Re: [mod-security-users] Using Mod-Sec Snort

[Ivan R. <iv...@we...>]

cerial01 wrote:
> Is there some way to call the mod-sec snort rules from a
> remote directory? With the mod-sec snort rules added to the httpd.conf
> file, it makes the file quite large.  I'd like to move the snort
> rules to it's own directory (have the httpd.conf file point the
> mod_security to the remote mod-sec snort file) for ease of
> administration and so the script I have written will update
> them when snort updates their rules.

  Sure, put them in a separate file and include them from httpd.conf
  with "Include conf/modsecrules.conf". The "Include" directive can
  import whole folders too, so you can have your rules in several
  files if you want:

  http://httpd.apache.org/docs/mod/core.html#include

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]