diff --git a/README.md b/README.md index 8e8d5f8..3a43b46 100644 --- a/README.md +++ b/README.md @@ -10,15 +10,16 @@ Now easier then before, you will have to compile only Nginx, Rest of modules com - [x] Naxsi Support. - [x] Lua Support. - [x] Cookie Based Challenge. - - [x] [ALL MOD LIST](https://github.com/theraw/The-World-Is-Yours/tree/master/static/mod) - - [x] [View nginx compile options](https://github.com/theraw/The-World-Is-Yours/blob/master/static/builder) + - [x] [MOD LIST X Ubuntu 20.04](https://github.com/theraw/The-World-Is-Yours/tree/master/static/Focal/mod) + - [x] [MOD LIST X Ubuntu 22.04](https://github.com/theraw/The-World-Is-Yours/tree/master/static/Jammy/mod) + - [x] [View nginx compile options](https://github.com/theraw/The-World-Is-Yours/blob/master/static/Jammy/Builder.sh) -How do these 3 modules work together? Well L7 will block all or most of bots, however modSecurity and Naxsi take priority over cookie challenge! -So if its a offensive request that modsecurity or naxsi detect it as such then these 2 will deal with that request otherwise cookie challenge will appear. +How do these 3 modules work together? L7 will block all or most of bots, ModSecurity and Naxsi take priority over cookie challenge! +So if its a offensive request that Modsecurity or Naxsi detect it as such then these 2 will deal with that request otherwise cookie challenge will appear. ## INSTALLATION -1. **`apt-get install build-essential libssl-dev curl nano wget zip unzip sudo git psmisc -y`** +1. **`apt-get update; apt-get -y install build-essential libssl-dev curl nano wget zip unzip sudo git psmisc tar`** 2. **`curl -s https://raw.githubusercontent.com/theraw/The-World-Is-Yours/master/install > install; bash install`** @@ -33,6 +34,8 @@ So if its a offensive request that modsecurity or naxsi detect it as such then t => --sbin-path = /usr/sbin/nginx => --error-log-path = /var/log/nginx/error.log +LUA RESTY CORE SCRIPTS = /usr/twiylua/ + // YOUR NGINX IS LOCATED AT /nginx NOT /etc/nginx ``` @@ -40,7 +43,7 @@ So if its a offensive request that modsecurity or naxsi detect it as such then t ## KEEP IN MIND! 1. You're trading perfomance for security. 2. If your server provider does not have anti-ddos your IPTABLES will fail to keep the bans, and your server may be offline in cases of big attacks. -3. This is not a free script that will do everything for you. Read Modules Documentations about how to get the best out of them. +3. This is not a script that with one command your ddos problem is fixed, there's no such thing for L7 attacks as they change and new methods come out very often and no one has any ideas where your server is lacking security so this script is a basic thing more advanced protection require knowledge, monitoring logs, and applying filters in order to automatically ban attackers, this project is suggested to run with fail2ban + iptables. ## Contributors