CXS or Litespeed ??

Discussion in 'General' started by Rezaa, Dec 5, 2011.

  1. Rezaa

    Rezaa New Member

    Hello,

    I'm using CXS for scanning uploaded files and prevent users from uploading malicious files on the server.
    But recently my server load is growing and sometimes becomes too high (more than 20 or even 30) due to high traffics on apache.
    My server manager suggesting me to get litespeed. But as you know litespeed does not support some mod_security rules that CXS using So CXS will not work with litespeed.

    Now I'm confused and don't know what should I do.

    Stay on CXS and Apache or moving to litespeed without CXS ??


    Any suggestion is appreciated.
  2. NiteWave

    NiteWave Administrator

    how about disable mod_security CXS, and run clamav to scan uploaded files ?
  3. Rezaa

    Rezaa New Member

    What exactly you mean? Do you mean using clamav instead of mod_security ?
    How do I do that?
  4. NiteWave

    NiteWave Administrator

    sorry, just read
    http://configserver.com/cp/cxs.html

    it does mention litespeed:
    "Mod_security v2+, to enable upload script scanning (no supported for litespeed, nginx, etc. - only Apache v2+)"

    it looks just need a application hook in mod_security, CXS does the actual scanning. I'll leave other staff to answer this question.
  5. Rezaa

    Rezaa New Member

    Thanks for the answer NiteWave
    As you said, it seems CXS works only with apache.
    But I knew that. My question is which one I have to choose? CXS or Litespeed ?
    CXS for more security ? or Litespeed for more performance ?
  6. mistwang

    mistwang LiteSpeed Staff

    You can try suhosin with CXS.
  7. Rezaa

    Rezaa New Member

    I'm already using suhosin.
    CXS is an upload scanning tool.
    But suhosin only secures PHP and do nothing related to upload scanning.
    Isn't it?
  8. mistwang

    mistwang LiteSpeed Staff

    suhosin.upload.verification_script
  9. webizen

    webizen New Member

Share This Page