Portal Home > Knowledgebase > Articles Database > where do you get mod_sec rules?
where do you get mod_sec rules?
Posted by MikeSpenclers, 08-21-2012, 02:04 PM |
i have a vps server and wondering what are some good mod_sec rules for mass hosting setups? any place i can get them?
|
Posted by fabin, 08-21-2012, 03:56 PM |
Check from owasp.org and atomiccorp.
http://www.atomicorp.com/wiki/index....Security_Rules
|
Posted by brianoz, 08-21-2012, 04:09 PM |
there's a free set called ASL that everyone uses - you have to disable a few to make life workable, but they're overall pretty good. They have a paid set which is more up to date, the free set gets delayed changes.
|
Posted by HSN-Saman, 08-21-2012, 04:50 PM |
gotroot - get paid rules
but delayed one is fine too as we've used and there weren't any problem so far.
and be aware that mod sec with gotroot rules impact your website load alot if you're on a vps with low resource ...
-Saman
|
Posted by TravisT-[SSS], 08-22-2012, 04:43 PM |
Just to remove confusion, GotRoot became atomicorp for those who don't know.
|
Add to Favourites Print this Article
Also Read
Mysql query (Views: 736)