Date: Sat, 14 Jul 2007 16:59:51 +0300 From: Manolis Kiagias <sonicy@otenet.gr> To: Bazy <bazy@goofy.celuloza.ro> Cc: freebsd-questions@freebsd.org Subject: Re: mod_security2 Message-ID: <4698D6D7.2000603@otenet.gr> In-Reply-To: <46989F6C.9030802@goofy.celuloza.ro> References: <46989F6C.9030802@goofy.celuloza.ro>
next in thread | previous in thread | raw e-mail | index | archive | help
Bazy wrote: > Hi guys, > > Do any of you use mod_security2? > > An article just came up on HowToForge about it, and I'm skeptic about installing it on my FreeBSD box. > Is mod_security2 ok? Will it load the CPU? Will it make apache22 slow? > > http://www.howtoforge.com/apache2_mod_security_debian_etch "ModSecurity is an Apache module that provides intrusion detection and prevention for web applications. It aims at shielding web applications from known and unknown attacks, such as SQL injection attacks, cross-site scripting, path traversal attacks, etc." > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > > I used to have mod_security (the original one, not 2) on my debian server. It works great, the increase in security outweighs the few more resources the server needs. Will it slow you down? That depends on your hardware and the amount of traffic you are receiving. Mine was (is) a small web server and there was no noticeable performance penalty from mod_security. And it does all that is promised in the article you found. In fact I was tempted to move to mod_security2 when I upgraded my apache server, but mod_security2 has different directives / rules and could not find a good tutorial at the time to convert my original rules.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4698D6D7.2000603>