Dear all, There has been extensive feedback to the draft version of my Core Rules 3.0 tutorial (special thanks to Walter Hop).
So here is the finalised version: https://www.netnea.com/cms/apache-tutorial-7_including-modsecurity-core-rules/ This is written for OWASP ModSecurity Core Rule Set 3.0.0-rc2. RC3 should be out anytime now. I will update accordingly and when the full version comes out (scheduled for November 8), then I'll update again. The differences between rc2 and rc3 and final are minimal. You can try this out immediately without worrying about rules upgrades, etc. Cheers, Christian P.S. There is a Rules Exclusion cheatsheet included in the tutorial. You should check this out. -- https://www.feistyduck.com/training/modsecurity-training-course mailto:christian.fol...@netnea.com twitter: @ChrFolini _______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
