- Allow mod_rpaf and mod_extract_forwarded2 to work before ModSecurity.
- Quiet some compiler warnings.
- Cleaned up and clarified some documentation.
- Small performance improvement in memory management for rule execution.
PR: ports/116414
Submitted by: Robin Gruyters <r.gruyters@yirdis.nl>
Approved by: stas (mentor), maintainer timeout (2 weeks)
- Install core rules in DetectionOnly mode with logging in log files only.
If you don't want to install rules, define SKIP_RULES
PR: ports/109855
Submitted by: Ruben van Staveren <ruben at verweg.com>
Approved by: Dominic Mitchell <dom at happygiraffe.net> (maintainer)
ModSecurity is an embeddable web application firewall. It provides
protection from a range of attacks against web applications and allows
for HTTP traffic monitoring and real-time analysis with no changes to
existing infrastructure.
It is also an open source project that aims to make the web application
firewall technology available to everyone.
WWW: http://www.modsecurity.org/
This port will only work with Apache 2.x, this is why it is a new port,
and not an upgrade of the existing www/mod_security.
PR: ports/105339
Submitted By: Dominic Mitchell <dom@happygiraffe.net>
Approved By: flz (mentor)