today I've downloaded the latest ModSec archive. Before 2.5.11 most configuration
was done in modsecurity_crs_10_config.conf
>From 2.5.12 on a lot of settings from modsecurity_crs_10_config.conf was moved/is
now found to/in "modsecurity.conf-minimal". That makes updating quite challenging.
So, what is the preferred installation layout for ModSec if you're using self-compiled
ModSec base-path: /usr/local/apache2/conf/modsecurity
And in this directory i only have the following files:
modsecurity_crs_10_config.conf <- the "main" configuration
modsecurity_crs_50_company.conf <- "custom rules"
If i compare my modsecurity_crs_10_config.conf with the "new one" from 2.5.12 a lot
of stuff is now found in modsecurity.conf-minimal. Still confusing for me. Should
i start using modsecurity.conf-minimal and move the relevant variables to this file
Still confused ;D