Re: [mod-security-users] Squid+mod_security

[Ryan B. <RBa...@tr...>]

On 8/31/10 10:45 AM, "Christian Bockermann" <ch...@jw...> wrote:

> I am not aware of that, but was recently thinking about the exact same
> thing. Would be absolutely a great thing.
> 
> As far as I am aware of, Brian et. al. have in their recent work focused
> on decoupling ModSecurity from Apache, but I doubt that there is a working
> solution, yet.
> 
> Am I right, Brian? ;-)
> 

Christian is correct in that ModSecurity is currently only available as an
Apache module.  We do have roadmap items, however, to port ModSec over to
other other web servers (IIS, SunOne, etc... And perhaps Squid should be in
the mix).  Eventually, we would like to get ModSecurity to be a stand-alone
library that could plug into almost anything - such as an out-of-line IDS
such as Snort.

We have a new ModSec Dev lead coming onboard soon at Trustwave so we should
see some movement on the roadmap items.

-Ryan

> Chris
> 
> 
> Am 31.08.2010 um 12:19 schrieb Georges Smith:
> 
>> Hi 
>> 
>> Is there any possibility to plug mod_security with squid as a reverse proxy ?
>> 
>> Thanks,
>> 
>> Georges
>> 
----------------------------------------------------------------------------->>
-
>> This SF.net Dev2Dev email is sponsored by:
>> 
>> Show off your parallel programming skills.
>> Enter the Intel(R) Threading Challenge 2010.
>> http://p.sf.net/sfu/intel-thread-sfd_________________________________________
>> ______
>> mod-security-users mailing list
>> mod...@li...
>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>> Commercial ModSecurity Appliances, Rule Sets and Support:
>> http://www.modsecurity.org/breach/index.html
> 
> 
> ------------------------------------------------------------------------------
> This SF.net Dev2Dev email is sponsored by:
> 
> Show off your parallel programming skills.
> Enter the Intel(R) Threading Challenge 2010.
> http://p.sf.net/sfu/intel-thread-sfd
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Appliances, Rule Sets and Support:
> http://www.modsecurity.org/breach/index.html
> 


--
Ryan Barnett
Senior Security Researcher
Trustwave - SpiderLabs
Email: rba...@tr...
Phone: (703) 794-2248
Cell: (571) 382-0476
www.trustwave.com

This transmission may contain information that is privileged, confidential,
and/or exempt from disclosure under applicable law. If you are not the
intended recipient, you are hereby notified that any disclosure, copying,
distribution, or use of the information contained herein (including any
reliance thereon) is STRICTLY PROHIBITED. If you received this transmission
in error, please immediately contact the sender and destroy the material in
its entirety, whether in electronic or hard copy format. Thank you.