I’ll go through a false positive example I found on my blog. False positives are inevitable, so it’s not a bad idea to run mod_security for a few weeks on detect only. Here’s the url that was raising the alarm. The trigger was in the url. http://chesterton.id.au/blog/2007/11/20/blue-tongue-harmonica-talk-cd/ Here’s what modsec_audit.log looked like –f8a03521-A– [21/Mar/2011:07:54:47 +1100] [...]
October 14, 2010 – 12:13 am
I’ve reinstalled apache and I’m in the process of cutting over my sites. Not completely, just for non static files, mainly php. Nginx is infront of apache serving static content and is a reverse proxy to apache which runs on 127.0.0.1:81 The reason? I want to give mod_security a spin. It’s loaded now, but it [...]
August 16, 2010 – 9:27 pm
I won’t go into too many details, I got everything I learned from google and my customisations aren’t very ground breaking. Jdub tweeted about the wordpress apc object cache being updated. So I (re)installed that. I had it installed a while ago, but a wordpress upgrade broke it. http://wordpress.org/extend/plugins/apc/ Everyone knows about wp-super-cache, and there’s [...]
August 13, 2010 – 8:28 am
Many years ago, I was a rabid (vapid?) PostgreSQL fanboi. I took the time to study how to tune postgres, it was very rewarding to see queries go from taking 30 seconds, to completing in under a second. This involved tuning knobs in the prostres config, to adding indexes. All done manually. If some software [...]
I recently swapped over from lighty to nginx, and man, am I glad I did. I have no idea about the internals, which is faster, lighter, better, etc, but nginx is way more intuitive to configure. Which in the end means my server is set up better. That kick started my latest obsession, speeding up [...]
…When I’m not working on linux, I’ve been working on some websites. Mainly blogs, but also some ebay affiliate sites that are usually attached to blogs. I’m trying to get 30 up to start with, but I’m not very commited, I’ve got five going, oldest one is five months old. Once I hit 30, I’ll [...]