On our ASL boxes, mod_security is up to:
mod_security-2.8.0-24.el5
released shortly after the -23 revision.
On .23 it appears that mod_security was 2.8.x as some of the deprecated configs in the conf file were updated as well. The -24 revision appears to have gone back to a 2.7.x engine (with back ports perhaps) so said deprecated configs are back to what they were.
The latest revision for our rules only boxes appears to be the -23 revision.
Just checking to see if the -24 revision is forthcoming for rules only setups (in case there was some issue with 2.8.x versus the apparent back port).
Thanks.
mod_security Question
-
- Atomicorp Staff - Site Admin
- Posts: 8355
- Joined: Wed Dec 31, 1969 8:00 pm
- Location: earth
- Contact:
Re: mod_security Question
Due to some lingering bugs with 2.8 (even with backports from git) we decided to revert to 2.7.7 for the time being
Re: mod_security Question
Thanks.
So for rules only boxes, is 2.8.0-23, 2.7.x or 2.8.x based? Just want to make sure it is 2.7.x for rules only boxes since it appeared to be 2.8.x based for -23 on ASL boxes. If so, then we'll wait for the -24 update before we update.
So for rules only boxes, is 2.8.0-23, 2.7.x or 2.8.x based? Just want to make sure it is 2.7.x for rules only boxes since it appeared to be 2.8.x based for -23 on ASL boxes. If so, then we'll wait for the -24 update before we update.
-
- Atomicorp Staff - Site Admin
- Posts: 8355
- Joined: Wed Dec 31, 1969 8:00 pm
- Location: earth
- Contact:
Re: mod_security Question
Use 2.7.7 or 2.8.0-24, they're the same thing, just versioned differently.
Re: mod_security Question
Thanks.