14

Internal Application Servers - do I need suhosin/mod_security?

view full story
linux-howto

http://forums.cpanel.net – We have some internal PHP application servers, as in they're only accessed by staff. They are behind a firewall so that external users cannot reach them. Do I still need suhosin and mod_security? (HowTos)

funckax's picture
Submitted by funckax on 07/13/2012 – Made popular on 07/13/2012

Stories similar to Internal Application Servers - do I need suhosin/mod_security?

Howtoforge: "This tutorial shows how to harden PHP5 with Suhosin on a CentOS 5.4 server. From the Suhosin project page: "Suhosin is an advanced protection system for PHP installations that was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core."

Hi

On my server i have mod_security with the default config file installed and csf firewall

I am getting around 6-10 good UK Ips being blocked by csf through mod_security

Can anyone tell me why they are being blocked and what i can do to edit the config to fix this ?

Here is the csf block

IP ADDY HERE # lfd: (mod_security) mod_security triggered by IP ADDY HERE (GB/United Kingdom/-)

We just ordered a sonicwall NSA 4500 firewall and I am preparing a network diagram for its arrival.

How can i enable eval function for some users/virtual hosts ? I trying to add suhosin.conf to /usr/local/apache/conf/userdata/std/2/$user/suhosin.conf, rebuilt httpd conf with /scripts/rebuildhttpdconf and restart apache with service httpd restart. Nothing works.

PHP 5.4 suHosin 42 weeks 1 hour ago

Is there any idea when suHosin will have an available option on php 5.4?

I'd like to switch to PHP5.4 but can't really do so until suHosin is working for php 5.4. I know that extension has had it's issues in terms of development. Just wondering when it might be available. :)

Thanks!

Download latest version of Suhosin, enter: # cd /opt # wget http://download.suhosin.org/suhosin-0.9.27.tgz Make sure you have php-devel installed:

The error message “php: symbol lookup error: /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so: undefined symbol: zend_atol” occurs when an application is not compatible with Suhosin. The error message also appears when an old application/software is upgraded to it’s latest version.

Hello Community,

after ive activated suhosin and suexec i get internal server errors on scripts like dokuwiki and piwik.

On another script i get wirte access errors.

When i switch to cgi or fcgi without suexec everything is working. cgi and fcgi with activated suexec didnt work.

Anyone a idea?

Best regards!

mod_security won't upgrade 31 weeks 4 days ago

I have re-compiled with easyapache twice now and for some reason mod_security is still at 1.9.5.