All posts tagged nginx

Securing WordPress from Brute Force Attacks by Country Blocking on Nginx

cctv-camera

After having looked after a number of WordPress websites over the last 7 years or so it has become apparent that the number of brute force attacks specifically targeting WordPress is increasing. I know it isn’t a matter of if one of these attacks succeeded but when. This tutorial won’t completely get rid of all brute force attacks, but it should reduce them quite a lot.

As a totally unscientific observation I was going from around 10,000 attempted logons a day, to only a couple of dozens actually getting as far as authenticating.  All this without inconveniencing either myself or my customers!

Continue reading →

Installing LEMP on Ubuntu 14.04 with Nginx and NAXSI

internet-the-cloud-raining-binary

Well, after my last tutorial about getting a LEMP server on Ubuntu 11.10 I’m very happy to announce that the process is now a heck of a lot easier on 14.04! As a matter of fact you don’t need to create your own startup scripts for the services anymore which is nice.

Continue reading →

Blocking Countries on Nginx without the GeoIP Module

the-world-in-flags

Sometimes blocking entire swathes of the world is the way to go if you truly want a defense in depth approach on your web apps, for instance do your administrators truly need to log on from every country on Earth? As website administrators we get a feel for where our legitimate traffic is coming from and where we see nefarious connections from.

Continue reading →

Setting up Nginx with Cloudflare

generic_cloud

I’ve written about the very excellent Cloudflare CDN before.  It’s a fantastic content delivery network with inbuilt security, I love it.  This is another quick howto to get your Nginx web server working properly with Cloudflare.

I will assume you already have a working LEMP server working.

Continue reading →

Quick & Easy Nginx Load Balancer with Backend

meh_its_that_simple

This will be a very quick and easy example.  Sometimes you may need to use Nginx as a front end, webcache, load balancer or front end proxy.  As a clue in Nginx speak they are all the same thing.

Things like this can come in very useful not only for load balancing but also if you’re navigating IPSec VPNs.

Continue reading →