Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I was looking at all the owasp rules for mod_security. How badly does it slow your loading time down if you use them all?

What would be the recommended packages to use? I want to mostly block bad UA, SQL and XSS attacks.

share|improve this question

closed as not constructive by Michael Hampton, John Gardeniers, HopelessN00b, Iain Oct 31 '12 at 16:35

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
It's up to you to benchmark this on your system if you want any meaningful information. –  John Gardeniers Oct 31 '12 at 6:36

1 Answer 1

up vote 1 down vote accepted

I went through adding the rules from the Core Rule Set in one at a time and watching closely for false positives. Plenty of the SQL and XSS rules cause false positives, depending on what your URLs look like.

As for slowing down the page loads, the audit log has timing information but I've not yet seen a whole millisecond caused by mod_security. I wouldn't worry too much about that.

As John said, both of these result may be different on your systems with your website.

share|improve this answer
    
So the real issue will mostly be false positives then time loads. –  Thompson Smith Oct 31 '12 at 15:34

Not the answer you're looking for? Browse other questions tagged or ask your own question.