Modsecurity crs 10 config.conf - Revision history

Rcbarnett at 16:11, 6 August 2009

2009-08-06T16:11:11Z

Rcbarnett at 16:10, 6 August 2009

2009-08-06T16:10:09Z

Rcbarnett at 16:09, 6 August 2009

2009-08-06T16:09:22Z

Rcbarnett: Created page with '# The directives within this file can be included within # Virtual Host containers. # # Configuration contained in this file should be customized # for your specific requirements…'

2009-08-06T16:04:05Z

Created page with '# The directives within this file can be included within # Virtual Host containers. # # Configuration contained in this file should be customized # for your specific requirements…'

New page

# The directives within this file can be included within
# Virtual Host containers.
#
# Configuration contained in this file should be customized
# for your specific requirements before deployment.
#
# Next to each rule there is a description of what it does. Each
# location where customization is needed is marked with "TODO". It
# is recommended that you:
#
# 1) Keep a copy of the original file. This will allow you to use
# the "diff" command to quickly see the changes. It will also
# make upgrades to future rule sets easier.
#
# 2) Document your changes thoroughly.
#
# You are advised to start with ModSecurity in detection mode only.
# Switch to protection when you are comfortable with your rule set.
# For maximum protection monitor your logs on daily basis (or
# better).
#

← Older revision		Revision as of 16:11, 6 August 2009
Line 22:		Line 22:

	See the [http://www.modsecurity.org/documentation/modsecurity-apache/2.5.9/modsecurity2-apache-reference.html \| ModSecurity Reference Manual] for directive documentation.		See the [http://www.modsecurity.org/documentation/modsecurity-apache/2.5.9/modsecurity2-apache-reference.html \| ModSecurity Reference Manual] for directive documentation.
		+
		+	{{:Key Project Information:OWASP ModSecurity Core Rule Set Project}}
		+	[[Category:OWASP Project]]
		+	[[Category:OWASP Document]]
		+	[[Category:OWASP Alpha Quality Document]]

← Older revision		Revision as of 16:10, 6 August 2009
Line 21:		Line 21:
	SecTmpDir		SecTmpDir

−	See the [[http://www.modsecurity.org/documentation/modsecurity-apache/2.5.9/modsecurity2-apache-reference.html \| ModSecurity Reference Manual]] for directive documentation.	+	See the [http://www.modsecurity.org/documentation/modsecurity-apache/2.5.9/modsecurity2-apache-reference.html \| ModSecurity Reference Manual] for directive documentation.

@@ Line 1: / Line 1: @@
-# The directives within this file can be included within
+The data within this conf file may be specified within Apache virtual host containers.  The following ModSecurity directives are set within this file -
-# Virtual Host containers.
+ SecRuleEngine
-# Configuration contained in this file should be customized
+ SecRequestBodyAccess
-# for your specific requirements before deployment.
+ SecResponseBodyAccess
+ SecResponseBodyMimeType
-# Next to each rule there is a description of what it does. Each
+ SecResponseBodyLimit
-# location where customization is needed is marked with "TODO". It
+ SecResponseBodyLimitAction
-# is recommended that you:
+ SecDefaultAction
+ SecUploadDir
-#  1) Keep a copy of the original file. This will allow you to use
+ SecUploadKeepFiles
-#     the "diff" command to quickly see the changes. It will also
+ SecAuditEngine
-#     make upgrades to future rule sets easier.
+ SecAuditLogRelevantStatus
+  SecAuditLogType
-#  2) Document your changes thoroughly.
+ SecAuditLog
+ SecAuditLogParts
-# You are advised to start with ModSecurity in detection mode only.
+ SecCookieFormat
-# Switch to protection when you are comfortable with your rule set.
+  SecRequestBodyInMemoryLimit
-# For maximum protection monitor your logs on daily basis (or
+ SecDebugLog
-# better).
+ SecDebugLogLevel
+ SecTmpDir