From owner-freebsd-questions@FreeBSD.ORG  Sat Jul 14 10:18:31 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 704C816A400
	for <freebsd-questions@freebsd.org>;
	Sat, 14 Jul 2007 10:18:31 +0000 (UTC)
	(envelope-from bazy@goofy.celuloza.ro)
Received: from goofy.celuloza.ro (goofy.celuloza.ro [89.137.178.124])
	by mx1.freebsd.org (Postfix) with ESMTP id 2C23A13C46B
	for <freebsd-questions@freebsd.org>;
	Sat, 14 Jul 2007 10:18:30 +0000 (UTC)
	(envelope-from bazy@goofy.celuloza.ro)
Received: from [192.168.0.3] (unknown [192.168.0.3])
	(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by goofy.celuloza.ro (Postfix) with ESMTP id 683CF61C114
	for <freebsd-questions@freebsd.org>;
	Sat, 14 Jul 2007 13:03:26 +0300 (EEST)
Message-ID: <46989F6C.9030802@goofy.celuloza.ro>
Date: Sat, 14 Jul 2007 13:03:24 +0300
From: Bazy <bazy@goofy.celuloza.ro>
User-Agent: Thunderbird 2.0.0.4 (Windows/20070604)
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: mod_security2
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Jul 2007 10:18:31 -0000

Hi guys,

Do any of you use mod_security2?

An article just came up on HowToForge about it, and I'm skeptic about installing it on my FreeBSD box.
Is mod_security2 ok? Will it load the CPU? Will it make apache22 slow?

http://www.howtoforge.com/apache2_mod_security_debian_etch "ModSecurity is an Apache module that provides intrusion detection and prevention for web applications. It aims at shielding web applications from known and unknown attacks, such as SQL injection attacks, cross-site scripting, path traversal attacks, etc."