Re: Upgrading to v3.0.4

Hi Christian

What platform/changes you recommend?

Monah

On Wed, Jan 15, 2020 at 6:37 AM Christian Folini <
[email protected]> wrote:

> Hey Monah,
>
> The developers of ModSecurity consider libModSecurity 3.0.x as stable and
> production ready for use with NGINX. The connector module that links the
> engine with Apache is not deemed stable though. And I can confirm that.
>
> The OWASP ModSecurity Core Rule Set project considers ModSecurity 2.9.x on
> Apache as the reference platform and continues to do so until several
> problems with ModSec3 have been sorted out. One of them is that ModSec3
> is not passing the CRS test suite. It's fairly close with ModSec3 + NGINX,
> but
> there are quite a few open issues with ModSec3 + Apache.
>
> So for the time being, it's best to stay with ModSecurity 2.9 in your
> situation.
>
> I would also advise against a platform change for an existing Apache/ModSec
> setup.
>
> Hope this helps.
>
> Cheers,
>
> Christian
>
>
> On Wed, Jan 15, 2020 at 06:28:11AM -0500, Monah Baki wrote:
> > Hi Christian,
> >
> > Apache :)
> >
> > On Wed, Jan 15, 2020 at 12:06 AM Christian Folini <
> > [email protected]> wrote:
> >
> > > Hey Monah,
> > >
> > > What platform are you working on?
> > >
> > > ModSec3 on Apache is not production ready.
> > >
> > > Cheers,
> > >
> > > Christian
> > >
> > > On Tue, Jan 14, 2020 at 08:31:07PM -0500, Monah Baki wrote:
> > > > Hi all,
> > > >
> > > > Any good documents as to how to upgrade from 2.9.3 on Centos7
> > > >
> > > > Thanks
> > > > Monah
> > >
> > >
> > > > _______________________________________________
> > > > mod-security-users mailing list
> > > > [email protected]
> > > > https://lists.sourceforge.net/lists/listinfo/mod-security-users
> > > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> > > > http://www.modsecurity.org/projects/commercial/rules/
> > > > http://www.modsecurity.org/projects/commercial/support/
> > >
> > >
> > >
> > > _______________________________________________
> > > mod-security-users mailing list
> > > [email protected]
> > > https://lists.sourceforge.net/lists/listinfo/mod-security-users
> > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> > > http://www.modsecurity.org/projects/commercial/rules/
> > > http://www.modsecurity.org/projects/commercial/support/
> > >
>
>
> > _______________________________________________
> > mod-security-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/mod-security-users
> > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> > http://www.modsecurity.org/projects/commercial/rules/
> > http://www.modsecurity.org/projects/commercial/support/
>
>
>
> _______________________________________________
> mod-security-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/