Score:0

How to use modsecurity on AWS EC2 with ELB

az flag

Query attacks from outside are too frequent since AWS EC2 was used. AWS WAF is too expensive and burdensome. I'm trying to install modsecurity inside the server, but it's not working properly because of ELB. Is there any other alternative or way?

Tim avatar
gp flag
Tim
What do you mean "not working properly because of ELB"? Suggest you edit your question to make your problem unambiguous. Personally I use CloudFlare, and I have fail2ban pushing bad actors to the CloudFlare firewall blocking them before they reach AWS https://www.photographerstechsupport.com/tutorials/protecting-amazon-linux-server-fail2ban-cloudflare-wordpress/
vn flag
"it's not working properly because of ELB" Fix that. I'd bet your problem is that you're seeing the IP of the load balancer and not the client IP; it's a relatively easy thing to fix. https://aws.amazon.com/premiumsupport/knowledge-center/elb-capture-client-ip-addresses/.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.