Question: iptables support (realtime server firewall) about modsecurity-apache HOT 2 CLOSED

Hi @CanadianJeff,

The integration of an application-layer-firewall (e.i. ModSecurity) within a network-layer-firewall is something possible and seems like suit your specific use case that you have presented. There are, however, some things that should be tackled very carefully; one of those is the privilege separation.

In order to achieve such an objective, I recommend the utilization of SecRuleScript or exec action. Those could be used to trigger an external resource on your server. Could be used, for example, to manipulate a temporary database within the IP addresses that should be blocked in the network layer. This database could be consulted by an external process that will manipulate the iptables rules accordingly.

from modsecurity-apache.

I would kinda like to revisit this?

from modsecurity-apache.