Hi yes i noticed this however mod sec is now logging everything ,
404's, missing favion.ico files etc into the audit log.
Ryan Barnett wrote:
***Save
the date: ModSecurity v2.0 live online
event on December 7 – www.breach.com.
New features, 1.9 migration info, Core rule set overview and top
questions
answered. More info to come.***
The
DynamicOnly mode of operation
for the AuditEngine has been depreciated as of 1.9.3. See the
ModSecurity
reference manual - http://www.modsecurity.org/documentation/modsecurity-apache/1.9.3/html-multipage/07-logging.html#N10A01.
In the 2.X version, you can choose Off, On or RelevantOnly.
--
Ryan C.
Barnett
Breach Security:
Director of Application Security
Training
Web Application Security Consortium (WASC) Member
CIS Apache Benchmark Project Lead
SANS Instructor, GCIA, GCFA, GCIH, GSNA, GCUX, GSEC
Author: Preventing Web Attacks with Apache
Hi, ive been trying to
attempt to find a way for mod
sec 2 to work in DynamicOnly mode, if i put the old directive in
SecFilterEngine DynamicOnly no go. Any ideas ?
|
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV_______________________________________________
mod-security-users mailing list
mod-security-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/mod-security-users
