mirror of
http://git.haproxy.org/git/haproxy.git/
synced 2025-02-02 03:23:12 +00:00
59bb97a192
This is a service that talks SPOE protocol and uses the Mod Defender (a NAXSI clone) functionality to detect HTTP attacks. It returns a HTTP status code to indicate whether the request is suspicious or not, based on NAXSI rules. The value of the returned code can be used in HAProxy rules to determine if the HTTP request should be blocked/rejected.
51 lines
1.1 KiB
Makefile
51 lines
1.1 KiB
Makefile
DESTDIR =
|
|
PREFIX = /usr/local
|
|
BINDIR = $(PREFIX)/bin
|
|
|
|
CC = gcc
|
|
LD = $(CC)
|
|
|
|
CXX = g++
|
|
|
|
ifeq ($(MOD_DEFENDER_SRC),)
|
|
MOD_DEFENDER_SRC := ./mod_defender_src
|
|
endif
|
|
|
|
ifeq ($(APACHE2_INC),)
|
|
APACHE2_INC := /usr/include/apache2
|
|
endif
|
|
|
|
ifeq ($(APR_INC),)
|
|
APR_INC := /usr/include/apr-1.0
|
|
endif
|
|
|
|
CFLAGS = -g -Wall -pthread
|
|
LDFLAGS = -lpthread -levent -levent_pthreads -lapr-1 -laprutil-1 -lstdc++
|
|
INCS += -I../../include -I../../ebtree -I$(MOD_DEFENDER_SRC) -I$(APACHE2_INC) -I$(APR_INC)
|
|
LIBS =
|
|
|
|
CXXFLAGS = -g -std=gnu++11
|
|
CXXINCS += -I$(MOD_DEFENDER_SRC) -I$(MOD_DEFENDER_SRC)/deps -I$(APACHE2_INC) -I$(APR_INC)
|
|
|
|
SRCS = standalone.o spoa.o defender.o \
|
|
$(wildcard $(MOD_DEFENDER_SRC)/deps/libinjection/*.c)
|
|
OBJS = $(patsubst %.c, %.o, $(SRCS))
|
|
|
|
CXXSRCS = $(wildcard $(MOD_DEFENDER_SRC)/*.cpp)
|
|
CXXOBJS = $(patsubst %.cpp, %.o, $(CXXSRCS))
|
|
|
|
defender: $(OBJS) $(CXXOBJS)
|
|
$(LD) -o $@ $^ $(LDFLAGS) $(LIBS)
|
|
|
|
install: defender
|
|
install defender $(DESTDIR)$(BINDIR)
|
|
|
|
clean:
|
|
rm -f defender $(OBJS) $(CXXOBJS)
|
|
|
|
%.o: %.c
|
|
$(CC) $(CFLAGS) $(INCS) -c -o $@ $<
|
|
|
|
%.o: %.cpp
|
|
$(CXX) $(CXXFLAGS) $(CXXINCS) -c -o $@ $<
|