Re: [Prelude Hybrid IDS] #216: mod_security cleanup, and compatibility with version 2.0

#216: mod_security cleanup, and compatibility with version 2.0
-------------------------+--------------------------------------------------
 Reporter:  gegomez      |        Owner:  Peter Vrabec <[email protected]>
     Type:  defect       |       Status:  assigned                         
 Priority:  normal       |    Milestone:  Prelude-LML 0.9.13               
Component:  prelude-lml  |      Version:  0.9                              
 Severity:  normal       |   Resolution:                                   
 Keywords:               |  
-------------------------+--------------------------------------------------

Comment(by anonymous):

 > After looking at the issue, it only happen when the mod_security ruleset
 is used along with others ruleset: the problem is that the ModSecurity
 rules ID conflict with other ruleset ID. If running the mod_security
 ruleset by itself:
 >
 > {{{
 > 12 Aug 12:49:07 (process:30577) WARNING: 7 line processed in 0.02
 seconds (358.42 EPS), 7 alert emited.
 > }}}
 >
 > So the mod_security rules ID need to be given an unique range (You can
 use the old assigned range: 31XX).

 Thanks! Now it's working.

 12 Aug 13:20:37 (process:5970) WARNING: 7 line processed in 0.00 seconds
 (3396.41 EPS), 7 alert emited.

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/216#comment:15>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel