WebApp Sec mailing list archives
Re: [ANNOUNCE] mod_security 1.5 released
From: "r e m a l . c o m" <admin () remal com>
Date: Tue, 3 Jun 2003 04:30:05 +0300
hi, the features are wonderful... i installed the mod on one of the web servers, before the installion the load avrg was 1 to 2 after installing mod_security, the load went crazy to something like 40 to 60 ! ----- Original Message ----- From: Ivan Ristic To: webappsec () securityfocus com Sent: Friday, May 30, 2003 10:53 PM Subject: [ANNOUNCE] mod_security 1.5 released Mod_security 1.5 has been released. It is immediately available for download from: http://www.modsecurity.org/download/ This is a major release, containing significant new functionality. The most important changes are: Apache 2.x compatibility, new web site, and comprehensive manual. About mod_security ------------------ Mod_security is an Apache module whose purpose is to protect vulnerable applications and reject human or automated attacks. It is an open source intrusion detection and prevention system for Apache. In addition to request filtering, it also creates Web application audit logs. Requests are filtered using regular expressions. Some of the things possible are: * Apply filters against any part of the request (URI, headers, either GET or POST) * Apply filters against individual parameters * Reject SQL injection attacks * Reject Cross site scripting attacks With few general rules mod_security can protect from both known and unknown vulnerabilities. Changes (v1.5) -------------- * Apache 2.x compatibility * Added SecFilterInheritance * Added SecFilterByteRange * Added SecFilterCheckURLEncoding * A few bug fixes * New web site @ www.modsecurity.org * Comprehensive manual
Current thread:
- [ANNOUNCE] mod_security 1.5 released Ivan Ristic (Jun 01)
- <Possible follow-ups>
- Re: [ANNOUNCE] mod_security 1.5 released r e m a l . c o m (Jun 03)
- Re: [ANNOUNCE] mod_security 1.5 released Ivan Ristic (Jun 03)