nginx安全

1.隐藏版本号和server信息

[[email protected] nginx-1.8.0]# vim src/core/nginx.h

#define NGINX_VERSION       ""

#define NGINX_VER          "tingyun/" NGINX_VERSION

#define NGINX_VAR          "tingyun"

[[email protected] nginx-1.8.0]# vim src/http/ngx_http_header_filter_module.c

static char ngx_http_server_string[] = "" CRLF;

static char ngx_http_server_full_string[] = "" NGINX_VER CRLF;

[[email protected] nginx-1.8.0]# vim src/http/ngx_http_special_response.c

"<hr><center>tingyun</center>" CRLF

[[email protected] nginx-1.8.0]# ./configure  --prefix=/usr/local/nginx-1.8.0  --with-file-aio  --with-poll_module  --with-pcre  --without-http_autoindex_module  --without-http_ssi_module  --without-mail_pop3_module  --without-mail_smtp_module  --without-mail_imap_module

[[email protected] nginx-1.8.0]# make && make install

2.下载安装modsecurity安全模块

[[email protected] ~]# yum install libtool httpd-devel libevent libevent-devel library-devel -y

[[email protected] ~]# tar xvf ModSecurity-2.9.0.tar.gz

[[email protected] ModSecurity-2.9.0]# ./configure --enable-standalone-module --disable-mlogc

[[email protected] ModSecurity-2.9.0]# make

[[email protected] nginx-1.8.0]# ./configure  --prefix=/usr/local/nginx-1.8.0  --with-file-aio  --with-poll_module  --with-pcre  --without-http_autoindex_module  --without-http_ssi_module  --without-mail_pop3_module  --without-mail_smtp_module  --without-mail_imap_module --add-module=/root/ModSecurity-2.9.0/nginx/modsecurity/

[[email protected] nginx-1.8.0]# make && make install