Re: [mod-security-users] alternatives for waf-fle

[Christian F. <chr...@ne...>]

Hey ASPA Engineering,

Please do not use this mailinglist for marketing purposes.

I was ready to pick apart your offering but then I saw that you
misspelled "Introduction" on your website and I do not think it
fair to dig too deep.

What is interesting, though, is that you are remarkably silent about
the rule set your selling / licensing despite a lot of documentation
about your offering.

Care to name that?

Regs,

Christian Folini

On Sat, Mar 23, 2024 at 05:49:17PM +0330, ASPA Engineering wrote:
> Why not use integrated platforms like ngmod.com?
> 
> Are you tired of dealing with ModSecurity scripting and command-line
> interfaces? Do you need a user-friendly tool to easily configure and deploy
> Nginx with ModSecurity through a graphical interface? Look no further than
> ngmod.com, where we provide an all-in-one platform that automates Nginx and
> ModSecurity configuration.
> 
> Say goodbye to false positives with our built-in pruning wizard, which
> adjusts settings based on your web application's statistics. Our
> comprehensive logging system captures events triggered by ModSecurity,
> ensuring that you have detailed information at your fingertips.
> Additionally, every user transaction is logged in the access log, even if
> it's not flagged as malicious.
> 
> But that's not all. Our platform features an advanced analyzer that
> generates statistical diagrams, giving you valuable insights into your
> website's security and performance.
> 
> The best part? It's absolutely free to get started, and we value your
> feedback. Simply register at waf.ngmod.com and reach out to us via email.
> We can't wait to hear from you and help you streamline your Nginx and
> ModSecurity configuration process.
> 
> On Wed, Mar 20, 2024, 23:25 Hans Mayer via mod-security-users <
> mod...@li...> wrote:
> 
> >
> >
> > Dear All,
> >
> > not sure if everyone realised that there is a new fork of waf-fle
> >
> > https://github.com/LucaRastrelli/waf-fle
> >
> > It supports PHP 8.2 and MySQL 8
> >
> > Sorry for this slightly off-topic message, but there is no dedicated
> > waf-fle mailing list and mod-sec without any useful possibility to view
> > the logs makes no sense.
> >
> > // Hans
> >
> > --
> >
> >
> > On 07.02.24 23:15, Hans Mayer via mod-security-users wrote:
> > >
> > > Dear All,
> > >
> > > Over years I am using modsec and Apache with mlogc sending the alerts
> > > to waf-fle.
> > >
> > > With the last upgrade to Debian bookworm and PHP 8.2 waf-fle by
> > > klaubert doesn't work any more.
> > >
> > > Actually I am wondering how long it was running as the last update is
> > > 10 years ago.
> > >
> > > Now I am looking for an alternative to view the alert logs.
> > >
> > > I liked waf-fle as it didn't use a lot of resources. Is there
> > > something similar available ?
> > >
> > >
> > > // Hans
> > >
> >
> >
> > _______________________________________________
> > mod-security-users mailing list
> > mod...@li...
> > https://lists.sourceforge.net/lists/listinfo/mod-security-users
> > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> > http://www.modsecurity.org/projects/commercial/rules/
> > http://www.modsecurity.org/projects/commercial/support/
> >


> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/