Re: [mod-security-users] Rules database

[Javier Fernandez-S. <jfe...@ge...>]

Christian Martorella wrote:

> Hi Roman:
> When i tried the modsecurity, i used a script to convert snort rules to 
> modsecurity rules, maybe you could do that to initialize your rules 
> database, and then optimize the set of rules.
> 

Unfortunately, that script does not work as expected and cleaning up 
is time consuming. I sent a patch to the list a while back that Ivan 
applied to the CVS, I would suggest you used 
http://cvs.sourceforge.net/viewcvs.py/mod-security/mod_security/util/ 
instead.

BTW, I also sent a while back (October last year [1]) a script to 
convert Nessus NASL plugins into modsecurity rules, it needs to be 
improved upon, but could also prove useful.

Regards

Javier

[1]Message-ID: <418...@ge...>