Dear all, The CRS 3.0.0-dev is in the making bringing a lot of new features and new rules. I tried to understand the differences and wrote a blog post about it.
https://www.netnea.com/cms/2015/12/20/modsec-crs-2-2-x-vs-3-0-0-dev/ If you are using the core rules, this will interest you. There are nice new rules, but based on my tests, it looks like we are also losing a lot of alerts. I would love to have your feedback on this. Ideally here on the mailinglist, but feel free to ping me via mail or twitter. Christian Folini, @ChrFolini -- Seek simplicity, and distrust it. -- Alfred North Whitehead _______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
