We recently had a scenario where an apache reverse proxy needed to be deployed in front of a pair of tomcat servers. Due to security concerns, this reverse proxy was hosting mod_security and acting as a web application firewall (WAF) However, a critical requirement was that the tomcat applications would be able to see the … Continue reading Preserving client IP w/ apache reverse proxy
Dansguardian : lessons learned
To dis-allow users from connecting to a site via IP rather than URL name (so bypassing filtering unless you use the time consuming forward / reverse lookup feature), uncomment the following line in the bannedsitelist: *ip To enable syslog, the default dansguardian.conf uses: # Syslog logging # # Use syslog for access logging instead of … Continue reading Dansguardian : lessons learned
You must be logged in to post a comment.