Here you go -
# dpkg -p libapache-mod-security
Package: libapache-mod-security
Priority: optional
Section: httpd
Installed-Size: 328
Maintainer: Ubuntu Developers <ubu...@li...>
Architecture: i386
Version: 2.5.11-1
Replaces: libapache2-mod-security2
Provides: libapache2-mod-security2
Depends: mod-security-common (= 2.5.11-1), apache2.2-common, libxml2 (>=
2.7.4), libc6 (>= 2.4), liblua5.1-0, libpcre3 (>= 7.7)
Size: 113548
Description: Tighten web applications security for Apache
Mod_security is an Apache module whose purpose is to tighten the Web
application security. Effectively, it is an intrusion detection and
prevention
system for the web server.
.
At the moment its main features are:
* Audit log; store full request details in a separate file, including
POST
payloads.
* Request filtering; incoming requests can be analysed and offensive
requests
can be rejected (or simply logged, if that is what you want). This
feature
can be used to prevent many types of attacks (e.g. XSS attacks, SQL
injection, ...) and even allow you to run insecure applications on
your
servers (if you have no other choice, of course).
.
In addition to this package the mod-security-common package, which
includes
documentation and configuration examples, will be installed.
Original-Maintainer: Alberto Gonzalez Iniesta <ag...@in...>
On 3/17/12 7:39 PM, "Alberto Gonzalez Iniesta" <ag...@in...> wrote:
>My debs are the ones shipped with Debian. No need to add an extra repo.
>Could you send me (off-list) the output from 'dpkg -p
>$(YOUR_MODSEC_PACKAGE)?
>2.5.12 was present in Squeeze and still called libapache2-mod-security2,
>it shoud have Lua support.
>
>
>On Sat, Mar 17, 2012 at 12:39:19PM -0500, Ryan Barnett wrote:
>> No nothing specific. I was just testing the v2.5.12 version I got after
>>apt-get install libapache2-modsecurity and it didn't have Lua support.
>>
>> Perhaps I should add your repo to my sources.list file... What is your
>>deb?
>>
>> Ryan
>>
>> On Mar 17, 2012, at 1:35 PM, "Alberto Gonzalez Iniesta"
>><ag...@in...> wrote:
>>
>> > Hi Ryan,
>> >
>> > Yes. Anything I should be careful with?
>> >
>> > Regards,
>> >
>> > Alberto
>> >
>> > On Sat, Mar 17, 2012 at 11:22:55AM -0500, Ryan Barnett wrote:
>> >> Alberto,
>> >> When you create the ModSecurity package, do you add Lua support?
>> >>
>> >> Ryan
>> >>
>> >> On Mar 16, 2012, at 9:53 AM, "Alberto Gonzalez Iniesta"
>><ag...@in...> wrote:
>> >>
>> >>> Hi,
>> >>>
>> >>> Tarball for 2.6.4 contains apache2/modsecurity_config_auto.h. This
>>file
>> >>> is removed on "make distclean", which in turn messes up with those
>> >>> dealing with the sources on a VCS (i.e. git) for packaging. Could
>>it be
>> >>> removed (as it was before 2.6.4) in next releases?
>> >>>
>> >>> Thanks a lot,
>> >>>
>> >>> Alberto
>> >>>
>> >>> --
>> >>> Alberto Gonzalez Iniesta | Formación, consultoría y soporte
>>técnico
>> >>> agi@(inittab.org|debian.org)| en GNU/Linux y software libre
>> >>> Encrypted mail preferred | http://inittab.com
>> >>>
>> >>> Key fingerprint = 9782 04E7 2B75 405C F5E9 0C81 C514 AF8E 4BA4 01C3
>> >>>
>> >>>
>>-------------------------------------------------------------------------
>>-----
>> >>> This SF email is sponsosred by:
>> >>> Try Windows Azure free for 90 days Click Here
>> >>> http://p.sf.net/sfu/sfd2d-msazure
>> >>> _______________________________________________
>> >>> mod-security-developers mailing list
>> >>> mod...@li...
>> >>> https://lists.sourceforge.net/lists/listinfo/mod-security-developers
>> >>> ModSecurity Services from Trustwave's SpiderLabs:
>> >>> https://www.trustwave.com/spiderLabs.php
>> >>>
>> >>
>> >> This transmission may contain information that is privileged,
>>confidential, and/or exempt from disclosure under applicable law. If you
>>are not the intended recipient, you are hereby notified that any
>>disclosure, copying, distribution, or use of the information contained
>>herein (including any reliance thereon) is STRICTLY PROHIBITED. If you
>>received this transmission in error, please immediately contact the
>>sender and destroy the material in its entirety, whether in electronic
>>or hard copy format.
>> >>
>>-------------------------------------------------------------------------
>>-----
>> >> This SF email is sponsosred by:
>> >> Try Windows Azure free for 90 days Click Here
>> >> http://p.sf.net/sfu/sfd2d-msazure
>> >> _______________________________________________
>> >> mod-security-developers mailing list
>> >> mod...@li...
>> >> https://lists.sourceforge.net/lists/listinfo/mod-security-developers
>> >> ModSecurity Services from Trustwave's SpiderLabs:
>> >> https://www.trustwave.com/spiderLabs.php
>> >
>> > --
>> > Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico
>> > agi@(inittab.org|debian.org)| en GNU/Linux y software libre
>> > Encrypted mail preferred | http://inittab.com
>> >
>> > Key fingerprint = 9782 04E7 2B75 405C F5E9 0C81 C514 AF8E 4BA4 01C3
>> >
>> >
>>-------------------------------------------------------------------------
>>-----
>> > This SF email is sponsosred by:
>> > Try Windows Azure free for 90 days Click Here
>> > http://p.sf.net/sfu/sfd2d-msazure
>> > _______________________________________________
>> > mod-security-developers mailing list
>> > mod...@li...
>> > https://lists.sourceforge.net/lists/listinfo/mod-security-developers
>> > ModSecurity Services from Trustwave's SpiderLabs:
>> > https://www.trustwave.com/spiderLabs.php
>> >
>>
>> This transmission may contain information that is privileged,
>>confidential, and/or exempt from disclosure under applicable law. If you
>>are not the intended recipient, you are hereby notified that any
>>disclosure, copying, distribution, or use of the information contained
>>herein (including any reliance thereon) is STRICTLY PROHIBITED. If you
>>received this transmission in error, please immediately contact the
>>sender and destroy the material in its entirety, whether in electronic
>>or hard copy format.
>>
>>-------------------------------------------------------------------------
>>-----
>> This SF email is sponsosred by:
>> Try Windows Azure free for 90 days Click Here
>> http://p.sf.net/sfu/sfd2d-msazure
>> _______________________________________________
>> mod-security-developers mailing list
>> mod...@li...
>> https://lists.sourceforge.net/lists/listinfo/mod-security-developers
>> ModSecurity Services from Trustwave's SpiderLabs:
>> https://www.trustwave.com/spiderLabs.php
>
>--
>Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico
>agi@(inittab.org|debian.org)| en GNU/Linux y software libre
>Encrypted mail preferred | http://inittab.com
>
>Key fingerprint = 9782 04E7 2B75 405C F5E9 0C81 C514 AF8E 4BA4 01C3
>
>--------------------------------------------------------------------------
>----
>This SF email is sponsosred by:
>Try Windows Azure free for 90 days Click Here
>http://p.sf.net/sfu/sfd2d-msazure
>_______________________________________________
>mod-security-developers mailing list
>mod...@li...
>https://lists.sourceforge.net/lists/listinfo/mod-security-developers
>ModSecurity Services from Trustwave's SpiderLabs:
>https://www.trustwave.com/spiderLabs.php
>
This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.
|