Mailing List Archive

Cherokee as a Web application firewall?
Hello All,

I been looking into some opensource options for a web application firewall
and I wanted to see if any of you had any experiences in this area.

Anyone out there with Cherokee as a web application firewall?

I was also looking at an early stage project to looks very promising,
https://www.ironbee.com/ and I thought it was worth mentioning here as they
are seeking for early adopters and Web Server developers to make Ironbee
work in their environments.

I think it would be amazing to have Cherokee as proxy + cache + application
firewall.

Saludos,

Sergio
Re: Cherokee as a Web application firewall? [ In reply to ]
Hi Sergio,

I'm also looking to make Cherokee work as an application firewall. AFAIK
you can play with rules and regex expressions to do some job. If you are
interested, you can contact me, so we can share experience in this field
and then share here with everybody.

Regards,

On Sun, 23 Oct 2011 23:59:20 +0200, Sergio Aguilar Guerrero
<chekolyn@gmail.com> wrote:

> Hello All,
>
> I been looking into some opensource options for a web application
> firewall
> and I wanted to see if any of you had any experiences in this area.
>
> Anyone out there with Cherokee as a web application firewall?
>
> I was also looking at an early stage project to looks very promising,
> https://www.ironbee.com/ and I thought it was worth mentioning here as
> they
> are seeking for early adopters and Web Server developers to make Ironbee
> work in their environments.
>
> I think it would be amazing to have Cherokee as proxy + cache +
> application
> firewall.
>
> Saludos,
>
> Sergio


--
---------------------

Hugo Vázquez Caramés

"El trabajo que nunca se empieza es el que tarda más en finalizarse" (J.
R. R. Tolkien)

"La mayoría de las personas gastan más tiempo y energías en hablar de los
problemas que en afrontarlos" (Henry Ford)

"Lo imposible es el fantasma de los tímidos y el refugio de los cobardes"
(N. Bonaparte)

========================================================
PENTEST Consultores
Tel: 93 3962070 / Fax: 93 3962001
e-mail: hvazquez@pentest.es
========================================================
Gane credibilidad y confianza, visite http://www.pentest.es


Este e-mail es confidencial y destinado únicamente a la persona a la cual
va dirigido. Si Ud. no es el destinatario al cual va dirigido este e-mail
o lo recibe por error, queda advertido que cualquier uso,
difusión,impresión o copia de este mensaje está estrictamente prohibido.
Si lo ha recibido por error, por favor, notifíquelo al remitente del
mensaje

This email is confidential and intended solely for the use of the
individual to whom it is addressed. If you are not the intended
recipient,be advised that you have received this email in error and that
any use,dissemination, forwarding, printing or copying of this email is
strictly prohibited. If you have received this email in error please
notify it to sender.

_______________________________________________
Cherokee mailing list
Cherokee@lists.octality.com
http://lists.octality.com/listinfo/cherokee
Re: Cherokee as a Web application firewall? [ In reply to ]
On Mon, 24 Oct 2011, Hugo Vazquez Carames wrote:

> I'm also looking to make Cherokee work as an application firewall. AFAIK you
> can play with rules and regex expressions to do some job. If you are
> interested, you can contact me, so we can share experience in this field and
> then share here with everybody.

Maybe write a cookbook with best practises?

Stefan
_______________________________________________
Cherokee mailing list
Cherokee@lists.octality.com
http://lists.octality.com/listinfo/cherokee
Re: Cherokee as a Web application firewall? [ In reply to ]
On 10/24/2011 06:36 AM, Stefan de Konink wrote:
> On Mon, 24 Oct 2011, Hugo Vazquez Carames wrote:
>
>> I'm also looking to make Cherokee work as an application firewall.
>> AFAIK you can play with rules and regex expressions to do some job.
>> If you are interested, you can contact me, so we can share experience
>> in this field and then share here with everybody.
>
> Maybe write a cookbook with best practises?

That would be REALLY useful! +1
_______________________________________________
Cherokee mailing list
Cherokee@lists.octality.com
http://lists.octality.com/listinfo/cherokee
Re: Cherokee as a Web application firewall? [ In reply to ]
Very useful indeed! I think there is a lot of interest out there about this.
Since securing port 80 and 443 is paramount now days.

Sergio

On Mon, Oct 24, 2011 at 9:22 AM, Alvaro Lopez Ortega <alvaro@alobbs.com>wrote:

> On 10/24/2011 06:36 AM, Stefan de Konink wrote:
> > On Mon, 24 Oct 2011, Hugo Vazquez Carames wrote:
> >
> >> I'm also looking to make Cherokee work as an application firewall.
> >> AFAIK you can play with rules and regex expressions to do some job.
> >> If you are interested, you can contact me, so we can share experience
> >> in this field and then share here with everybody.
> >
> > Maybe write a cookbook with best practises?
>
> That would be REALLY useful! +1
> _______________________________________________
> Cherokee mailing list
> Cherokee@lists.octality.com
> http://lists.octality.com/listinfo/cherokee
>
Re: Cherokee as a Web application firewall? [ In reply to ]
Very useful indeed! I think there is a lot of interest out there about this.
Since securing port 80 and 443 is paramount now days.

Sergio

On Mon, Oct 24, 2011 at 9:22 AM, Alvaro Lopez Ortega <alvaro@alobbs.com>wrote:

> On 10/24/2011 06:36 AM, Stefan de Konink wrote:
> > On Mon, 24 Oct 2011, Hugo Vazquez Carames wrote:
> >
> >> I'm also looking to make Cherokee work as an application firewall.
> >> AFAIK you can play with rules and regex expressions to do some job.
> >> If you are interested, you can contact me, so we can share experience
> >> in this field and then share here with everybody.
> >
> > Maybe write a cookbook with best practises?
>
> That would be REALLY useful! +1
> _______________________________________________
> Cherokee mailing list
> Cherokee@lists.octality.com
> http://lists.octality.com/listinfo/cherokee
>