Hi Dragan Dosen.

Dragan Dosen <[email protected]> have written on Mon, 29 May 2017
15:56:06 +0200:

> Hi Aleksandar,
> 
> Thank you for your comments and feedback.
> 
> 
> On 29.5.2017. 14:58, Aleksandar Lazic wrote:
> > 
> > Is there a comparison table what's the difference between mod
> > defender and mod security?
> >   
> 
> Not really, as far as I know. But existing comparisons of ModSecurity
> and Naxsi functionality can be found.

I added this links to my README in the repo

https://www.haproxy.com/blog/high-performance-waf-platform-with-naxsi-and-haproxy/
thanks Baptiste ;-)

http://blog.memze.ro/?p=39
https://geekflare.com/open-source-web-application-firewall/

> > 
> > Some feedback.
> > 
> > I have tried to build it on centos latest and got the following
> > error.
> > 
> > ###
> > + make MOD_DEFENDER_SRC=/usr/src/mod_defender
> > APACHE2_INC=/usr/include/httpd APR_INC=/usr/include/apr-1

[snipp]

> That's probably because you're using gcc/g++ version 4.8.2 and >= 4.9
> is required for Mod Defender, since it uses std::regex.

Yep that was it.

[root@188f1bea6edb /]# /usr/local/bin/defender -f naxsi_core.rules
1496068005.222163 [00] Defender active on server 188f1bea6edb: 42
MainRules loaded 1496068005.222287 [00] Defender scanner disabled for
loc / 1496068010.228776 [01] 0 clients connected
1496068010.241821 [02] 0 clients connected

How about to add a -v or --version to the defender, I thought this also
for the modsecurity contrib but forgotten to write.

Does it makes sense to combine mod_defender and mod_security?

> Best regards,
> Dragan Dosen

Cheers
Aleks

Reply via email to