Topic: ModSecurity Handbook available

[Steffen]

Mod_Security is for most users not easy to configure, quite some users drop it for this reason. Ivan has now a book available to help you out.

Als I asked Ivan to make a simple rule set for starters.
His answer was:

I was toying with the idea of starting a new simple rule set. Perhaps it will happen at some point. I don't have a problem maintaining such a rule set provided I get high-traffic users who are willing share their access logs with me.

Please give feedback.

Steffen

Announcement ModSecurity Handbook

If you're interested, ModSecurity Handbook is now available for
pre-order and early access:

http://blog.ivanristic.com/2009/11/modsecurity-handbook-available-for-preorder-and-early-access.html

I think that the most important aspect of this book is that I intend
to keep it up to date. Thus, it will always be the place where you can
find out everything there is to know about ModSecurity. The other
important aspect is that you will always be able to write to me
personally and ask me to include something in the book, or improve
upon what is already in there. At some point down the line the book
will be available as HTML. The idea is to allow people to add comments
online, and, effectively, read together.

At the moment the book consists of about 100 pages of text. In the
next couple of weeks I will add the reference documentation to it,
and then proceed to write the missing pieces. The end result should be
at least 250 pages of detailed, high quality content.

Your contributions as readers are going to be very important for the
quality of this book, and I hope you will join me. I am sorry the book
is not available for free, but that's the only way to ensure its long
term stability. The irrational exuberance one feels at the start of
book writing perishes after a month or so, and needs to be replaced by
some other motivator it if the book's going to live.

--
Ivan Ristic
Security assessment of your SSL servers
https://www.ssllabs.com/ssldb/