Internetblog.org.uk Web hosting, Domain names, Dedicated servers
Title: ModSecurity 2.5: Securing your Apache installation and web applications
Author: Magnus Mischel
Publisher: Packt Publishing
Price: £26.34
Securing a web server can be a difficult task. Large companies hire professionals or consulting companies to ensure their customers have access to their content and any would-be attackers have access to nothing else. For the rest of us (and possibly even for the consulting companies), there is ModSecurity, a free and open source application firewall.
In this newly released book from Packt Publishing, Magnus Mishel guides readers through the entire process of downloading, installing, setting up, and solidifying ModSecurity on their Linux-based servers. Make no mistake, this book is not for entertainment purposes, but the writing is concise, and the style of delivery is easy on the eyes.
The introduction does a decent job of explaining what ModSecurity is and why anyone running Apache HTTP Server would want to install it. From there each chapter precisely takes the reader from beginning to end through the entire process. Readers will appreciate being guided along with detailed explanations of every process while also not being insulted with dumbed-down explanations.
The approach of the book is that someone new to running a web hosting server can dive right in just as easily as someone with a cluster of servers and a decade of experience. The graphics are clear and appropriately used, and code is distinct from the actual text, making it easy to identify. Along the way, the book highlights “warnings” and “tips and tricks” with noticeable icons and brackets.
I ran a small web server for about five years and used ModSecurity to secure it. Although I am far from an expert on the subject, I can confidently say that Magnus Mischel seems to be an expert on the subject. His credentials are spelled out in the beginning of the book, as well as the credentials of the reviewers.
While the print price is a little steep, system administrators serious about security, particularly those using Apache for business, will find this book well worth the price. For those who cannot afford it, there is an eBook edition for £15.39.
