{"id":2201,"date":"2025-12-16T12:44:01","date_gmt":"2025-12-16T03:44:01","guid":{"rendered":"https:\/\/bokumin.org\/blog\/?p=2201"},"modified":"2026-02-19T12:30:38","modified_gmt":"2026-02-19T03:30:38","slug":"mod_security-owasp-crs-fail2ban%e7%92%b0%e5%a2%83%e3%82%92%e6%a7%8b%e7%af%89%e3%81%99%e3%82%8b%e3%80%90opensuse%e3%80%91","status":"publish","type":"post","link":"https:\/\/www.bokumin.org\/blog\/2025\/12\/16\/mod_security-owasp-crs-fail2ban%e7%92%b0%e5%a2%83%e3%82%92%e6%a7%8b%e7%af%89%e3%81%99%e3%82%8b%e3%80%90opensuse%e3%80%91\/","title":{"rendered":"mod_security + OWASP CRS + fail2ban\u74b0\u5883\u3092\u69cb\u7bc9\u3059\u308b(OpenSUSE)"},"content":{"rendered":"\n<p>Setting up mod_security + OWASP CRS + fail2ban on OpenSUSE<\/p>\n\n\n\n<p class=\"has-large-font-size\"><strong>\u306f\u3058\u3081\u306b<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/bokumin.org\/blog\/2025\/12\/09\/ssh%e3%83%96%e3%83%ab%e3%83%bc%e3%83%88%e3%83%95%e3%82%a9%e3%83%bc%e3%82%b9%e5%af%be%e7%ad%96%e3%81%afpf%e3%81%a0%e3%81%91%e3%81%a7%e5%ae%8c%e7%b5%90%e3%81%95%e3%81%9b%e3%82%8b\/\">\u524d\u56de\u306e\u8a18\u4e8b<\/a>\u3067\u306fPF\u306b\u3088\u308b\u30b7\u30f3\u30d7\u30eb\u306a\u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u653b\u6483\u9632\u6b62\u306e\u65b9\u6cd5\u306b\u3064\u3044\u3066\u8aac\u660e\u3057\u307e\u3057\u305f\u304c\u3001\u4eca\u56de\u306f\u3088\u308a\u9ad8\u5ea6\u306a\u653b\u6483\u691c\u77e5\u30fb\u9632\u5fa1\u30b7\u30b9\u30c6\u30e0\u306e\u69cb\u7bc9\u65b9\u6cd5\u306b\u3064\u3044\u3066\u89e3\u8aac\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u5f93\u6765\u306e\u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u9632\u5fa1\u306f\u3001\u9023\u7d9a\u3057\u305f\u30ed\u30b0\u30a4\u30f3\u8a66\u884c\u3084\u5927\u91cf\u30a2\u30af\u30bb\u30b9\u3092<strong>\u56de\u6570\u30d9\u30fc\u30b9<\/strong>\u3067\u691c\u77e5\u3059\u308b\u4ed5\u7d44\u307f\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002\u3057\u304b\u3057\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3084XSS\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3068\u3044\u3063\u305f\u653b\u6483\u306f\u3001\u305f\u3063\u305f1\u56de\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u3067\u6210\u529f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u307e\u305f\u3001\u8907\u6570\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092\u4f7f\u3063\u305f\u5206\u6563\u578b\u653b\u6483\u3067\u306f\u3001\u5404IP\u304b\u3089\u306e\u8a66\u884c\u56de\u6570\u306f\u5c11\u306a\u304f\u3066\u3082\u3001\u5168\u4f53\u3068\u3057\u3066\u306f\u5927\u898f\u6a21\u306a\u653b\u6483\u306b\u306a\u308a\u307e\u3059\u3002\u3053\u306e\u3088\u3046\u306a\u9ad8\u5ea6\u306a\u653b\u6483\u306b\u5bfe\u5fdc\u3059\u308b\u306b\u306f\u3001<strong>\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u5185\u5bb9\u305d\u306e\u3082\u306e\u3092\u691c\u67fb\u3059\u308b<\/strong>\u4ed5\u7d44\u307f\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u4eca\u56de\u3001\u3053\u306e\u691c\u67fb\u3059\u308b\u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u3068\u3057\u3066<strong>OWASP CRS<\/strong>\u3092\u4f7f\u7528\u3057\u307e\u3057\u305f\u3002<strong>OWASP Core Rule Set<\/strong>\u306f\u3001\u5305\u62ec\u7684\u306a\u653b\u6483\u691c\u77e5\u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u3067\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u30fbXSS\u30fb\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u30fb\u30d5\u30a1\u30a4\u30eb\u30a4\u30f3\u30af\u30eb\u30fc\u30b8\u30e7\u30f3\u306a\u3069\u3001\u4e3b\u8981\u306a\u653b\u6483\u30d1\u30bf\u30fc\u30f3\u3092\u7db2\u7f85\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30eb\u30fc\u30eb\u3092\u72ec\u81ea\u306b\u4f5c\u6210\u3059\u308b\u306b\u306f\u304b\u306a\u308a\u306e\u52b4\u529b\u304c\u5fc5\u8981\u3067\u3059\u304c\u3001OWASP CRS\u3092\u4f7f\u3048\u3070\u3001\u8ab0\u3067\u3082\u7c21\u5358\u306b\u4e16\u754c\u6a19\u6e96\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u5c0e\u5165\u3067\u304d\u307e\u3059\u3002\u30e9\u30a4\u30bb\u30f3\u30b9\u3082<a href=\"https:\/\/www.apache.org\/licenses\/LICENSE-2.0\">ASLv2<\/a>\u3068\u306a\u3063\u3066\u304a\u308a\u5546\u7528\u3067\u3082\u5229\u7528\u53ef\u80fd\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u672c\u8a18\u4e8b\u3067\u306f\u3001Apache\u306bModSecurity2\u3092\u7d44\u307f\u8fbc\u307f\u3001OWASP CRS\u3067\u653b\u6483\u3092\u691c\u77e5\u3057\u3001fail2ban\u3067\u653b\u6483\u5143IP\u3092\u81ea\u52d5\u7684\u306biptables\u3067\u30d6\u30ed\u30c3\u30af\u3059\u308b\u30b7\u30b9\u30c6\u30e0\u3092\u69cb\u7bc9\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"has-large-font-size\"><strong>\u5b9f\u884c\u74b0\u5883<\/strong><\/p>\n\n\n\n<p><strong>OS<\/strong>: openSUSE Tumbleweed 20251127 <br><strong>Web\u30b5\u30fc\u30d0\u30fc<\/strong>: Apache 2.4.65 (prefork MPM) <br><strong>\u30cf\u30fc\u30c9\u30a6\u30a7\u30a2<\/strong>: Intel Xeon E5-2650L v4 (14\u30b3\u30a2) \/ \u30e1\u30e2\u30ea 32GB <br><strong>\u904b\u7528\u30b5\u30a4\u30c8<\/strong>: WordPress\u3001\u9759\u7684\u30b5\u30a4\u30c8\u3001Web\u30a2\u30d7\u30ea\u306a\u3069<br>\u203b\u57fa\u672c\u7684\u306b\u3069\u306e\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u3067\u3082\u3053\u308c\u3089\u306e\u5b9f\u88c5\u304c\u53ef\u80fd\u3067\u3059\u3002\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u5834\u6240\u306a\u3069\u3001\u7d30\u304b\u3044\u5dee\u7570\u306f\u30de\u30cb\u30e5\u30a2\u30eb\u3084\u516c\u5f0f\u30da\u30fc\u30b8\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n\n<p class=\"has-large-font-size\"><strong>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/strong><\/p>\n\n\n\n<p>\u5b9f\u969b\u306b\u30b7\u30b9\u30c6\u30e0\u3092\u69cb\u7bc9\u3057\u3066\u3044\u304d\u307e\u3059\u3002<br>\u306f\u3058\u3081\u306b\u3001\u5fc5\u8981\u306a\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002openSUSE\u3067\u306fzypper\u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u7528\u3057\u3066\u30d1\u30c3\u30b1\u30fc\u30b8\u7ba1\u7406\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(1 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># mod_security2\u3068OWASP CRS\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\nsudo zypper install apache2-mod_security2 owasp-modsecurity-crs\n\n# fail2ban\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\nsudo zypper install fail2ban\n\n# \u4f9d\u5b58\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u78ba\u8a8d\nrpm -qa | grep mod_security\nrpm -qa | grep owasp<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># mod_security2\u3068OWASP CRS\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">zypper<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">install<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache2-mod_security2<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">owasp-modsecurity-crs<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># fail2ban\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">zypper<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">install<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">fail2ban<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># \u4f9d\u5b58\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u78ba\u8a8d<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">rpm<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">-qa<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #FFCB6B\">grep<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">mod_security<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">rpm<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">-qa<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #FFCB6B\">grep<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">owasp<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001\u6b63\u5e38\u306b\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u307e\u3059\u3002OpenSUSE\u306e\u5834\u5408\u3001rpm\u30b3\u30de\u30f3\u30c9\u3067\u30d1\u30c3\u30b1\u30fc\u30b8\u60c5\u5831\u3092\u8868\u793a\u3059\u308b\u3053\u3068\u3067\u3001\u30d0\u30fc\u30b8\u30e7\u30f3\u3084\u30d3\u30eb\u30c9\u60c5\u5831\u3092\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>$ rpm -qi apache2-mod_security2\nName        : apache2-mod_security2\nVersion     : 2.9.12\nRelease     : 1.2\nArchitecture: x86_64\nInstall Date: Tue 11 Nov 2025 02:01:44 PM JST\nGroup       : Productivity\/Networking\/Web\/Servers\nSize        : 1045515\nLicense     : Apache-2.0\nSignature   : RSA\/SHA512, Fri 10 Oct 2025 01:07:25 AM JST, Key ID 35a2f86e29b700a4\nSource RPM  : apache2-mod_security2-2.9.12-1.2.src.rpm\nBuild Date  : Thu 07 Aug 2025 03:25:52 AM JST\nBuild Host  : reproducible\nPackager    : https:\/\/bugs.opensuse.org\nVendor      : openSUSE\nURL         : https:\/\/www.modsecurity.org\/\nSummary     : Web Application Firewall for Apache httpd\nDescription :\nModSecurity is an intrusion detection and prevention\nengine for web applications (or a web application firewall). Operating\nas an Apache Web server module or standalone, the purpose of\nModSecurity is to increase web application security, protecting web\napplications from known and unknown attacks.\nDistribution: openSUSE Tumbleweed<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">$<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">rpm<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">-qi<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache2-mod_security2<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Name<\/span><span style=\"color: #BABED8\">        <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache2-mod_security2<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Version<\/span><span style=\"color: #BABED8\">     <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">2.9<\/span><span style=\"color: #C3E88D\">.12<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Release<\/span><span style=\"color: #BABED8\">     <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">1.2<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Architecture:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">x86_64<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Install<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Date:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Tue<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">11<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Nov<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">2025<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">02<\/span><span style=\"color: #C3E88D\">:01:44<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">PM<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">JST<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Group<\/span><span style=\"color: #BABED8\">       <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Productivity\/Networking\/Web\/Servers<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Size<\/span><span style=\"color: #BABED8\">        <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">1045515<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">License<\/span><span style=\"color: #BABED8\">     <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Apache-2.0<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Signature<\/span><span style=\"color: #BABED8\">   <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">RSA\/SHA512,<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Fri<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">10<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Oct<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">2025<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">01<\/span><span style=\"color: #C3E88D\">:07:25<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">AM<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">JST,<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Key<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">ID<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">35<\/span><span style=\"color: #C3E88D\">a2f86e29b700a4<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Source<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">RPM<\/span><span style=\"color: #BABED8\">  <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache2-mod_security2-2.9.12-1.2.src.rpm<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Build<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Date<\/span><span style=\"color: #BABED8\">  <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Thu<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">07<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Aug<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">2025<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">03<\/span><span style=\"color: #C3E88D\">:25:52<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">AM<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">JST<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Build<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Host<\/span><span style=\"color: #BABED8\">  <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">reproducible<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Packager<\/span><span style=\"color: #BABED8\">    <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">https:\/\/bugs.opensuse.org<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Vendor<\/span><span style=\"color: #BABED8\">      <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">openSUSE<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">URL<\/span><span style=\"color: #BABED8\">         <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">https:\/\/www.modsecurity.org\/<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Summary<\/span><span style=\"color: #BABED8\">     <\/span><span style=\"color: #C3E88D\">:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Web<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Application<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Firewall<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">for<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Apache<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">httpd<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Description<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">ModSecurity<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">is<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">an<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">intrusion<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">detection<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">and<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">prevention<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">engine<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">for<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">web<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">applications<\/span><span style=\"color: #BABED8\"> (or <\/span><span style=\"color: #C3E88D\">a<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">web<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">application<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">firewall<\/span><span style=\"color: #BABED8\">). Operating<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">as<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">an<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Apache<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Web<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">server<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">module<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">or<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">standalone,<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">the<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">purpose<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">of<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">ModSecurity<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">is<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">to<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">increase<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">web<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">application<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">security,<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">protecting<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">web<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">applications<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">from<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">known<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">and<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">unknown<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">attacks.<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Distribution:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">openSUSE<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Tumbleweed<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u6b63\u5e38\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3089\u3001Apache\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u3068\u3057\u3066mod_security2\u3092\u6709\u52b9\u5316\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(1 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># mod_security2\u30e2\u30b8\u30e5\u30fc\u30eb\u306e\u6709\u52b9\u5316\nsudo a2enmod security2<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># mod_security2\u30e2\u30b8\u30e5\u30fc\u30eb\u306e\u6709\u52b9\u5316<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">a2enmod<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">security2<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"has-large-font-size\"><strong>mod_security2\u306e\u57fa\u672c\u8a2d\u5b9a<\/strong><\/p>\n\n\n\n<p>OpenSUSE\u3067\u306f\u3001<code>conf.d\/<\/code> \u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u914d\u7f6e\u3055\u308c\u305f <code>.conf<\/code> \u30d5\u30a1\u30a4\u30eb\u304c\u81ea\u52d5\u7684\u306b\u8aad\u307f\u8fbc\u307e\u308c\u308b\u306e\u3067\u3001\u5143\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u30d5\u30a1\u30a4\u30eb\u3092\u76f4\u63a5\u7de8\u96c6\u3059\u308b\u3088\u308a\u3082\u3001\u30ab\u30b9\u30bf\u30e0\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3059\u308b\u65b9\u304c\u7ba1\u7406\u3057\u3084\u3059\u3044\u3067\u3059\u3002<br>\u57fa\u672c\u7684\u306b\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a\u306e\u307e\u307e\u3067\u3082\u52d5\u4f5c\u3057\u307e\u3059\u304c\u3001WordPress\u306a\u3069\u5927\u304d\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u304c\u5fc5\u8981\u306a\u5834\u5408\u3084\u3001\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u3092\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0\u3057\u305f\u3044\u5834\u5408\u306f\u3001\u30ab\u30b9\u30bf\u30e0\u8a2d\u5b9a\u3092\u4f5c\u6210\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002\u4ee5\u4e0b\u306f\u30ab\u30b9\u30bf\u30e0\u8a2d\u5b9a\u306e\u4f8b\u3067\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>sudo vim \/etc\/apache2\/conf.d\/mod_security2_custom.conf\n\n\n&lt;IfModule mod_security2.c>\n\n    SecRuleEngine On\n    \n    SecRequestBodyLimit 13107200\n    SecRequestBodyNoFilesLimit 131072\n    \n    # \u30ec\u30b9\u30dd\u30f3\u30b9\u30dc\u30c7\u30a3\u691c\u67fb\u3092\u6709\u52b9\u5316\uff08\u30c7\u30d5\u30a9\u30eb\u30c8\u306fOff\uff09\n    SecResponseBodyAccess On\n    SecResponseBodyMimeType text\/plain text\/html text\/xml application\/json\n    SecResponseBodyLimit 524288\n    \n    # \u4f5c\u696d\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u660e\u793a\u7684\u6307\u5b9a\n    SecTmpDir \/var\/lib\/mod_security\/tmp\n    SecDataDir \/var\/lib\/mod_security\/data\n    SecUploadDir \/var\/lib\/mod_security\/upload\n    SecUploadKeepFiles Off\n    \n    # \u76e3\u67fb\u30ed\u30b0\u8a2d\u5b9a\u306e\u4e0a\u66f8\u304d\uff08fail2ban\u9023\u643a\u7528\uff09\n    SecAuditEngine RelevantOnly\n    SecAuditLogRelevantStatus \"^(?:5|4(?!04))\"\n    SecAuditLogParts ABIJDEFHZ\n    SecAuditLogType Serial\n    SecAuditLog \/var\/log\/apache2\/modsec_audit.log\n    \n    # \u30c7\u30d0\u30c3\u30b0\u30ed\u30b0\uff08\u672c\u756a\u3067\u306f0\u306b\u8a2d\u5b9a\uff09\n    SecDebugLog \/var\/log\/apache2\/modsec_debug.log\n    SecDebugLogLevel 0\n    \n    # \u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0\n    SecPcreMatchLimit 100000\n    SecPcreMatchLimitRecursion 100000\n    \n    # OWASP CRS\u8aad\u307f\u8fbc\u307f\n    IncludeOptional \/etc\/apache2\/mod_security2.d\/*.conf\n    IncludeOptional \/etc\/apache2\/mod_security2.d\/rules\/*.conf\n&lt;\/IfModule><\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">vim<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/apache2\/conf.d\/mod_security2_custom.conf<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">&lt;<\/span><span style=\"color: #BABED8\">IfModule mod_security2.c<\/span><span style=\"color: #89DDFF\">&gt;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecRuleEngine<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">On<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecRequestBodyLimit<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">13107200<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecRequestBodyNoFilesLimit<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">131072<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #464B5D; font-style: italic\"># \u30ec\u30b9\u30dd\u30f3\u30b9\u30dc\u30c7\u30a3\u691c\u67fb\u3092\u6709\u52b9\u5316\uff08\u30c7\u30d5\u30a9\u30eb\u30c8\u306fOff\uff09<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecResponseBodyAccess<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">On<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecResponseBodyMimeType<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">text\/plain<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">text\/html<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">text\/xml<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">application\/json<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecResponseBodyLimit<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">524288<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #464B5D; font-style: italic\"># \u4f5c\u696d\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u660e\u793a\u7684\u6307\u5b9a<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecTmpDir<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/var\/lib\/mod_security\/tmp<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecDataDir<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/var\/lib\/mod_security\/data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecUploadDir<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/var\/lib\/mod_security\/upload<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecUploadKeepFiles<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Off<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #464B5D; font-style: italic\"># \u76e3\u67fb\u30ed\u30b0\u8a2d\u5b9a\u306e\u4e0a\u66f8\u304d\uff08fail2ban\u9023\u643a\u7528\uff09<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecAuditEngine<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">RelevantOnly<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecAuditLogRelevantStatus<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">^(?:5|4(?!04))<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecAuditLogParts<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">ABIJDEFHZ<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecAuditLogType<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Serial<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecAuditLog<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/var\/log\/apache2\/modsec_audit.log<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #464B5D; font-style: italic\"># \u30c7\u30d0\u30c3\u30b0\u30ed\u30b0\uff08\u672c\u756a\u3067\u306f0\u306b\u8a2d\u5b9a\uff09<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecDebugLog<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/var\/log\/apache2\/modsec_debug.log<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecDebugLogLevel<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">0<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #464B5D; font-style: italic\"># \u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecPcreMatchLimit<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">100000<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">SecPcreMatchLimitRecursion<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">100000<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #464B5D; font-style: italic\"># OWASP CRS\u8aad\u307f\u8fbc\u307f<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">IncludeOptional<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/apache2\/mod_security2.d\/<\/span><span style=\"color: #BABED8\">*<\/span><span style=\"color: #C3E88D\">.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">IncludeOptional<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/apache2\/mod_security2.d\/rules\/<\/span><span style=\"color: #BABED8\">*<\/span><span style=\"color: #C3E88D\">.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">&lt;<\/span><span style=\"color: #BABED8\">\/IfModule<\/span><span style=\"color: #89DDFF\">&gt;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u30ab\u30b9\u30bf\u30e0\u3057\u305f\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u5185\u5bb9\u3068\u3057\u307e\u3057\u3066\u306f<br><strong>SecRuleEngine On <\/strong>\u2192 \u5b9f\u969b\u306b\u653b\u6483\u3092\u30d6\u30ed\u30c3\u30af\u3059\u308b\u72b6\u614b<br><strong>SeSecRequestBodyLimit 13107200 <\/strong>\u2192 \u691c\u67fb\u5bfe\u8c61\u3068\u3059\u308b\u30ea\u30af\u30a8\u30b9\u30c8\u30dc\u30c7\u30a3\u306e\u6700\u5927\u30b5\u30a4\u30ba\u309213MB\u306b\u8a2d\u5b9a<br>\u203b\u597d\u307f\u3067\u5909\u66f4\u3057\u3066\u304f\u3060\u3055\u3044<br><strong>SecResponseBodyAccess On<\/strong> \u2192 \u30ec\u30b9\u30dd\u30f3\u30b9\u30dc\u30c7\u30a3\u306e\u691c\u67fb\u3092\u6709\u52b9\u5316<br><strong>SecResponseBodyMimeType text\/plain text\/html text\/xml application\/json<\/strong> \u2192 \u691c\u67fb\u5bfe\u8c61\u3068\u3059\u308bMIME\u30bf\u30a4\u30d7<br>\u203b\u753b\u50cf\u3084\u52d5\u753b\u306a\u3069\u306e\u30d0\u30a4\u30ca\u30ea\u30d5\u30a1\u30a4\u30eb\u3092\u691c\u67fb\u3057\u3066\u3082\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u306e\u7121\u99c4\u306b\u306a\u308b\u305f\u3081<br><strong>SecAuditEngine RelevantOnly<\/strong> \u2192 \u653b\u6483\u304c\u691c\u77e5\u3055\u308c\u305f\u5834\u5408\u306b\u306e\u307f\u8a73\u7d30\u306a\u30ed\u30b0\u3092\u8a18\u9332<br><strong>SecAuditLogRelevantStatus &#8220;^(?:5|4(?!04))&#8221;<\/strong> \u2192 5xx\u7cfb\u306e\u30a8\u30e9\u30fc\u3068404\u4ee5\u5916\u306e4xx\u7cfb\u30a8\u30e9\u30fc\u3092\u8a18\u9332\u5bfe\u8c61<br><br>\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0\u3068\u3057\u3066\u3001<strong>SecPcreMatchLimit<\/strong>\u3068<strong>SecPcreMatchLimitRecursion<\/strong>\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306f\u6b63\u898f\u8868\u73fe\u30de\u30c3\u30c1\u30f3\u30b0\u306e\u4e0a\u9650\u5024\u3067\u3001\u8907\u96d1\u306a\u30d1\u30bf\u30fc\u30f3\u30de\u30c3\u30c1\u30f3\u30b0\u3092\u884c\u3046\u969b\u306bCPU\u3092\u4f7f\u3044\u3059\u304e\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u8a2d\u5b9a\u306e\u53cd\u6620\u3068\u78ba\u8a8d\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(1 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>sudo apachectl configtest\n# \u554f\u984c\u306a\u3051\u308c\u3070\nsudo systemctl restart apache2<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apachectl<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">configtest<\/span><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># \u554f\u984c\u306a\u3051\u308c\u3070<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">systemctl<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">restart<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache2<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"has-large-font-size\"><strong>OWASP CRS\u306e\u914d\u7f6e\u78ba\u8a8d<\/strong><\/p>\n\n\n\n<p>OpenSUSE\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u3067\u306f\u3001\u30eb\u30fc\u30eb\u304c <code>\/usr\/share\/owasp-modsecurity-crs\/rules\/<\/code> \u306b\u914d\u7f6e\u3055\u308c\u3001<code>\/etc\/apache2\/mod_security2.d\/rules\/<\/code> \u304b\u3089\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u3055\u308c\u3066\u3044\u307e\u3059<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>$ ls \/etc\/apache2\/mod_security2.d\/rules\/\niis-errors.data                                      REQUEST-934-APPLICATION-ATTACK-GENERIC.conf\njava-classes.data                                    REQUEST-941-APPLICATION-ATTACK-XSS.conf\njava-code-leakages.data                              REQUEST-942-APPLICATION-ATTACK-SQLI.conf\njava-errors.data                                     REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf\nlfi-os-files.data                                    REQUEST-944-APPLICATION-ATTACK-JAVA.conf\nphp-config-directives.data                           REQUEST-949-BLOCKING-EVALUATION.conf\nphp-errors.data                                      RESPONSE-950-DATA-LEAKAGES.conf\nphp-errors-pl2.data                                  RESPONSE-951-DATA-LEAKAGES-SQL.conf\nphp-function-names-933150.data                       RESPONSE-952-DATA-LEAKAGES-JAVA.conf\nphp-function-names-933151.data                       RESPONSE-953-DATA-LEAKAGES-PHP.conf\nphp-variables.data                                   RESPONSE-954-DATA-LEAKAGES-IIS.conf\nREQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example  RESPONSE-955-WEB-SHELLS.conf\nREQUEST-901-INITIALIZATION.conf                      RESPONSE-959-BLOCKING-EVALUATION.conf\nREQUEST-905-COMMON-EXCEPTIONS.conf                   RESPONSE-980-CORRELATION.conf\nREQUEST-911-METHOD-ENFORCEMENT.conf                  RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf.example\nREQUEST-913-SCANNER-DETECTION.conf                   restricted-files.data\nREQUEST-920-PROTOCOL-ENFORCEMENT.conf                restricted-upload.data\nREQUEST-921-PROTOCOL-ATTACK.conf                     scanners-user-agents.data\nREQUEST-922-MULTIPART-ATTACK.conf                    sql-errors.data\nREQUEST-930-APPLICATION-ATTACK-LFI.conf              ssrf.data\nREQUEST-931-APPLICATION-ATTACK-RFI.conf              unix-shell.data\nREQUEST-932-APPLICATION-ATTACK-RCE.conf              web-shells-php.data\nREQUEST-933-APPLICATION-ATTACK-PHP.conf              windows-powershell-commands.data\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">$<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">ls<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/apache2\/mod_security2.d\/rules\/<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">iis-errors.data<\/span><span style=\"color: #BABED8\">                                      <\/span><span style=\"color: #C3E88D\">REQUEST-934-APPLICATION-ATTACK-GENERIC.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">java-classes.data<\/span><span style=\"color: #BABED8\">                                    <\/span><span style=\"color: #C3E88D\">REQUEST-941-APPLICATION-ATTACK-XSS.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">java-code-leakages.data<\/span><span style=\"color: #BABED8\">                              <\/span><span style=\"color: #C3E88D\">REQUEST-942-APPLICATION-ATTACK-SQLI.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">java-errors.data<\/span><span style=\"color: #BABED8\">                                     <\/span><span style=\"color: #C3E88D\">REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">lfi-os-files.data<\/span><span style=\"color: #BABED8\">                                    <\/span><span style=\"color: #C3E88D\">REQUEST-944-APPLICATION-ATTACK-JAVA.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">php-config-directives.data<\/span><span style=\"color: #BABED8\">                           <\/span><span style=\"color: #C3E88D\">REQUEST-949-BLOCKING-EVALUATION.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">php-errors.data<\/span><span style=\"color: #BABED8\">                                      <\/span><span style=\"color: #C3E88D\">RESPONSE-950-DATA-LEAKAGES.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">php-errors-pl2.data<\/span><span style=\"color: #BABED8\">                                  <\/span><span style=\"color: #C3E88D\">RESPONSE-951-DATA-LEAKAGES-SQL.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">php-function-names-933150.data<\/span><span style=\"color: #BABED8\">                       <\/span><span style=\"color: #C3E88D\">RESPONSE-952-DATA-LEAKAGES-JAVA.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">php-function-names-933151.data<\/span><span style=\"color: #BABED8\">                       <\/span><span style=\"color: #C3E88D\">RESPONSE-953-DATA-LEAKAGES-PHP.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">php-variables.data<\/span><span style=\"color: #BABED8\">                                   <\/span><span style=\"color: #C3E88D\">RESPONSE-954-DATA-LEAKAGES-IIS.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example<\/span><span style=\"color: #BABED8\">  <\/span><span style=\"color: #C3E88D\">RESPONSE-955-WEB-SHELLS.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-901-INITIALIZATION.conf<\/span><span style=\"color: #BABED8\">                      <\/span><span style=\"color: #C3E88D\">RESPONSE-959-BLOCKING-EVALUATION.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-905-COMMON-EXCEPTIONS.conf<\/span><span style=\"color: #BABED8\">                   <\/span><span style=\"color: #C3E88D\">RESPONSE-980-CORRELATION.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-911-METHOD-ENFORCEMENT.conf<\/span><span style=\"color: #BABED8\">                  <\/span><span style=\"color: #C3E88D\">RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf.example<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-913-SCANNER-DETECTION.conf<\/span><span style=\"color: #BABED8\">                   <\/span><span style=\"color: #C3E88D\">restricted-files.data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-920-PROTOCOL-ENFORCEMENT.conf<\/span><span style=\"color: #BABED8\">                <\/span><span style=\"color: #C3E88D\">restricted-upload.data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-921-PROTOCOL-ATTACK.conf<\/span><span style=\"color: #BABED8\">                     <\/span><span style=\"color: #C3E88D\">scanners-user-agents.data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-922-MULTIPART-ATTACK.conf<\/span><span style=\"color: #BABED8\">                    <\/span><span style=\"color: #C3E88D\">sql-errors.data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-930-APPLICATION-ATTACK-LFI.conf<\/span><span style=\"color: #BABED8\">              <\/span><span style=\"color: #C3E88D\">ssrf.data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-931-APPLICATION-ATTACK-RFI.conf<\/span><span style=\"color: #BABED8\">              <\/span><span style=\"color: #C3E88D\">unix-shell.data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-932-APPLICATION-ATTACK-RCE.conf<\/span><span style=\"color: #BABED8\">              <\/span><span style=\"color: #C3E88D\">web-shells-php.data<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">REQUEST-933-APPLICATION-ATTACK-PHP.conf<\/span><span style=\"color: #BABED8\">              <\/span><span style=\"color: #C3E88D\">windows-powershell-commands.data<\/span><\/span>\n<span class=\"line\"><\/span><\/code><\/pre><\/div>\n\n\n\n<p>CRS\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u3059\u3079\u3066\u30b3\u30e1\u30f3\u30c8\u30a2\u30a6\u30c8\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30b3\u30e1\u30f3\u30c8\u30a2\u30a6\u30c8\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u3001OWASP CRS\u306f<strong>\u5185\u90e8\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u5024<\/strong>\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u5024\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p><strong>Paranoia Level<\/strong>: 1\uff08\u30c7\u30d5\u30a9\u30eb\u30c8\uff09 <br><strong>Inbound\u95be\u5024<\/strong>: 5\uff08Critical\u653b\u64831\u56de\u3067\u30d6\u30ed\u30c3\u30af\uff09 <br><strong>Outbound\u95be\u5024<\/strong>: 4 <br><strong>\u8a31\u53efHTTP\u30e1\u30bd\u30c3\u30c9<\/strong>: GET HEAD POST OPTIONS <br><strong>Early Blocking<\/strong>: \u7121\u52b9<\/p>\n\n\n\n<p>\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0\u304c\u5fc5\u8981\u306a\u5834\u5408\u306f\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u7b87\u6240\u306e\u30b3\u30e1\u30f3\u30c8\u3092\u5916\u3057\u3066\u6709\u52b9\u5316\u3057\u307e\u3059\u3002Paranoia Level\u306f\u691c\u77e5\u306e\u53b3\u683c\u3055\u3092\u5236\u5fa1\u3059\u308b\u30d1\u30e9\u30e1\u30fc\u30bf\u3067\u3001<strong>1\u304c\u6700\u3082\u7de9\u304f\u30014\u304c\u6700\u3082\u53b3\u683c<\/strong>\u3067\u3059\u3002\u6700\u521d\u306f1\u304b\u3089\u59cb\u3081\u3066\u3001\u8aa4\u691c\u77e5\u304c\u5c11\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u5f90\u3005\u306b\u4e0a\u3052\u3066\u3044\u304f\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>sudo vim \/etc\/apache2\/mod_security2.d\/modsecurity-crf-setup.conf\n#Paranoia Level\u8a2d\u5b9a \n# \u30b3\u30e1\u30f3\u30c8\u3092\u5916\u3057\u3066\u6709\u52b9\u5316\n\nSecAction \\\n    \"id:900000,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    tag:'OWASP_CRS',\\\n    ver:'OWASP_CRS\/4.10.0',\\\n    setvar:tx.blocking_paranoia_level=1\"\n\n# \u691c\u77e5\u5c02\u7528Paranoia Level \n\nSecAction \\\n    \"id:900001,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    tag:'OWASP_CRS',\\\n    ver:'OWASP_CRS\/4.10.0',\\\n    setvar:tx.detection_paranoia_level=1\"\n\n# Anomaly Score\u95be\u5024\n\nSecAction \\\n    \"id:900110,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    tag:'OWASP_CRS',\\\n    ver:'OWASP_CRS\/4.10.0',\\\n    setvar:tx.inbound_anomaly_score_threshold=5,\\\n    setvar:tx.outbound_anomaly_score_threshold=4\"\n\n# \u8a31\u53efHTTP\u30e1\u30bd\u30c3\u30c9\n\nSecAction \\\n    \"id:900200,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    tag:'OWASP_CRS',\\\n    ver:'OWASP_CRS\/4.10.0',\\\n    setvar:'tx.allowed_methods=GET HEAD POST OPTIONS'\"\n\n# \u8a31\u53efContent-Type\n\nSecAction \\\n    \"id:900220,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    tag:'OWASP_CRS',\\\n    ver:'OWASP_CRS\/4.10.0',\\\n    setvar:'tx.allowed_request_content_type=|application\/x-www-form-urlencoded| |multipart\/form-data| |text\/xml| |application\/xml| |application\/soap+xml| |application\/json|'\"\n\n# Early Blocking\u6709\u52b9\u5316\n\nSecAction \\\n    \"id:900120,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    tag:'OWASP_CRS',\\\n    ver:'OWASP_CRS\/4.10.0',\\\n    setvar:tx.early_blocking=1\"<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">vim<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/apache2\/mod_security2.d\/modsecurity-crf-setup.conf<\/span><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\">#Paranoia Level\u8a2d\u5b9a <\/span><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># \u30b3\u30e1\u30f3\u30c8\u3092\u5916\u3057\u3066\u6709\u52b9\u5316<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecAction<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:900000,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    tag:&#39;OWASP_CRS&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ver:&#39;OWASP_CRS\/4.10.0&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    setvar:tx.blocking_paranoia_level=1<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># \u691c\u77e5\u5c02\u7528Paranoia Level <\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecAction<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:900001,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    tag:&#39;OWASP_CRS&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ver:&#39;OWASP_CRS\/4.10.0&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    setvar:tx.detection_paranoia_level=1<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># Anomaly Score\u95be\u5024<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecAction<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:900110,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    tag:&#39;OWASP_CRS&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ver:&#39;OWASP_CRS\/4.10.0&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    setvar:tx.inbound_anomaly_score_threshold=5,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    setvar:tx.outbound_anomaly_score_threshold=4<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># \u8a31\u53efHTTP\u30e1\u30bd\u30c3\u30c9<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecAction<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:900200,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    tag:&#39;OWASP_CRS&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ver:&#39;OWASP_CRS\/4.10.0&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    setvar:&#39;tx.allowed_methods=GET HEAD POST OPTIONS&#39;<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># \u8a31\u53efContent-Type<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecAction<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:900220,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    tag:&#39;OWASP_CRS&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ver:&#39;OWASP_CRS\/4.10.0&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    setvar:&#39;tx.allowed_request_content_type=|application\/x-www-form-urlencoded| |multipart\/form-data| |text\/xml| |application\/xml| |application\/soap+xml| |application\/json|&#39;<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># Early Blocking\u6709\u52b9\u5316<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecAction<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:900120,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    tag:&#39;OWASP_CRS&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ver:&#39;OWASP_CRS\/4.10.0&#39;,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    setvar:tx.early_blocking=1<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u307e\u305f\u3001mod_security\u306e\u30ed\u30b0\u306f\u6025\u901f\u306b\u5897\u5927\u3057\u307e\u3059\u3002\u9069\u5207\u306a\u30ed\u30b0\u30ed\u30fc\u30c6\u30fc\u30b7\u30e7\u30f3\u3092\u8a2d\u5b9a\u3059\u308b\u3088\u3046\u306b\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u4ee5\u4e0b\u306e\u8a2d\u5b9a\u3067\u306f\u3001\u76e3\u67fb\u30ed\u30b0\u306f14\u65e5\u9593\u4fdd\u5b58\u3057\u3001\u30c7\u30d0\u30c3\u30b0\u30ed\u30b0\u306f7\u65e5\u9593\u4fdd\u5b58\u3059\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>sudo vim \/etc\/logrotate.d\/apache2-modsecurity\n\n\/var\/log\/apache2\/modsec_audit.log {\n    daily\n    rotate 14\n    compress\n    delaycompress\n    notifempty\n    create 640 root root\n    sharedscripts\n    postrotate\n        \/usr\/sbin\/apache2ctl graceful > \/dev\/null 2>&amp;1 || true\n    endscript\n}\n\n\/var\/log\/apache2\/modsec_debug.log {\n    daily\n    rotate 7\n    compress\n    delaycompress\n    notifempty\n    create 640 root root\n    sharedscripts\n    postrotate\n        \/usr\/sbin\/apache2ctl graceful > \/dev\/null 2>&amp;1 || true\n    endscript\n}<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">vim<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/logrotate.d\/apache2-modsecurity<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">\/var\/log\/apache2\/modsec_audit.log<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">{<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">daily<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">rotate<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">14<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">compress<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">delaycompress<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">notifempty<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">create<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">640<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">root<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">root<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">sharedscripts<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">postrotate<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">        <\/span><span style=\"color: #FFCB6B\">\/usr\/sbin\/apache2ctl<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">graceful<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&gt;<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/dev\/null<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">2&gt;&amp;1<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">||<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #82AAFF\">true<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">endscript<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">}<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">\/var\/log\/apache2\/modsec_debug.log<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">{<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">daily<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">rotate<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">7<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">compress<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">delaycompress<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">notifempty<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">create<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">640<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">root<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">root<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">sharedscripts<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">postrotate<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">        <\/span><span style=\"color: #FFCB6B\">\/usr\/sbin\/apache2ctl<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">graceful<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&gt;<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/dev\/null<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">2&gt;&amp;1<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">||<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #82AAFF\">true<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #FFCB6B\">endscript<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">}<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"has-large-font-size\"><strong>fail2ban\u3068\u306e\u9023\u643a<\/strong><\/p>\n\n\n\n<p>fail2ban\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u304d\u307e\u3059\u3002\u79c1\u306e\u5834\u5408\u306fCloudFlare\u306a\u3069\u306eCDN\u30b5\u30fc\u30d3\u30b9\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092ignoreip\u306b\u8ffd\u52a0\u3057\u3066\u3044\u307e\u3059\u3002CloudFlare\u7d4c\u7531\u3067\u30b5\u30a4\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3044\u308b\u5834\u5408\u3001\u5b9f\u969b\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8IP\u3067\u306f\u306a\u304fCloudFlare\u306eIP\u30a2\u30c9\u30ec\u30b9\u304c\u30ed\u30b0\u306b\u8a18\u9332\u3055\u308c\u307e\u3059\u3002\u3082\u3057CloudFlare\u306eIP\u3092BAN\u3057\u3066\u3057\u307e\u3046\u3068\u3001\u30b5\u30fc\u30d3\u30b9\u5168\u4f53\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3046\u304b\u3089\u3067\u3059\u3002<br>\u203bCloudflare\u3067\u5b9fIP\u3092\u53d6\u5f97\u3059\u308b\u65b9\u6cd5\u306b\u3064\u3044\u3066\u306f\u4ee5\u4e0b\u306e\u8a18\u4e8b\u3092\u53c2\u8003\u306b\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-blog-bokumin-org wp-block-embed-blog-bokumin-org\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"wp-embed-custom-wrapper my-6 bg-white rounded-lg shadow-sm border border-gray-200 overflow-hidden hover:shadow-md transition-shadow duration-300\"><blockquote class=\"wp-embedded-content\" data-secret=\"FeNbg8mN5D\"><a href=\"https:\/\/bokumin.org\/blog\/2025\/11\/10\/cloudflare%e3%81%a7apache%e3%83%ad%e3%82%b0%e3%81%ab%e5%ae%9fip%e3%82%92%e8%a8%98%e9%8c%b2%e3%81%99%e3%82%8b\/\">Cloudflare\u3067Apache\u30ed\u30b0\u306b\u5b9fIP\u3092\u8a18\u9332\u3059\u308b<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Cloudflare\u3067Apache\u30ed\u30b0\u306b\u5b9fIP\u3092\u8a18\u9332\u3059\u308b&#8221; &#8212; Blog | bokumin.org\" src=\"https:\/\/bokumin.org\/blog\/2025\/11\/10\/cloudflare%e3%81%a7apache%e3%83%ad%e3%82%b0%e3%81%ab%e5%ae%9fip%e3%82%92%e8%a8%98%e9%8c%b2%e3%81%99%e3%82%8b\/embed\/#?secret=pkAkaPOO7b#?secret=FeNbg8mN5D\" data-secret=\"FeNbg8mN5D\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/div>\n<\/div><\/figure>\n\n\n\n<p>\u4eca\u56de\u306e\u8a2d\u5b9a\u3067\u306f\u300110\u5206\u9593\u306b2\u56de\u306e\u653b\u6483\u3092\u691c\u77e5\u3057\u305f\u5834\u5408\u3001\u305d\u306eIP\u30a2\u30c9\u30ec\u30b9\u30927\u65e5\u9593\u30d6\u30ed\u30c3\u30af\u3057\u307e\u3059\u3002maxretry\u30922\u306b\u8a2d\u5b9a\u3057\u3066\u3044\u308b\u306e\u306f\u3001ModSecurity\u304c\u653b\u6483\u3092\u691c\u77e5\u3057\u305f\u6642\u70b9\u3067\u3001\u305d\u308c\u306f\u660e\u3089\u304b\u306b\u60aa\u610f\u306e\u3042\u308b\u30a2\u30af\u30bb\u30b9\u3060\u3068\u5224\u65ad\u3067\u304d\u308b\u305f\u3081\u3067\u3059\u3002bantime\u30927\u65e5\u9593\u3068\u9577\u3081\u306b\u8a2d\u5b9a\u3057\u3066\u3044\u308b\u306e\u306f\u3001\u81ea\u52d5\u5316\u3055\u308c\u305f\u653b\u6483\u30c4\u30fc\u30eb\u304c\u7e70\u308a\u8fd4\u3057\u30a2\u30af\u30bb\u30b9\u3092\u8a66\u307f\u308b\u3053\u3068\u3092\u9632\u3050\u305f\u3081\u3067\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>sudo vim \/etc\/fail2ban\/jail.d\/apache-modsecurity.conf\n\n&#91;apache-modsecurity&#93;\nenabled = true\nignoreip = 127.0.0.1\/8\n           ::1\n           162.158.0.0\/15\n           173.245.48.0\/20\n           103.21.244.0\/22\n           103.22.200.0\/22\n           103.31.4.0\/22\n           141.101.64.0\/18\n           108.162.192.0\/18\n           190.93.240.0\/20\n           188.114.96.0\/20\n           197.234.240.0\/22\n           198.41.128.0\/17\nport = http,https\nfilter = apache-modsecurity\nlogpath = \/var\/log\/apache2\/error.log\n\nmaxretry = 2\nbantime = 7d\nfindtime = 10m\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">vim<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/fail2ban\/jail.d\/apache-modsecurity.conf<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">&#91;<\/span><span style=\"color: #BABED8\">apache-modsecurity<\/span><span style=\"color: #89DDFF\">&#93;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">enabled<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">true<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">ignoreip<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">127.0<\/span><span style=\"color: #C3E88D\">.0.1\/8<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #82AAFF\">:<\/span><span style=\"color: #BABED8\">:1<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">162.158.0.0\/15<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">173.245.48.0\/20<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">103.21.244.0\/22<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">103.22.200.0\/22<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">103.31.4.0\/22<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">141.101.64.0\/18<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">108.162.192.0\/18<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">190.93.240.0\/20<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">188.114.96.0\/20<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">197.234.240.0\/22<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">           <\/span><span style=\"color: #FFCB6B\">198.41.128.0\/17<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">port<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">http,https<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">filter<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache-modsecurity<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">logpath<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/var\/log\/apache2\/error.log<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">maxretry<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">2<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">bantime<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">7<\/span><span style=\"color: #C3E88D\">d<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">findtime<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">=<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">10<\/span><span style=\"color: #C3E88D\">m<\/span><\/span>\n<span class=\"line\"><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u8a2d\u5b9a\u3092\u4fdd\u5b58\u3057\u307e\u3057\u305f\u3089\u3001fail2ban\u3092\u518d\u8d77\u52d5\u3057\u307e\u3059<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(1 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>sudo fail2ban-client -t\n\n# \u554f\u984c\u306a\u3051\u308c\u3070\nsudo systemctl restart fail2ban<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">fail2ban-client<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">-t<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># \u554f\u984c\u306a\u3051\u308c\u3070<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">systemctl<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">restart<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">fail2ban<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"has-large-font-size\"><strong>\u30ed\u30b0\u78ba\u8a8d<\/strong><\/p>\n\n\n\n<p>fail2ban\u304c\u6b63\u5e38\u306b\u52d5\u4f5c\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u307e\u3059\u3002fail2ban-client\u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u7528\u3057\u3066\u3001apache-modsecurity jail\u306e\u72b6\u614b\u3092\u8868\u793a\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>\n# jail\u72b6\u614b\u306e\u78ba\u8a8d\nsudo fail2ban-client status apache-modsecurity\nStatus for the jail: apache-modsecurity\n|- Filter\n|  |- Currently failed: 0\n|  |- Total failed:     50\n|  `- File list:        \/var\/log\/apache2\/modsec_audit.log \n`- Actions\n   |- Currently banned: 30\n   |- Total banned:     31\n   `- Banned IP list:   106.54.124.78 136.144.35.160 138.197.167.75 138.68.86.32 142.93.107.190 154.8.198.199 159.223.193.66 192.34.63.233 195.178.110.201 195.178.110.242 204.76.203.8 209.97.137.68 35.216.183.140 45.133.74.43 45.148.10.154 45.148.10.158 45.148.10.63 47.251.13.59 49.248.192.204 74.208.7.160 78.153.140.128 78.153.140.178 78.153.140.179 78.153.140.195 78.153.140.203 95.214.52.169 96.41.38.202 194.180.49.174 74.7.242.23 134.199.168.23\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># jail\u72b6\u614b\u306e\u78ba\u8a8d<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">fail2ban-client<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">status<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache-modsecurity<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">Status<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">for<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">the<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">jail:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">apache-modsecurity<\/span><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Filter<\/span><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #BABED8\">  <\/span><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Currently<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">failed:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">0<\/span><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #BABED8\">  <\/span><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Total<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">failed:<\/span><span style=\"color: #BABED8\">     <\/span><span style=\"color: #F78C6C\">50<\/span><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #BABED8\">  <\/span><span style=\"color: #89DDFF\">`<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #C3E88D\"> File list:        \/var\/log\/apache2\/modsec_audit.log <\/span><\/span>\n<span class=\"line\"><span style=\"color: #89DDFF\">`<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Actions<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">   <\/span><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Currently<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">banned:<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">30<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">   <\/span><span style=\"color: #89DDFF\">|<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">Total<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">banned:<\/span><span style=\"color: #BABED8\">     <\/span><span style=\"color: #F78C6C\">31<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">   <\/span><span style=\"color: #89DDFF\">`<\/span><span style=\"color: #FFCB6B\">-<\/span><span style=\"color: #C3E88D\"> Banned IP list:   <\/span><span style=\"color: #F78C6C\">106.54<\/span><span style=\"color: #C3E88D\">.124.78 <\/span><span style=\"color: #F78C6C\">136.144<\/span><span style=\"color: #C3E88D\">.35.160 <\/span><span style=\"color: #F78C6C\">138.197<\/span><span style=\"color: #C3E88D\">.167.75 <\/span><span style=\"color: #F78C6C\">138.68<\/span><span style=\"color: #C3E88D\">.86.32 <\/span><span style=\"color: #F78C6C\">142.93<\/span><span style=\"color: #C3E88D\">.107.190 <\/span><span style=\"color: #F78C6C\">154.8<\/span><span style=\"color: #C3E88D\">.198.199 <\/span><span style=\"color: #F78C6C\">159.223<\/span><span style=\"color: #C3E88D\">.193.66 <\/span><span style=\"color: #F78C6C\">192.34<\/span><span style=\"color: #C3E88D\">.63.233 <\/span><span style=\"color: #F78C6C\">195.178<\/span><span style=\"color: #C3E88D\">.110.201 <\/span><span style=\"color: #F78C6C\">195.178<\/span><span style=\"color: #C3E88D\">.110.242 <\/span><span style=\"color: #F78C6C\">204.76<\/span><span style=\"color: #C3E88D\">.203.8 <\/span><span style=\"color: #F78C6C\">209.97<\/span><span style=\"color: #C3E88D\">.137.68 <\/span><span style=\"color: #F78C6C\">35.216<\/span><span style=\"color: #C3E88D\">.183.140 <\/span><span style=\"color: #F78C6C\">45.133<\/span><span style=\"color: #C3E88D\">.74.43 <\/span><span style=\"color: #F78C6C\">45.148<\/span><span style=\"color: #C3E88D\">.10.154 <\/span><span style=\"color: #F78C6C\">45.148<\/span><span style=\"color: #C3E88D\">.10.158 <\/span><span style=\"color: #F78C6C\">45.148<\/span><span style=\"color: #C3E88D\">.10.63 <\/span><span style=\"color: #F78C6C\">47.251<\/span><span style=\"color: #C3E88D\">.13.59 <\/span><span style=\"color: #F78C6C\">49.248<\/span><span style=\"color: #C3E88D\">.192.204 <\/span><span style=\"color: #F78C6C\">74.208<\/span><span style=\"color: #C3E88D\">.7.160 <\/span><span style=\"color: #F78C6C\">78.153<\/span><span style=\"color: #C3E88D\">.140.128 <\/span><span style=\"color: #F78C6C\">78.153<\/span><span style=\"color: #C3E88D\">.140.178 <\/span><span style=\"color: #F78C6C\">78.153<\/span><span style=\"color: #C3E88D\">.140.179 <\/span><span style=\"color: #F78C6C\">78.153<\/span><span style=\"color: #C3E88D\">.140.195 <\/span><span style=\"color: #F78C6C\">78.153<\/span><span style=\"color: #C3E88D\">.140.203 <\/span><span style=\"color: #F78C6C\">95.214<\/span><span style=\"color: #C3E88D\">.52.169 <\/span><span style=\"color: #F78C6C\">96.41<\/span><span style=\"color: #C3E88D\">.38.202 <\/span><span style=\"color: #F78C6C\">194.180<\/span><span style=\"color: #C3E88D\">.49.174 <\/span><span style=\"color: #F78C6C\">74.7<\/span><span style=\"color: #C3E88D\">.242.23 <\/span><span style=\"color: #F78C6C\">134.199<\/span><span style=\"color: #C3E88D\">.168.23<\/span><\/span>\n<span class=\"line\"><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u3053\u306e\u51fa\u529b\u4f8b\u3067\u306f\u3001\u3059\u3067\u306b28\u500b\u306eIP\u30a2\u30c9\u30ec\u30b9\u304c\u30d6\u30ed\u30c3\u30af\u3055\u308c\u3066\u3044\u307e\u3059\u3002Currently banned\u304c\u73fe\u5728\u30d6\u30ed\u30c3\u30af\u4e2d\u306eIP\u30a2\u30c9\u30ec\u30b9\u6570\u3067\u3001Total banned\u304c\u3053\u308c\u307e\u3067\u306b\u30d6\u30ed\u30c3\u30af\u3057\u305f\u7d2f\u8a08\u6570\u3067\u3059\u3002Banned IP list\u306b\u306f\u3001\u5b9f\u969b\u306b\u30d6\u30ed\u30c3\u30af\u3055\u308c\u3066\u3044\u308bIP\u30a2\u30c9\u30ec\u30b9\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u5b9f\u969b\u306e\u904b\u7528\u3067\u306f\u3001\u5b9a\u671f\u7684\u306b\u3053\u306e\u30ea\u30b9\u30c8\u3092\u78ba\u8a8d\u3057\u3066\u3001\u3069\u306e\u3088\u3046\u306aIP\u30a2\u30c9\u30ec\u30b9\u304b\u3089\u653b\u6483\u3092\u53d7\u3051\u3066\u3044\u308b\u304b\u3092\u628a\u63e1\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3059\u3002\u540c\u3058\u56fd\u3084\u540c\u3058ASN\u304b\u3089\u306e\u653b\u6483\u304c\u591a\u3044\u5834\u5408\u306f\u3001\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u30ec\u30d9\u30eb\u3067\u5e83\u7bc4\u56f2\u306b\u30d6\u30ed\u30c3\u30af\u3059\u308b\u3053\u3068\u3082\u691c\u8a0e\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"has-large-font-size\"><strong>\u88dc\u8db3\u3000\u7279\u5b9a\u30eb\u30fc\u30eb\u306e\u8aa4\u691c\u77e5<\/strong><\/p>\n\n\n\n<p>\u904b\u7528\u3092\u958b\u59cb\u3059\u308b\u3068\u3001\u6b63\u898f\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u8aa4\u3063\u3066\u653b\u6483\u3068\u5224\u5b9a\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u7279\u5b9a\u306e\u30eb\u30fc\u30eb\u304c\u8aa4\u691c\u77e5\u3092\u8d77\u3053\u3059\u5834\u5408\u306f\u3001<strong>\u9664\u5916\u30eb\u30fc\u30eb\u3092\u4f5c\u6210<\/strong>\u3057\u3066\u5bfe\u5fdc\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u9664\u5916\u30eb\u30fc\u30eb\u306f\u3001RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf\u30d5\u30a1\u30a4\u30eb\u3067\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u3053\u306e\u30d5\u30a1\u30a4\u30eb\u306f\u3001\u3059\u3079\u3066\u306eCRS\u30eb\u30fc\u30eb\u304c\u8a55\u4fa1\u3055\u308c\u305f\u5f8c\u306b\u8aad\u307f\u8fbc\u307e\u308c\u308b\u305f\u3081\u3001\u7279\u5b9a\u306e\u30eb\u30fc\u30eb\u3092\u7121\u52b9\u5316\u3057\u305f\u308a\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u30eb\u30fc\u30eb\u3092\u30b9\u30ad\u30c3\u30d7\u3057\u305f\u308a\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<br>\u305f\u3068\u3048\u3070\u3001\u30eb\u30fc\u30ebID 942100\u304c\u8aa4\u691c\u77e5\u3092\u8d77\u3053\u3057\u3066\u3044\u308b\u5834\u5408\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u9664\u5916\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<br>\u203b\u6700\u521d\u306e\u4f8b\u306f\u3001\u30eb\u30fc\u30eb942100\u3092\u5b8c\u5168\u306b\u7121\u52b9\u5316\u3057\u307e\u3059\u30022\u756a\u76ee\u306e\u4f8b\u306f\u3001\/api\/\u3067\u59cb\u307e\u308bURL\u30d1\u30b9\u306b\u5bfe\u3057\u3066\u306e\u307f\u30eb\u30fc\u30eb942100\u3092\u7121\u52b9\u5316\u3057\u307e\u3059\u30023\u756a\u76ee\u306e\u4f8b\u306f\u3001search\u3068\u3044\u3046\u540d\u524d\u306e\u30d1\u30e9\u30e1\u30fc\u30bf\u306b\u5bfe\u3057\u3066\u306e\u307f\u30eb\u30fc\u30eb942100\u3092\u7121\u52b9\u5316\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>sudo vim \/etc\/apache2\/mod_security2.d\/rules\/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf\n\n# 1\nSecRuleRemoveById 942100\u3000\n\n# 2\nSecRule REQUEST_URI \"@beginsWith \/api\/\" \\\n    \"id:2000,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    ctl:ruleRemoveById=942100\"\n    \n# 3\nSecRule ARGS:search \"@rx .*\" \\\n    \"id:2001,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    ctl:ruleRemoveById=942100\"<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #FFCB6B\">sudo<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">vim<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">\/etc\/apache2\/mod_security2.d\/rules\/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># 1<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecRuleRemoveById<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #F78C6C\">942100<\/span><span style=\"color: #C3E88D\">\u3000<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># 2<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecRule<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">REQUEST_URI<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">@beginsWith \/api\/<\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:2000,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942100<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># 3<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecRule<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">ARGS:search<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">@rx .*<\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:2001,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942100<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>WordPress\u306a\u3069\u3067\u3001\u6b63\u898f\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u8aa4\u691c\u77e5\u3055\u308c\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3082\u3057\u8aa4\u691c\u77e5\u3092\u3055\u308c\u3066\u3057\u307e\u3046\u5834\u5408\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u9664\u5916\u30eb\u30fc\u30eb\u3092\u4f5c\u6210\u3057\u3066\u304f\u3060\u3055\u3044<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"\" style=\"font-size:.875rem;--cbp-line-number-color:#babed8;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span role=\"button\" tabindex=\"0\" style=\"color:#babed8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># WordPress\u7ba1\u7406\u753b\u9762\u306e\u9664\u5916\nSecRule REQUEST_URI \"@beginsWith \/wp-admin\/\" \\\n    \"id:1000,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    ctl:ruleRemoveById=920440,\\\n    ctl:ruleRemoveById=942100,\\\n    ctl:ruleRemoveById=942190,\\\n    ctl:ruleRemoveById=942200,\\\n    ctl:ruleRemoveById=942260,\\\n    ctl:ruleRemoveById=942340,\\\n    ctl:ruleRemoveById=942370\"\n\n# WordPress AJAX\u51e6\u7406\u306e\u9664\u5916\nSecRule REQUEST_URI \"@beginsWith \/wp-admin\/admin-ajax.php\" \\\n    \"id:1001,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    ctl:ruleRemoveById=942100,\\\n    ctl:ruleRemoveById=942200\"\n\n# WordPress REST API\u306e\u9664\u5916\nSecRule REQUEST_URI \"@beginsWith \/wp-json\/\" \\\n    \"id:1002,\\\n    phase:1,\\\n    pass,\\\n    t:none,\\\n    nolog,\\\n    ctl:ruleRemoveById=920300,\\\n    ctl:ruleRemoveById=942100\"<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki material-theme-ocean\" style=\"background-color: #0F111A\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># WordPress\u7ba1\u7406\u753b\u9762\u306e\u9664\u5916<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecRule<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">REQUEST_URI<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">@beginsWith \/wp-admin\/<\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:1000,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=920440,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942100,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942190,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942200,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942260,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942340,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942370<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># WordPress AJAX\u51e6\u7406\u306e\u9664\u5916<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecRule<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">REQUEST_URI<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">@beginsWith \/wp-admin\/admin-ajax.php<\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:1001,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942100,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942200<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #464B5D; font-style: italic\"># WordPress REST API\u306e\u9664\u5916<\/span><\/span>\n<span class=\"line\"><span style=\"color: #FFCB6B\">SecRule<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #C3E88D\">REQUEST_URI<\/span><span style=\"color: #BABED8\"> <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">@beginsWith \/wp-json\/<\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #BABED8\"> \\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #BABED8\">    <\/span><span style=\"color: #89DDFF\">&quot;<\/span><span style=\"color: #C3E88D\">id:1002,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    phase:1,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    pass,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    t:none,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    nolog,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=920300,<\/span><span style=\"color: #BABED8\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #C3E88D\">    ctl:ruleRemoveById=942100<\/span><span style=\"color: #89DDFF\">&quot;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"has-large-font-size\"><strong>\u307e\u3068\u3081<\/strong><\/p>\n\n\n\n<p>OWASP CRS\u3092\u6d3b\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u72ec\u81ea\u306b\u30eb\u30fc\u30eb\u3092\u4f5c\u6210\u3059\u308b\u52b4\u529b\u3092\u304b\u3051\u305a\u306b\u3001\u4e16\u754c\u6a19\u6e96\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u5c0e\u5165\u3067\u304d\u307e\u3059\u3002\u7d99\u7d9a\u7684\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3055\u308c\u308b\u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u306b\u3088\u308a\u3001\u65b0\u3057\u3044\u8105\u5a01\u306b\u3082\u5bfe\u5fdc\u3067\u304d\u307e\u3059\u3002<br>\u8ab0\u304b\u306e\u53c2\u8003\u306b\u306a\u308c\u3070\u5e78\u3044\u3067\u3059\u3002<br><br>\u904b\u7528\u6642\u306f\u3001\u6700\u521d\u306f\u8a2d\u5b9a\u3092\u5909\u66f4\u305b\u305a\u30c7\u30d5\u30a9\u30eb\u30c8\u5024\u3067\u904b\u7528\u3092\u958b\u59cb\u3057\u3001\u30ed\u30b0\u3092\u89b3\u5bdf\u3057\u306a\u304c\u3089\u5fc5\u8981\u306b\u5fdc\u3058\u3066Paranoia Level\u3092\u8abf\u6574\u3057\u3066\u3044\u304f\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002\u8aa4\u691c\u77e5\u304c\u767a\u751f\u3057\u305f\u5834\u5408\u306f\u3001\u9664\u5916\u30eb\u30fc\u30eb\u3092\u8a2d\u5b9a\u3057\u3066\u5bfe\u5fdc\u3057\u3066\u304f\u3060\u3055\u3044\u3002<br>\u4ee5\u4e0a\u3001mod_security2+OWASP+fail2ban\u306e\u3084\u308a\u65b9\u306b\u3064\u3044\u3066\u3067\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u304a\u308f\u308a<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u53c2\u8003:<br>Modsecurity<br><a href=\"https:\/\/github.com\/owasp-modsecurity\/ModSecurity\/wiki\/Reference-Manual-(v2.x)\">https:\/\/github.com\/owasp-modsecurity\/ModSecurity\/wiki\/Reference-Manual-(v2.x)<\/a><br>OWASP CRS<br><a href=\"https:\/\/coreruleset.org\/\">https:\/\/coreruleset.org\/<\/a><br><a href=\"https:\/\/github.com\/coreruleset\/coreruleset\">https:\/\/github.com\/coreruleset\/coreruleset<\/a><br><a href=\"https:\/\/coreruleset.org\/docs\/1-getting-started\/1-1-crs-installation\/\">https:\/\/coreruleset.org\/docs\/1-getting-started\/1-1-crs-installation\/<\/a><br>fail2ban<br><a href=\"https:\/\/github.com\/fail2ban\/fail2ban\">https:\/\/github.com\/fail2ban\/fail2ban<\/a><br><a href=\"https:\/\/fail2ban.readthedocs.io\/en\/latest\/\">https:\/\/fail2ban.readthedocs.io\/en\/latest\/<\/a><br>OpenSUSE<br><a href=\"https:\/\/software.opensuse.org\/package\/apache2-mod_security2\">https:\/\/software.opensuse.org\/package\/apache2-mod_security2<\/a><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Setting up mod_security + OWASP CRS + fail2ban on OpenSUSE \u306f\u3058\u3081\u306b \u524d\u56de\u306e\u8a18\u4e8b\u3067\u306fPF\u306b\u3088\u308b\u30b7\u30f3\u30d7\u30eb\u306a\u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u653b\u6483\u9632\u6b62\u306e\u65b9\u6cd5\u306b\u3064\u3044\u3066\u8aac\u660e\u3057\u307e\u3057\u305f\u304c\u3001\u4eca\u56de [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"cybocfi_hide_featured_image":"","footnotes":""},"categories":[163,153,19,140,53],"tags":[49,121,183,182],"class_list":["post-2201","post","type-post","status-publish","format-standard","hentry","category-cloudflare","category-linux","category-opensuse","category-website","category-wordpress","tag-apache","tag-fail2ban","tag-modsecurity","tag-owasp-crs"],"_links":{"self":[{"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/posts\/2201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/comments?post=2201"}],"version-history":[{"count":17,"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/posts\/2201\/revisions"}],"predecessor-version":[{"id":2897,"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/posts\/2201\/revisions\/2897"}],"wp:attachment":[{"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/media?parent=2201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/categories?post=2201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bokumin.org\/blog\/wp-json\/wp\/v2\/tags?post=2201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}