logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in  RSS Apache Lounge  


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.



Post new topic   Forum Index -> Third-party Modules View previous topic :: View next topic
Reply to topic   Topic: ModSecurity 2.0.1 released
Author
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 2772
Location: Hilversum, NL, EU

PostPosted: Tue 17 Oct '06 16:10    Post subject: ModSecurity 2.0.1 released Reply with quote

ModSecurity 2.0.1 is now available here at the download page.

Feature-wise, there are many improvements over ModSecurity 1.x . Some of the major improvements include:

IP address tracking and scoring.
Transaction scoring.
Real-time Block Lists (RBL) support.
Improvements to the response buffering code.
New engine feature: functions.
New engine feature: transaction variables.
New engine feature: custom persistent variable collections.
New engine feature: regex backrefences support.
Inclusion of Apache error log messages in audit log.
Ability to inspect Apache error log messages.
Application session tracking and scoring.
User account tracking and scoring.
Honeypot proxying based on IP address, session, or user account.
New engine feature: per-rule normalisation options.
Rule engine rewrite splits rule processing into multiple phases: request headers, request body, response headers, response body, logging.
XML support, which allows XML to be parsed, validated (using a DTD or a Schema), and data extracted using XPath expressions.
Many other improvements throughout.

Steffen
Back to top
Jorge



Joined: 12 Mar 2006
Posts: 376
Location: Belgium

PostPosted: Tue 17 Oct '06 16:36    Post subject: Reply with quote

bah still doesn't compile on x64
Back to top
SabinF



Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)

PostPosted: Thu 19 Oct '06 13:08    Post subject: Reply with quote

I tried to compile it on Windows but it complains about the missing "pcre.h". Can anyone give me a hand?
Back to top
Jorge



Joined: 12 Mar 2006
Posts: 376
Location: Belgium

PostPosted: Thu 19 Oct '06 17:40    Post subject: Reply with quote

SabinF wrote:
I tried to compile it on Windows but it complains about the missing "pcre.h". Can anyone give me a hand?


Edit the makefile, pcre.h isn't in the httpd direcotry but in the source!
Back to top
SabinF



Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)

PostPosted: Thu 19 Oct '06 18:37    Post subject: Reply with quote

I'm sorry for the error. It is "pcre.lib", not "pcre.h". I can't find it in the Apache sources.
Back to top
Jorge



Joined: 12 Mar 2006
Posts: 376
Location: Belgium

PostPosted: Fri 20 Oct '06 16:44    Post subject: Reply with quote

if my memory server me well:
httpd-2.2.3/srclib/pcre/LibR
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 2772
Location: Hilversum, NL, EU

PostPosted: Fri 20 Oct '06 17:24    Post subject: Reply with quote

I've just made available at the download page ModSecurity 2.0.2 for Apache 2.2.x and also for 2.0.x


Steffen
Back to top
SabinF



Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)

PostPosted: Fri 20 Oct '06 18:55    Post subject: Reply with quote

Jorge wrote:
if my memory server me well:
httpd-2.2.3/srclib/pcre/LibR


I suppose this directory exists only after the compilation of Apache and not in the raw sources...
Back to top
Jorge



Joined: 12 Mar 2006
Posts: 376
Location: Belgium

PostPosted: Fri 20 Oct '06 22:50    Post subject: Reply with quote

That is correct
Back to top
SabinF



Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)

PostPosted: Sat 21 Oct '06 23:25    Post subject: Reply with quote

I finally compiled the module, but I have one question. What are the advantages or disadvantages of compiling with libxml2?
Back to top
Jorge



Joined: 12 Mar 2006
Posts: 376
Location: Belgium

PostPosted: Sun 22 Oct '06 11:41    Post subject: Reply with quote

SabinF wrote:
I finally compiled the module, but I have one question. What are the advantages or disadvantages of compiling with libxml2?


Advantages: No CLue
Disadvantages: It breaks x64 compatibility
Back to top


Reply to topic   Topic: ModSecurity 2.0.1 released View previous topic :: View next topic
Post new topic   Forum Index -> Third-party Modules