponseBodyLimitAction Controls what happens once the response body limit is reached
SecResponseBodyMimeType Specifies a list of response body MIME types to inspect
SecResponseBodyMimeTypesClear Clears the list of response body MIME types
SecRuleEngine Controls the operation of the rule engine

SecTmpDir Sets the folder for temporary files

日志开关：

Our default configuration will use audit logging only for the transactions that are relevant,which means those that have had an error or a warning reported against them. Other possiblevalues for SecAuditEngine are On (log everything) and Off (log nothing).
# Log only what is really necessary.
SecAuditEngine RelevantOnly