| Author |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
|
 Posted: Tue 17 Oct '06 16:10 Post subject: ModSecurity 2.0.1 released |
 |
|
ModSecurity 2.0.1 is now available here at the download page.
Feature-wise, there are many improvements over ModSecurity 1.x . Some of the major improvements include:
IP address tracking and scoring.
Transaction scoring.
Real-time Block Lists (RBL) support.
Improvements to the response buffering code.
New engine feature: functions.
New engine feature: transaction variables.
New engine feature: custom persistent variable collections.
New engine feature: regex backrefences support.
Inclusion of Apache error log messages in audit log.
Ability to inspect Apache error log messages.
Application session tracking and scoring.
User account tracking and scoring.
Honeypot proxying based on IP address, session, or user account.
New engine feature: per-rule normalisation options.
Rule engine rewrite splits rule processing into multiple phases: request headers, request body, response headers, response body, logging.
XML support, which allows XML to be parsed, validated (using a DTD or a Schema), and data extracted using XPath expressions.
Many other improvements throughout.
Steffen |
|
| Back to top |
|
Jorge
Joined: 12 Mar 2006
Posts: 376
Location: Belgium
|
| Posted: Tue 17 Oct '06 16:36 Post subject: |
|
|
| bah still doesn't compile on x64 |
|
| Back to top |
|
SabinF
Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)
|
| Posted: Thu 19 Oct '06 13:08 Post subject: |
|
|
| I tried to compile it on Windows but it complains about the missing "pcre.h". Can anyone give me a hand? |
|
| Back to top |
|
Jorge
Joined: 12 Mar 2006
Posts: 376
Location: Belgium
|
| Posted: Thu 19 Oct '06 17:40 Post subject: |
|
|
| SabinF wrote: | | I tried to compile it on Windows but it complains about the missing "pcre.h". Can anyone give me a hand? |
Edit the makefile, pcre.h isn't in the httpd direcotry but in the source! |
|
| Back to top |
|
SabinF
Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)
|
| Posted: Thu 19 Oct '06 18:37 Post subject: |
|
|
| I'm sorry for the error. It is "pcre.lib", not "pcre.h". I can't find it in the Apache sources. |
|
| Back to top |
|
Jorge
Joined: 12 Mar 2006
Posts: 376
Location: Belgium
|
| Posted: Fri 20 Oct '06 16:44 Post subject: |
|
|
if my memory server me well:
httpd-2.2.3/srclib/pcre/LibR |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
|
| Posted: Fri 20 Oct '06 17:24 Post subject: |
|
|
I've just made available at the download page ModSecurity 2.0.2 for Apache 2.2.x and also for 2.0.x
Steffen |
|
| Back to top |
|
SabinF
Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)
|
| Posted: Fri 20 Oct '06 18:55 Post subject: |
|
|
| Jorge wrote: | if my memory server me well:
httpd-2.2.3/srclib/pcre/LibR |
I suppose this directory exists only after the compilation of Apache and not in the raw sources... |
|
| Back to top |
|
Jorge
Joined: 12 Mar 2006
Posts: 376
Location: Belgium
|
| Posted: Fri 20 Oct '06 22:50 Post subject: |
|
|
| That is correct |
|
| Back to top |
|
SabinF
Joined: 03 May 2006
Posts: 37
Location: Timisoara (Romania)
|
| Posted: Sat 21 Oct '06 23:25 Post subject: |
|
|
| I finally compiled the module, but I have one question. What are the advantages or disadvantages of compiling with libxml2? |
|
| Back to top |
|
Jorge
Joined: 12 Mar 2006
Posts: 376
Location: Belgium
|
| Posted: Sun 22 Oct '06 11:41 Post subject: |
|
|
| SabinF wrote: | | I finally compiled the module, but I have one question. What are the advantages or disadvantages of compiling with libxml2? |
Advantages: No CLue
Disadvantages: It breaks x64 compatibility |
|
| Back to top |
|
