[BlueOnyx:11926] Re: mod_sec

[Michael Stauber]

Hi Don,

> You learn something new every day. Yesterday it was mod_sec.
> 
> As best I can tell (which isn't saying much sometimes) this is not
> something that is installed within Blue Oynx.
> 
> I'm running a 5108R. Is my above research correct? If so, before I go
> looking into mod_sec, are there any limitations to it being installed on
> the 5108R platform?

Yeah, mod_security is a pretty neat Apache module. I thought of
including it in BlueOnyx in some form or another sometime down the road.
But so far it's not used yet.

The tricky part with such security solutions is always this: What works
well for one person might be too strict for the other, or too lax for
someone else. So usually once mod_security is installed, you'd need to
tweak it's settings to best match your environment and the kind of sites
you run. But it's sure worth a deeper look.

-- 
With best regards

Michael Stauber