MODX 3 component
IskWaf
A simple yet flexible web application firewall (WAF)
13 pages2 sections10 min in total
Contents
Configuration4
02System settingsAfter installing the component, configure a few system settings and the CAPTCHA page, and prepare the environment for the GeoIP databases.03CAPTCHA pageAs described in the system settings, create a MODX resource to show the CAPTCHA. It must not be cacheable and must contain the snippet call…04GeoIP setup (IP2Location)IskWaf uses the IP2Location LITE databases to determine geolocation, ASN and other information about IP addresses. The database files are not…05CRON jobsSet up these CRON jobs for the component to work automatically:Rule types5
06IP rulesBlock, allow or show a CAPTCHA based on the visitor’s IP address or CIDR subnet.07Country blockingThis is not a separate rule type in the interface but a built-in WAF mechanism that runs after the IP rules. It blocks traffic from the countries…08User-Agent rulesApply actions based on the User-Agent string.09Referrer rulesFilter requests by the HTTP Referrer.10Request URI rulesApply actions based on the requested URI.11CAPTCHA systemIskWaf uses a local numeric CAPTCHA. An image with 6 digits is generated and the user is asked to enter the first or the last three. Passing is…12ReportsDaily summaries in IskWafReportDaily include: the total number of WAF events, blocks, CAPTCHAs, rule-based allows, triggers by rule type, search bot…13DisclaimerIskWaf is a basic protection tool and does not replace comprehensive enterprise security solutions or dedicated WAF services. Use it at your own…