[mod-security-users] byterange, modules

[ms <ma...@ms...>]

=0D=0Ahi guys,

this is my first post here, so blame me for funny
english and/or stupid questions...

First: great work! mod_security rocks! I installed
a couple of proxies with it and I like it very much.

Here are my questions you can of course answer:

1. Is it (will it be) possible to have a couple of
SecFilterForceByteRange statements? For p.e. german
sites you have to allow almost the complete range
(the lower one for web forms - tab, crlf, etc and
the higher one for the special characs)? At the
moment, I have to use a lot of SecFilterSelective
statements instead.

2. Do I need certain apache modules for some
functions to work? Even with

SecFilterOutputMimeTypes "(null) text/html text/plain"

all my OUTPUT filters do not work any more. When
uncommenting this one, they work fine. I also have a
problem with the SecServerSignature statement, both
the proxy and the real servers have ServerTokens full
but the server distribution is not masked. Here is my
httpd -l:

Compiled in modules:
  core.c
  mod_access.c
  mod_auth.c
  mod_log_config.c
  mod_setenvif.c
  mod_proxy.c
  proxy_connect.c
  proxy_ftp.c
  proxy_http.c
  prefork.c
  http_core.c
  mod_mime.c
  mod_dir.c
  mod_alias.c
  mod_so.c

I am currently using apache 2.0.48 compiled on my
OpenBSD 3.4 x86 machine, running in systrace jail.


Thanks and have fun!
mark

--=20
mark sprenk   nordring 65   63843 niedernberg
mailto:ma...@ms... pgp:tron.msnx.de/mspgpkey