Re: [Mod-security-developers] Positive filter modelization proposal

[Ivan R. <iv...@we...>]

Vincent Deffontaines wrote:
> Greetings,
> 
> Here is a suggestion of XML modelization for an HTTP filter, based on a
> positive model (ie, not blacklisting known attacks, but rather accepting
> only known, validated good requests). This model is heavily inspired
> from Ivan's publication of november 2005.

  I am somewhat confused. You took my work, changed it heavily, and
  now you are sending it back to me as your proposal. Wouldn't it
  have been better to point to the inefficiencies of my work so that
  we can improve it through discussion?

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall
Apache Security (O'Reilly): http://www.apachesecurity.net