CXS or Litespeed ??

[Rezaa]

Hello,

I'm using CXS for scanning uploaded files and prevent users from uploading malicious files on the server.
But recently my server load is growing and sometimes becomes too high (more than 20 or even 30) due to high traffics on apache.
My server manager suggesting me to get litespeed. But as you know litespeed does not support some mod_security rules that CXS using So CXS will not work with litespeed.

Now I'm confused and don't know what should I do.

Stay on CXS and Apache or moving to litespeed without CXS ??


Any suggestion is appreciated.

 

[NiteWave]

how about disable mod_security CXS, and run clamav to scan uploaded files ?

 

[Rezaa]

What exactly you mean? Do you mean using clamav instead of mod_security ?
How do I do that?

 

[NiteWave]

sorry, just read
http://configserver.com/cp/cxs.html

it does mention litespeed:
"Mod_security v2+, to enable upload script scanning (no supported for litespeed, nginx, etc. - only Apache v2+)"

it looks just need a application hook in mod_security, CXS does the actual scanning. I'll leave other staff to answer this question.

 

[Rezaa]

Thanks for the answer NiteWave
As you said, it seems CXS works only with apache.
But I knew that. My question is which one I have to choose? CXS or Litespeed ?
CXS for more security ? or Litespeed for more performance ?

 

[mistwang]

You can try suhosin with CXS.

 

[Rezaa]

I'm already using suhosin.
CXS is an upload scanning tool.
But suhosin only secures PHP and do nothing related to upload scanning.
Isn't it?

 

[mistwang]

suhosin.upload.verification_script

 

[webizen]

http://www.litespeedtech.com/support/forum/showthread.php?p=24389