RepoMirrors
/
haproxy
mirror of http://git.haproxy.org/git/haproxy.git/
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
haproxy/contrib/mod_defender/Makefile

58 lines
1.2 KiB
Makefile
Raw Normal View History

MINOR: Add Mod Defender integration as contrib This is a service that talks SPOE protocol and uses the Mod Defender (a NAXSI clone) functionality to detect HTTP attacks. It returns a HTTP status code to indicate whether the request is suspicious or not, based on NAXSI rules. The value of the returned code can be used in HAProxy rules to determine if the HTTP request should be blocked/rejected.
2017-06-02 10:03:16 +00:00
DESTDIR =
PREFIX = /usr/local
BINDIR = $(PREFIX)/bin
BUG/MINOR: contrib/mod_defender: build fix In similar manner than modsecurity, making the build possible under *BSD flavors, the -lm for ceilf function.
2017-06-07 11:39:16 +00:00
CC ?= gcc
MINOR: Add Mod Defender integration as contrib This is a service that talks SPOE protocol and uses the Mod Defender (a NAXSI clone) functionality to detect HTTP attacks. It returns a HTTP status code to indicate whether the request is suspicious or not, based on NAXSI rules. The value of the returned code can be used in HAProxy rules to determine if the HTTP request should be blocked/rejected.
2017-06-02 10:03:16 +00:00
LD = $(CC)
BUG/MINOR: contrib/mod_defender: build fix In similar manner than modsecurity, making the build possible under *BSD flavors, the -lm for ceilf function.
2017-06-07 11:39:16 +00:00
CXX ?= g++
MINOR: Add Mod Defender integration as contrib This is a service that talks SPOE protocol and uses the Mod Defender (a NAXSI clone) functionality to detect HTTP attacks. It returns a HTTP status code to indicate whether the request is suspicious or not, based on NAXSI rules. The value of the returned code can be used in HAProxy rules to determine if the HTTP request should be blocked/rejected.
2017-06-02 10:03:16 +00:00
ifeq ($(MOD_DEFENDER_SRC),)
MOD_DEFENDER_SRC := ./mod_defender_src
endif
ifeq ($(APACHE2_INC),)
APACHE2_INC := /usr/include/apache2
endif
ifeq ($(APR_INC),)
APR_INC := /usr/include/apr-1.0
endif
BUG/MINOR: contrib/mod_defender: build fix In similar manner than modsecurity, making the build possible under *BSD flavors, the -lm for ceilf function.
2017-06-07 11:39:16 +00:00
ifeq ($(EVENT_LIB),)
EVENT_LIB := -levent
endif
ifeq ($(EVENT_INC),)
EVENT_INC := /usr/include
endif
CFLAGS += -g -Wall -pthread
INCS += -I../../include -I../../ebtree -I$(MOD_DEFENDER_SRC) -I$(APACHE2_INC) -I$(APR_INC) -I$(EVENT_INC)
BUILD: Fix LDFLAGS vs. LIBS re linking order in various makefiles Libraries should always be listed last. Should be backported to 1.8. Signed-off-by: Christian Ruppert <idl0r@qasl.de>
2017-11-30 09:11:36 +00:00
LIBS += -lpthread $(EVENT_LIB) -levent_pthreads -lapr-1 -laprutil-1 -lstdc++ -lm
MINOR: Add Mod Defender integration as contrib This is a service that talks SPOE protocol and uses the Mod Defender (a NAXSI clone) functionality to detect HTTP attacks. It returns a HTTP status code to indicate whether the request is suspicious or not, based on NAXSI rules. The value of the returned code can be used in HAProxy rules to determine if the HTTP request should be blocked/rejected.
2017-06-02 10:03:16 +00:00
CXXFLAGS = -g -std=gnu++11
CXXINCS += -I$(MOD_DEFENDER_SRC) -I$(MOD_DEFENDER_SRC)/deps -I$(APACHE2_INC) -I$(APR_INC)
SRCS = standalone.o spoa.o defender.o \
$(wildcard $(MOD_DEFENDER_SRC)/deps/libinjection/*.c)
OBJS = $(patsubst %.c, %.o, $(SRCS))
CXXSRCS = $(wildcard $(MOD_DEFENDER_SRC)/*.cpp)
CXXOBJS = $(patsubst %.cpp, %.o, $(CXXSRCS))
defender: $(OBJS) $(CXXOBJS)
BUILD: Fix LDFLAGS vs. LIBS re linking order in various makefiles Libraries should always be listed last. Should be backported to 1.8. Signed-off-by: Christian Ruppert <idl0r@qasl.de>
2017-11-30 09:11:36 +00:00
$(LD) $(LDFLAGS) -o $@ $^ $(LIBS)
MINOR: Add Mod Defender integration as contrib This is a service that talks SPOE protocol and uses the Mod Defender (a NAXSI clone) functionality to detect HTTP attacks. It returns a HTTP status code to indicate whether the request is suspicious or not, based on NAXSI rules. The value of the returned code can be used in HAProxy rules to determine if the HTTP request should be blocked/rejected.
2017-06-02 10:03:16 +00:00
install: defender
install defender $(DESTDIR)$(BINDIR)
clean:
rm -f defender $(OBJS) $(CXXOBJS)
%.o: %.c
$(CC) $(CFLAGS) $(INCS) -c -o $@ $<
%.o: %.cpp
$(CXX) $(CXXFLAGS) $(CXXINCS) -c -o $@ $<