mod-security-users

[mod-security-users] Failing tests in 1.7.1

[<bru...@li...>]

During debianization of mod-security 1.7.1 I saw that the following
tests are failing:

44-normalisation-bug.test
47-action-allow.test
48-chained-rules-1.test
53-cookie-1.test
55-cookie-3.test
56-cookie-4.test

Any reason for this or am I doing something wrong ?

For example, test 47:
# 47 test action "allow" (requires 200)
#
#
GET /cgi-bin/modsec-test.pl/keyword?p=secret HTTP/1.0

but in http-full, this url is configured to always failed due to:
    SecFilter "/cgi-bin/modsec-test.pl/keyword"


Thanks

Re: [mod-security-users] Failing tests in 1.7.1

[Ivan R. <iv...@we...>]

Bruno Rodrigues wrote:

> During debianization of mod-security 1.7.1 I saw that the following
> tests are failing:

    That's my fault, I forgot to update the configuration file to
    the last version. Try with the attachment, and I'll add the
    configuration to the CVS to avoid this in the future.

    I need to reorganize my regression tests anyway. In the beginning
    I just made them up as I went along but now there are over 50
    tests and they need to be documented, arranged in an order
    that makes sense, etc.

    PS. Test #36 should fail because you are not on Windows.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]

[mod-security-users] Re: Failing tests in 1.7.1

[<bru...@li...>]

Ivan Ristic <iv...@we...> wrote:
> [-- text/plain, encoding 7bit, charset: us-ascii, 22 lines --]
> 
> Bruno Rodrigues wrote:
> 
>> During debianization of mod-security 1.7.1 I saw that the following
>> tests are failing:
> 
>    That's my fault, I forgot to update the configuration file to
>    the last version. Try with the attachment, and I'll add the
>    configuration to the CVS to avoid this in the future.

;) It works perfectly


>    PS. Test #36 should fail because you are not on Windows.

Already disabled


Can I please ask you to announce new releases in this mailing list or,
if possible, send me a notice so I can update Debian package when new
versions if available. 
I've had to skip version 1.6 because you had 1.5 on
your old domain and I haven't looked at new modsecurity.org

New Debian package are available at http://www.litux.org/debian/unstable
and will be uploaded to Debian's main repository in a while...

Thanks Ivan.

Re: [mod-security-users] Re: Failing tests in 1.7.1

[Ivan R. <iv...@we...>]

> Can I please ask you to announce new releases in this mailing list or,
> if possible, send me a notice so I can update Debian package when new
> versions if available. 

   Of course. I will crate another list, purely for announcements, and
   add your email address to it.


> I've had to skip version 1.6 because you had 1.5 on
> your old domain and I haven't looked at new modsecurity.org
> 
> New Debian package are available at http://www.litux.org/debian/unstable
> and will be uploaded to Debian's main repository in a while...

   Great, thanks a lot!

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]