Same here, tho Debian Squeeze. We even backported a more recent version from 
wheezy a while back, but it's too much for us to keep up with constantly doing 
that on our own.

Thanks,
Brian  

Sent from my mobile device. 

----- Reply message -----
From: "Gjorgji Zarezankov" <gjorg...@paymentus.com>
Date: Fri, Aug 10, 2012 08:49
Subject: [mod-security-users] Using the latest ModSecurity Versions
To: "Ryan Barnett" <rbarn...@trustwave.com>, 
<mod-security-us...@lists.sourceforge.net>, 
<owasp-modsecurity-core-rule-set@lists.owasp.org>

In our case its exactly that: We use SUSE SELS 11 SP and latest version
available from there repositories is 2.5.6.



*From:* Ryan Barnett [mailto:rbarn...@trustwave.com]
*Sent:* Friday, August 10, 2012 9:38 AM
*To:* mod-security-us...@lists.sourceforge.net;
owasp-modsecurity-core-rule-set@lists.owasp.org
*Subject:* [mod-security-users] Using the latest ModSecurity Versions



Question for the lists – if you are not running the latest version of
ModSecurity (v.2.6.7), what are the reasons why you have not upgraded?



I ask this question because we are constantly adding new features to
ModSecurity that can then be leveraged with the OWASP ModSecurity CRS.  For
example, we have added some new actions:

   - ver – which will hold the rule package data.  Example -
   "id:'959901',ver:'OWASP_CRS/2.2.5',…"
   - maturity – which will give the user a better idea of how well tested
   the rule is.  Example - "id:'959901',ver:'OWASP_CRS/2.2.5',maturity:'9'…"
- accuracy – wh
_______________________________________________
Owasp-modsecurity-core-rule-set mailing list
Owasp-modsecurity-core-rule-set@lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set

Reply via email to