[AusNOG] Protecting Web Hosting environments - was Re: DDOS mitigation

[Peter Tonoli]

> Rather than scanning for known vulnerabilities, does anyone know if
> there's anything out there in the network security space which can
> detect the various exploit / scan attempts to an old WordPress /
> Joomla
> / Drupal /etc site, and block them?

Whether or not you consider this 'carrier grade',' there's ModSecurity <http://www.modsecurity.org/>, which does what you want either on your reverse proxy, or the web server.


-- 
Peter Tonoli < peter at medstv.unimelb.edu.au > +61-3-9288-2399 
IT Manager 
The University of Melbourne - Eastern Hill Academic Centre, St. Vincent's Institute and O'Brien Institute