Re: [mod-security-users] New to mod_security

[Ivan R. <iv...@we...>]

> I was wondering if Ivan Ristic or other experienced mod_security users
> would be kind enough to post something more aggressive than
> httpd.conf.example.minimal but practical/proven enough to use "as-is" on
> a production public web server.

  I don't, at least not at this time. Yours is the first request
  for more aggressive rules :) Most problems I've dealt with in the
  past are with users being over-protective with their servers
  and preventing applications from working properly.

  But I've been thinking about a mod_security HOWTO for some time
  now and I expect to write it fairly soon.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]