Apache mod-security

headers

Neha Chriss | 1 Feb 02:28

Variable Expansion for Redirect Action and SecDefaultAction Inheritance

Hello,

I would like all of my rules to perform the default action of redirecting to a

custom page on our site. This redirect should supply the requests unique_id. I

thought the best method to do this would be using SecDefaultAction:

SecDefaultAction "setenv:unique_id=%{UNIQUE_ID}, \

phase:2,log,redirect:http://www2.site.com/pm/form.asp?i=3&eID=%{unique_id}

My custom rules that have no action specified work just fine this way,

but if a rule is triggered in any of the coremod security rulesets,

unique_id is not set and while a redirect *is* actually executed,

the %{unique_id} variable is sent as a literal string.

How can I force the %{unique_id} variable to expand on every redirect for all

rules? Is there a better way to accomplish this?

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d

_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Ryan Barnett | 1 Feb 03:03

Re: Variable Expansion for Redirect Action and SecDefaultAction Inheritance

After some testing – it appears that there is a bug here with the combination of macro expansion in
redirect action in a SecDefaultAction when the SecRule that triggers the alert uses the "block" action
(and inherits the disruptive action).  I have opened a JIRA ticket for this issue -
https://www.modsecurity.org/tracker/browse/MODSEC-288

-Ryan

From: Neha Chriss <nchriss <at> gmail.com<mailto:nchriss <at> gmail.com>>
Date: Tue, 31 Jan 2012 19:28:17 -0600
To:
"mod-security-users <at> lists.sourceforge.net<mailto:mod-security-users <at> lists.sourceforge.net>" <mod-security-users <at> lists.sourceforge.net<mailto:mod-security-users <at> lists.sourceforge.net>>
Subject: [mod-security-users] Variable Expansion for Redirect Action and SecDefaultAction Inheritance

Hello,

I would like all of my rules to perform the default action of redirecting to a
custom page on our site. This redirect should supply the requests unique_id. I
thought the best method to do this would be using SecDefaultAction:

SecDefaultAction "setenv:unique_id=%{UNIQUE_ID}, \
phase:2,log,redirect:http://www2.site.com/pm/form.asp?i=3&eID=%{unique_id}

My custom rules that have no action specified work just fine this way,
but if a rule is triggered in any of the coremod security rulesets,
unique_id is not set and while a redirect *is* actually executed,
the %{unique_id} variable is sent as a literal string.

How can I force the %{unique_id} variable to expand on every redirect for all
rules? Is there a better way to accomplish this?

________________________________
This transmission may contain information that is privileged, confidential, and/or exempt from
disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution, or use of the information contained herein (including any reliance
thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately
contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Gerwin Krist -|- Digitalus Webhosting & Webdesign | 2 Feb 15:36

Magento installer is running forever with mod_security enabled

Hi Guys,

We have just installed a 2.6.3 installation of mod_security on a developement machine. Mod_security
seems to work normally as it should.
But when trying to install (the first screen where you have to agree the license agreement) Magento the
browser keeps "waiting for the host".

* When turning off mod_security it works normally
* even with no rules enabled
* nothing in logs
* SecComponentSignature "core ruleset/2.2.3"
* System: RHEL 6, PHP  + suPHP + suhosin PATCH), Selinux disabled
* Apache proces is eating 100% CPU

Anyone has a clue about this?

- Gerwin

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Gerwin Krist -|- Digitalus Webhosting & Webdesign | 2 Feb 16:05

Magento installer is running forever with mod_security enabled -small update-

Some small update. I also have this problem with the installation of Wordpress and was seeing the following
messages (a LOT):

[02/Feb/2012:15:56:52 +0100]
[example.net/sid#3f15368][rid#41d19c8][/wordpress/wp-admin/setup-config.php][9] Input
filter: Bucket type EOS contains 0 bytes.
[02/Feb/2012:16:01:29 +0100]
[example.net/sid#4091ad0][rid#43499c8][/magento/index.php/install/wizard/beginPost/][9]
Input filter: Bucket type EOS contains 0 bytes.

Hi Guys,

We have just installed a 2.6.3 installation of mod_security on a developement machine. Mod_security
seems to work normally as it should.
But when trying to install (the first screen where you have to agree the license agreement) Magento the
browser keeps "waiting for the host".

* When turning off mod_security it works normally
* even with no rules enabled
* nothing in logs
* SecComponentSignature "core ruleset/2.2.3"
* System: RHEL 6, PHP  + suPHP + suhosin PATCH), Selinux disabled
* Apache proces is eating 100% CPU

Anyone has a clue about this?

- Gerwin

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Breno Silva | 2 Feb 17:07

Re: Magento installer is running forever with mod_security enabled -small update-

Hi Gerwin,

I saw something similar with APR 1.4.5 if i remember well and when you use different APR versions for Apache and ModSec.

Thanks

On Thu, Feb 2, 2012 at 9:05 AM, Gerwin Krist -|- Digitalus Webhosting & Webdesign <gerwin <at> digitalus.nl> wrote:

Some small update. I also have this problem with the installation of Wordpress and was seeing the following messages (a LOT):

[02/Feb/2012:15:56:52 +0100] [example.net/sid#3f15368][rid#41d19c8][/wordpress/wp-admin/setup-config.php][9] Input filter: Bucket type EOS contains 0 bytes.
[02/Feb/2012:16:01:29 +0100] [example.net/sid#4091ad0][rid#43499c8][/magento/index.php/install/wizard/beginPost/][9] Input filter: Bucket type EOS contains 0 bytes.

Hi Guys,

We have just installed a 2.6.3 installation of mod_security on a developement machine. Mod_security seems to work normally as it should.
But when trying to install (the first screen where you have to agree the license agreement) Magento the browser keeps "waiting for the host".

* When turning off mod_security it works normally
* even with no rules enabled
* nothing in logs
* SecComponentSignature "core ruleset/2.2.3"
* System: RHEL 6, PHP + suPHP + suhosin PATCH), Selinux disabled
* Apache proces is eating 100% CPU

Anyone has a clue about this?

- Gerwin

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d

_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Otto Schlagmichtot | 2 Feb 22:01

filter html comments

Hi, i want to filter html comments in the response body. So i used this:

SecContentInjection On

SecResponseBodyAccess On

SecStreamOutBodyInspection On

SecRule STREAM_OUTPUT_BODY " <at> rsub s// /" "phase:4,t:none,nolog,pass"

This works but not if i have more than one line... for example:

<!—

Bla

Bal

-->

and how could i resolve this problem with mod_security 2.5 ?

regards, kai

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d

_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Ryan Barnett | 2 Feb 22:42

Re: filter html comments

The default PCRE behavior is that a dot character will match any character except a newline (\n).  You should
modify your regex to include (?s) like this -

SecRule STREAM_OUTPUT_BODY "@rsub s/(?s)<!--.*?-->/ /" "phase:4,t:none,nolog,pass"

-Ryan

From: Otto Schlagmichtot <hx2680 <at> yahoo.com<mailto:hx2680 <at> yahoo.com>>
Reply-To: Otto Schlagmichtot <hx2680 <at> yahoo.com<mailto:hx2680 <at> yahoo.com>>
Date: Thu, 2 Feb 2012 15:01:52 -0600
To:
"mod-security-users <at> lists.sourceforge.net<mailto:mod-security-users <at> lists.sourceforge.net>" <mod-security-users <at> lists.sourceforge.net<mailto:mod-security-users <at> lists.sourceforge.net>>
Subject: [mod-security-users] filter html comments

Hi, i want to filter html comments in the response body. So i used this:

SecContentInjection On
SecResponseBodyAccess On
SecStreamOutBodyInspection On
SecRule STREAM_OUTPUT_BODY "@rsub s/<!--.*?-->/ /" "phase:4,t:none,nolog,pass"

This works but not if i have more than one line... for example:
<!—
Bla
Bla
Bal
 -->
and how could i resolve this problem with mod_security 2.5 ?

regards, kai

________________________________
This transmission may contain information that is privileged, confidential, and/or exempt from
disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution, or use of the information contained herein (including any reliance
thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately
contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Gerwin Krist -|- Digitalus | 3 Feb 07:36

Re: Magento installer is running forever with mod_security enabled -small update-

Hi Breno,

I'm using the stock APR version which comes with RHEL 6 
(apr-1.3.9-3.el6_1.2.x86_64). The httpd package
is not the default package from Redhat but from interworx hosting 
panel. Is there a way to check
which APR version apache is using?

On 02.02.2012 17:07, Breno Silva wrote:
> Hi Gerwin,
>
> I saw something similar with APR 1.4.5 if i remember well and when
> you use different APR versions for Apache and ModSec.
>
> Thanks
>
> On Thu, Feb 2, 2012 at 9:05 AM, Gerwin Krist -|- Digitalus Webhosting
> & Webdesign  wrote:
>
>> Some small update. I also have this problem with the installation
> of
>> Wordpress and was seeing the following messages (a LOT):
>>
>> [02/Feb/2012:15:56:52 +0100]
>>
> 
> [example.net/sid#3f15368][rid#41d19c8][/wordpress/wp-admin/setup-config.php][9
>> [1]] Input filter: Bucket type EOS contains 0 bytes.
>> [02/Feb/2012:16:01:29 +0100]
>>
> 
> [example.net/sid#4091ad0][rid#43499c8][/magento/index.php/install/wizard/beginPost/][9
>> [2]] Input filter: Bucket type EOS contains 0 bytes.
>>
>> Hi Guys,
>>
>> We have just installed a 2.6.3 installation of mod_security on a
>> developement machine. Mod_security seems to work normally as it
>> should.
>> But when trying to install (the first screen where you have to
>> agree the license agreement) Magento the browser keeps "waiting for
>> the host".
>>
>> * When turning off mod_security it works normally
>> * even with no rules enabled
>> * nothing in logs
>> * SecComponentSignature "core ruleset/2.2.3"
>> * System: RHEL 6, PHP  + suPHP + suhosin PATCH), Selinux disabled
>> * Apache proces is eating 100% CPU
>>
>> Anyone has a clue about this?
>>
>> - Gerwin
>>
>>
>>
> 
> ------------------------------------------------------------------------------
>> Keep Your Developer Skills Current with LearnDevNow!
>> The most comprehensive online learning library for Microsoft
>> developers
>> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3,
>> MVC3,
>> Metro Style Apps, more. Free future releases when you subscribe
>> now!
>> http://p.sf.net/sfu/learndevnow-d2d [3]
>> _______________________________________________
>> mod-security-users mailing list
>> mod-security-users <at> lists.sourceforge.net [4]
>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>> [5]
>> Commercial ModSecurity Rules and Support from Trustwave's
>> SpiderLabs:
>> http://www.modsecurity.org/projects/commercial/rules/ [6]
>> http://www.modsecurity.org/projects/commercial/support/ [7]
>
>
>
> Links:
> ------
> [1]
> 
> http://example.net/sid#3f15368][rid#41d19c8][/wordpress/wp-admin/setup-config.php][9
> [2]
> 
> http://example.net/sid#4091ad0][rid#43499c8][/magento/index.php/install/wizard/beginPost/][9
> [3] http://p.sf.net/sfu/learndevnow-d2d
> [4] mailto:mod-security-users <at> lists.sourceforge.net
> [5] https://lists.sourceforge.net/lists/listinfo/mod-security-users
> [6] http://www.modsecurity.org/projects/commercial/rules/
> [7] http://www.modsecurity.org/projects/commercial/support/
> [8] mailto:gerwin <at> digitalus.nl

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Gerwin Krist -|- Digitalus Webhosting & Webdesign | 3 Feb 09:50

Re: Magento installer is running forever with mod_security enabled -small update-

Breno,

I also found out that this problem is NOT when using a Mod security 2.5 version. >2.6 does have this problem ...

On 02/02/2012 05:07 PM, Breno Silva wrote:
> Hi Gerwin,
>
> I saw something similar with APR 1.4.5 if i remember well and when you use different APR versions for Apache
and ModSec.
>
> Thanks
>
> On Thu, Feb 2, 2012 at 9:05 AM, Gerwin Krist -|- Digitalus Webhosting & Webdesign <gerwin <at> digitalus.nl
<mailto:gerwin <at> digitalus.nl>> wrote:
>
>     Some small update. I also have this problem with the installation of Wordpress and was seeing the
following messages (a LOT):
>
>     [02/Feb/2012:15:56:52 +0100]
[example.net/sid#3f15368][rid#41d19c8][/wordpress/wp-admin/setup-config.php][9
<http://example.net/sid#3f15368][rid#41d19c8][/wordpress/wp-admin/setup-config.php][9>]
Input filter: Bucket type EOS contains 0 bytes.
>     [02/Feb/2012:16:01:29 +0100]
[example.net/sid#4091ad0][rid#43499c8][/magento/index.php/install/wizard/beginPost/][9
<http://example.net/sid#4091ad0][rid#43499c8][/magento/index.php/install/wizard/beginPost/][9>]
Input filter: Bucket type EOS contains 0 bytes.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>     Hi Guys,
>
>     We have just installed a 2.6.3 installation of mod_security on a developement machine. Mod_security
seems to work normally as it should.
>     But when trying to install (the first screen where you have to agree the license agreement) Magento the
browser keeps "waiting for the host".
>
>     * When turning off mod_security it works normally
>     * even with no rules enabled
>     * nothing in logs
>     * SecComponentSignature "core ruleset/2.2.3"
>     * System: RHEL 6, PHP  + suPHP + suhosin PATCH), Selinux disabled
>     * Apache proces is eating 100% CPU
>
>     Anyone has a clue about this?
>
>     - Gerwin
>
>
>     ------------------------------------------------------------------------------
>     Keep Your Developer Skills Current with LearnDevNow!
>     The most comprehensive online learning library for Microsoft developers
>     is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
>     Metro Style Apps, more. Free future releases when you subscribe now!
>     http://p.sf.net/sfu/learndevnow-d2d
>     _______________________________________________
>     mod-security-users mailing list
>     mod-security-users <at> lists.sourceforge.net <mailto:mod-security-users <at> lists.sourceforge.net>
>     https://lists.sourceforge.net/lists/listinfo/mod-security-users
>     Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
>     http://www.modsecurity.org/projects/commercial/rules/
>     http://www.modsecurity.org/projects/commercial/support/
>
>

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Ryan Barnett | 3 Feb 17:22

Re: ModSecurity Virtual Patching Workshop/Training at OWASP AppSecDC 2012

FYI – early bird discount rates end today.

This workshop is going to be pretty hard core :)  We are going to be using the OWASP Broken Web Applications VM -
http://code.google.com/p/owaspbwa/wiki/ProjectSummary as it already has ModSecurity installed. 
It will give us a wide range of web apps/vulns to try and tackle.  I also have a really cool integration
between ModSecurity and Arachni (http://arachni-scanner.com/) that we will use.

Hope to see you at the workshop!

-Ryan

From: Ryan Barnett <rbarnett <at> trustwave.com<mailto:rbarnett <at> trustwave.com>>
Date: Thu, 19 Jan 2012 10:04:50 -0600
To:
"mod-security-users <at> lists.sourceforge.net<mailto:mod-security-users <at> lists.sourceforge.net>"
<mod-security-users <at> lists.sourceforge.net<mailto:mod-security-users <at> lists.sourceforge.net>>,
"owasp-modsecurity-core-rule-set <at> lists.owasp.org<mailto:owasp-modsecurity-core-rule-set <at> lists.owasp.org>" <owasp-modsecurity-core-rule-set <at> lists.owasp.org<mailto:owasp-modsecurity-core-rule-set <at> lists.owasp.org>>
Subject: ModSecurity Virtual Patching Workshop/Training at OWASP AppSecDC 2012

OWASP has just announced that my 2-day ModSecurity Virtual Patching Workshop training class as part of
AppSecDC 2012 is online - https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Training/Virtual_Patching_Workshop

In this training, we will walk through the theory of Virtual Patching – when, where and how to best use it. 
We will be working through the "Virtual Patching: Best Practices" document and even be updating it as we go
with feedback.  We will then have hands-on labs where our goal will be to virtually patch as many of the OWASP
WebGoat vulnerabilities as possible.  We will also cover topics such as automatic virtual patch creation
from web app scanner output (with a lab).

Let me know if you have any questions or comments.  I hope you will join me for this in-depth workshop!

--
Ryan Barnett
Senior Security Researcher
Trustwave - SpiderLabs
www.trustwave.com

________________________________
This transmission may contain information that is privileged, confidential, and/or exempt from
disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution, or use of the information contained herein (including any reliance
thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately
contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

Mon	Tue	Wed	Thu	Fri	Sat	Sun

		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29

24	May 2012
11	April 2012
46	March 2012
123	February 2012
80	January 2012
44	December 2011
51	November 2011
78	October 2011
108	September 2011
104	August 2011
111	July 2011
66	June 2011
185	May 2011
54	April 2011
72	March 2011
69	February 2011
76	January 2011
26	December 2010
51	November 2010
69	October 2010
79	September 2010
67	August 2010
67	July 2010
59	June 2010
88	May 2010
59	April 2010
130	March 2010
117	February 2010
99	January 2010
80	December 2009
156	November 2009
112	October 2009
73	September 2009
134	August 2009
92	July 2009
78	June 2009
132	May 2009
104	April 2009
127	March 2009
131	February 2009
137	January 2009
85	December 2008
82	November 2008
84	October 2008
154	September 2008
167	August 2008
187	July 2008
95	June 2008
115	May 2008
89	April 2008
97	March 2008
134	February 2008
159	January 2008
56	December 2007
205	November 2007
135	October 2007
97	September 2007
162	August 2007
130	July 2007
250	June 2007
191	May 2007
150	April 2007
181	March 2007
161	February 2007
166	January 2007
104	December 2006
172	November 2006
103	October 2006
83	September 2006
101	August 2006
92	July 2006
116	June 2006
65	May 2006
139	April 2006
82	March 2006
148	February 2006
61	January 2006
74	December 2005
104	November 2005
49	October 2005
28	September 2005
51	August 2005
27	July 2005
71	June 2005
26	May 2005
53	April 2005
82	March 2005
61	February 2005
67	January 2005
12	December 2004
22	November 2004
28	October 2004
31	September 2004
24	August 2004
36	July 2004
20	June 2004
15	May 2004
47	April 2004
21	March 2004
13	February 2004
44	January 2004
18	December 2003
13	November 2003
11	October 2003
9	September 2003
7	August 2003
16	July 2003
1	June 2003