up vote 0 down vote favorite
share [g+] share [fb]

I've found using ModSecurity cumbersome for logging/denying regex matches in postdata but I'm having trouble finding alternatives. I looked into various proxy solutions, but I can't seem to find any that can apply regexes to postdata.

I'm open to the wildest of solutions, but ideally I'd like something that firmly stands by security.

link|improve this question
feedback

2 Answers

up vote 0 down vote

There are other alternatives for general WAF (IDS/IPS) like usage, but these depend on your needs. Offhand there is PHPIDS (PHP), WebCastellum (java) and OWASP ESAPI. I have only really used ModSecurity though (I used to be the maintainer). Unfortunately, there are just not any good alternatives if you want to apply regex to the POST payload. Hopefully there will be in the near future. :)

What do you find cumbersome exactly? Perhaps that will shed some light on your wants/needs.

link|improve this answer
I'm seeing some segmentation faults with 2.5.13 on Apache 2.2.17 that I'm investigating; but there are additional complexities with building it in my environment make my life difficult. – Tyler Szabo Dec 7 '10 at 1:55
feedback
up vote 0 down vote

@Tyler - have you sent your issues to the mod-security-users public mail-list or opened a Jira ticket (https://www.modsecurity.org/tracker/)?

link|improve this answer
Not yet; before I do that I want to be convinced that the problem isn't on my end. – Tyler Szabo Dec 7 '10 at 18:32
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.