Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've found using ModSecurity cumbersome for logging/denying regex matches in postdata but I'm having trouble finding alternatives. I looked into various proxy solutions, but I can't seem to find any that can apply regexes to postdata.

I'm open to the wildest of solutions, but ideally I'd like something that firmly stands by security.

share|improve this question
add comment

2 Answers

There are other alternatives for general WAF (IDS/IPS) like usage, but these depend on your needs. Offhand there is PHPIDS (PHP), WebCastellum (java) and OWASP ESAPI. I have only really used ModSecurity though (I used to be the maintainer). Unfortunately, there are just not any good alternatives if you want to apply regex to the POST payload. Hopefully there will be in the near future. :)

What do you find cumbersome exactly? Perhaps that will shed some light on your wants/needs.

share|improve this answer
    
I'm seeing some segmentation faults with 2.5.13 on Apache 2.2.17 that I'm investigating; but there are additional complexities with building it in my environment make my life difficult. –  Tyler Szabo Dec 7 '10 at 1:55
add comment

@Tyler - have you sent your issues to the mod-security-users public mail-list or opened a Jira ticket (https://www.modsecurity.org/tracker/)?

share|improve this answer
    
Not yet; before I do that I want to be convinced that the problem isn't on my end. –  Tyler Szabo Dec 7 '10 at 18:32
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.