Naxsi Files

Naxsi:

• Fixed various compilation issues (#515 [#497] [#491]).
• Fixed valid JSON blocked by Rule ID 15 (#457).
• Fixed documentation (#505).
• Updated libinjection to 3.9.2 (commit: 991433e7 [#523])
• Added Content-type: application/vnd.api+json (#513).
• Added JSON logging output for events (#488 [#522]).
• Implemented Whitelist for IPs and CIDRs and support for IPv4 and IPv6 (#488 [#522]).

Special thanks to:

• 0xflotus
• marcinguy
• squedgy

Debian/Ubuntu packages usage:

To enable naxsi include the following files in the configuration as follows:

:::bash
# add inside http {}
include /usr/share/naxsi/naxsi_core.rules;

# add inside server {}
include /usr/share/naxsi/naxsi_denied_url.conf;

# add inside location /my/path {}
# you can't use both. choose one of the 2 modes.
include /usr/share/naxsi/naxsi_block_mode.conf; # use this to enable blocking mode
include /usr/share/naxsi/naxsi_learning_mode.conf; # use this to enable learning mode

All the BasicRules are available below and shall be added after naxsi_block_mode.conf or after naxsi_learning_mode.conf

:::bash
# to use them just include them within `location /my/path {}`
/usr/share/naxsi/rules/iris.rules
/usr/share/naxsi/rules/rutorrent.rules
/usr/share/naxsi/rules/wordpress.rules
/usr/share/naxsi/rules/dokuwiki.rules
/usr/share/naxsi/rules/drupal.rules
/usr/share/naxsi/rules/etherpad-lite.rules
/usr/share/naxsi/rules/zerobin.rules