About:
ModSecurity is an intrusion detection and prevention engine for Web applications (sometimes called a Web application firewall). Operating embedded or as part of an Apache reverse proxy, it increases Web application security, protecting Web applications from known and unknown attacks. It is flexible and easy to configure. It monitors HTTP traffic (including POST payloads), detects or prevents attacks, enhances logging, performs anti-evasion, and allows administrators to create custom rules to suit their specific needs. It excels in HTTP traffic monitoring and just-in-time vulnerability patching.

Author:
Ivan Ristic [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.54/10.00 (5 votes)

Homepage:
http://www.modsecurity.org/

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Intended Audience]		Developers, System Administrators
[License]		OSI Approved :: GNU General Public License v2
[Operating System]		OS Independent
[Programming Language]		C
[Topic]		Internet :: WWW/HTTP, Internet :: WWW/HTTP :: HTTP Servers

Dependencies: [change]
Apache (required)
[download links]

 Branches

Branch	Version	Last release	License	URLs
Stable Releases ready for production use.	2.5.5	06-Jun-2008	GNU General Public License v2
Development Releases for those who want to test new features early.	2.5.0-rc4	15-Feb-2008	GNU General Public License v2

 Releases

Version	Focus	Date
2.5.5	Major bugfixes	06-Jun-2008 20:35
2.5.4	Major bugfixes	08-May-2008 17:47
2.5.3	Minor bugfixes	25-Apr-2008 20:28
2.1.7	Minor bugfixes	03-Apr-2008 20:03
2.5.2	Minor bugfixes	03-Apr-2008 20:03
2.5.1	Minor bugfixes	17-Mar-2008 17:52
2.5.0	Major feature enhancements	21-Feb-2008 05:40
2.1.6	Minor bugfixes	21-Feb-2008 00:23
2.1.5	Minor bugfixes	23-Jan-2008 18:29
2.1.2	Minor bugfixes	07-Aug-2007 00:30

 Comments

[»] A Required Apache Module
by MuppetMania - Feb 26th 2004 20:01:43

I'm using this on a number of sites and I recommend anyone else worried about security do the same.

It's got an easy to understand configuration file, it's easy to install and it works exactly as advertised. I've seen a number of hack attempts blocked by this module. I'm running a number of PostNuke sites and I feel more at ease doing so, knowing that a number of the usual exploits of these sites can be blocked with the use of modsecurity.

The author is also very fast to respond to any requests for help and offered me great advice and help with the inital problems I faced (Not reading the manually properly...)

Tim

--
Beer Beer Beer. Drink Some, It's Tasty, Beer.

[reply] [top]