05/12/2026

NGINX ModSecurity Setup on Debian and Ubuntu: WAF with OWASP Core Rule Set

ModSecurity v3 with the OWASP CRS blocks SQL injection, XSS, shell injection, and scanner traffic at the HTTP layer. This guide covers installation, CRS paranoia levels, WordPress tuning, false positive handling, and performance impact.

Read more →