What is lmstfu?
“Let me secure that for you!” is a reference architecture that demonstrates the virtual patching approach using open source tools and configuration examples.
Sitting between the user and the web server, two proxy layers receive and forward requests to the server, and then return responses to the user.
The first layer is the ModSecurity web application firewall running inside Apache http server. This is an open source module that allows rules to be configured to block, modify or otherwise inspect web traffic.
Out of the box, ModSecurity doesn’t do much - it needs rules to be configured to unleash it’s power. The OWASP ModSecurity Core Rule Set is a set of attack detection rules that have been collated and tuned by experts.
Read more about ModSecurity and how we use it
The second layer is a node.js proxy built on the Redbird reverse proxy node.js package. This extends node-js-proxy with extra features.
node.js allows us to perform additional logic to address the vulnerabilities or weaknesses that can’t be fixed in ModSecurity.