ModSecurity

ModSecurity for Apache User Guide

Version 1.9.3 / (April 10, 2006)


Table of Contents

Introduction
Licensing
Acknowledgements
Contact
Installation
CVS Access
Nightly Snapshot Download
Stable Release Download
Installing from source
Installing from binary
Configuration
Turning filtering on and off
POST scanning
Turning buffering off dynamically
Controlling ModSecurity dynamically
Chunked transfer encoding
Default action list
Implicit validation
Filter inheritance
Filter inheritance In multiuser environments
URL Encoding Validation
Unicode Encoding Validation
Byte range check
Allowing others to see ModSecurity
Rules
Simple filtering
Path normalisation
Null byte attack prevention
Regular expressions
Inverted expressions
Advanced filtering
Argument filtering exceptions
Cookies
Output filtering
Actions
Specifying actions
Per-rule actions
Restricting what can appear in the per-rule action list
Built-in actions
Request headers added by mod_security
Logging the request body
Handling rule matches using ErrorDocument
Making ModSecurity talk to your firewall
Special Features
File upload support
Server identity masking
Chroot support
Logging
Debug Log
Audit logging
Guardian log
Custom logging
Miscellaneous Topics
Impedance mismatch
Testing
Solving Common Security Problems
PHP
Performance
Important notes
Changing the Apache hook at which mod_security runs
Examples
Parameter checking
File upload
Securing FormMail
Appendix A: Recommended Configuration