Re: [mod-security-users] IS this firewall code bullet proof

[Jim M. <ji...@in...>]

On Sat, 15 Apr 2006, Thomas Anderson wrote:

> Ivan, for what it's worth, I've found the online documentation to be
> above and beyond what most open-source software provides.  Mod_security
> is fantastic and does just what I need it to.  It is not, and never
> should become, a hobbyist tool.  It is a powerful filter for experienced
> sysadmins.

   I'll second this.  I found mod_security when looking for a way to stop
SMTP header injection attacks against an unsecured PHP script, after
someone used our web server to send mass amounts of spam.  Had it not been
for mod_security, I would have had to seriously consider removing PHP from
my web server.

Jim McCullars
University of Alabama in Huntsville