Search results

Great work guys, looking forward to full modsecurity language compatibility!

You can download up to date modsecurity rules from: https://www.atomicorp.com/wiki/index.php/Atomic_ModSecurity_Rules Unfortunately, Litespeed does not currently support modsecurity 2.5.x (The latest version of modsecurity) rules, so none of the modern rulesets anyone publishes will load or...

Thank you for the reply. Based on the modsecurity documentation here: http://www.modsecurity.org/documentation/modsecurity-apache/2.5.12/modsecurity2-apache-reference.html#N11514 Which of its features are supported in Litespeed today, and what is planned in your next release?

My two cents, I dont know if it will "break" LiteSpeed (I doubt it), but if LiteSpeed doesnt support the full rule language you will not be as secure against web attacks and many of the rules written for modsecurity may not even work correctly. You really need the full feature set in...

Thank you for the reply. No, I'm talking about the ability to actually creating branching logic using SecAction, Secskip, SecMarker and other methods. Example: SecRule REQUEST_METHOD "@pm trace track connect post" \ "phase:1,t:none,t:lowercase,pass,nolog,skip:1" SecAction...

Thats a good start. I look forward to when your implementation is feature complete. If you want a suggestion for your next feature to add, as both the OWASP and Gotroot/Atomicorp rule require the new branching logic directives to work I recommend you add in those in next. Neither ruleset is...

I'm the lead developer of one of the two modsecurity projects out there and maybe I can help explain. All the current rulesets out there (Gotroot, OWASP, etc.) require support for the 2.5.x rule language. Those rules have a different syntax from the older 1.9.x rules, and also use lots of...