WAF
Powerful but painful Web Application Firewalls
Security
Security through obscurity - double login protection made easy...
Security through obscurity is not a great idea when it is your ONLY protection technique. For example moving your SSH port from 22 -> 23 won't fool any hackers for long! However, I've always liked putting a 'double login' in front of important web sites to frustrate simple automated hacking tools...
WAF
Load Balancing Nginx Web Servers with OWASP Top 10 WAF in Azure
SSL offload is handled by STunnel, while HAProxy handles back-end server re-encryption...
Security
How to stop web form spam — use a simple honey pot trap in ModSecurity...
How frustrating do you find it when hackers or robots fill in your website forms with "Buy Viagra Now!" type spam?..
Security
Blocking Japan with ModSecurity and Maxmind Lite
The Web Application Firewall is based on ModSecurity which is an open source WAF for Apache, IIS, and Nginx for protecting against a many variety of attacks and allows for HTTP traffic monitoring and logging...
Security
Why did my Loadbalancer just fail the PCI compliance test?
Let me first say that I'm not really a fan of PCI scanners. It's not so much that I'm anti security scanners but rather that scanning for vulnerabilities based on only the version number a package returns seems rather simplistic to me...
WAF
For any poor sod who needs to deal with the PCI Data Security Standard (PCI DSS)
Any engineer dealing with PCI DSS compliance issues probably looses a little bit of the joy in life...