Added a new ruleset, blacklist2.conf. It contains a list of sources of rootkits, owned boxes and other repeat/bad offenders. As always, you can download it from the mod_security rules page.

continue reading.....

Added a new ruleset, blacklist2.conf. It contains a list of sources of rootkits, owned boxes and other repeat/bad offenders. As always, you can download it from the mod_security rules page.

continue reading.....

Split out the UserAgent? rules from the main rule files as part of the ongoing slow process of breaking the rules out into individual files. If you rely on these rules, make sure you add the new ruleset to your mod_security configuration. As always, you can find them on the mod_security rules page.

continue reading.....

Split out the UserAgent? rules from the main rule files as part of the ongoing slow process of breaking the rules out into individual files. If you rely on these rules, make sure you add the new ruleset to your mod_security configuration. As always, you can find them on the mod_security rules page.

continue reading.....

Added a new set of rules today to the mod_security rules. This will include rules to prevent exploitation of open proxies, open proxy scans, and so on. I’m breaking these out for two reasons: 1) Somebody might need to run a proxy 2) Its part of my new effort to break the rules out into their own files, to make it easier to pick and choose which rules are appropriate for your server.

continue reading.....

Added a new set of rules today to the mod_security rules. This will include rules to prevent exploitation of open proxies, open proxy scans, and so on. I’m breaking these out for two reasons: 1) Somebody might need to run a proxy 2) Its part of my new effort to break the rules out into their own files, to make it easier to pick and choose which rules are appropriate for your server.

continue reading.....