<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Gray.me.uk - Tech and Linux Blog &#187; mod_security</title>
	<atom:link href="http://www.gray.me.uk/tags/mod_security/feed" rel="self" type="application/rss+xml" />
	<link>http://www.gray.me.uk</link>
	<description>Wandering tech guy</description>
	<lastBuildDate>Thu, 02 Feb 2012 08:50:44 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>ModSecurity WordPress and Akismet problem</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/modsecurity-wordpress-and-akismet-problem</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/modsecurity-wordpress-and-akismet-problem#comments</comments>
		<pubDate>Fri, 22 May 2009 14:53:29 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[Akismet]]></category>
		<category><![CDATA[mod security]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://www.gray.me.uk/?p=628</guid>
		<description><![CDATA[I got a server 500 Error when accessing the akismet spam filter.  Checking the logs and I could see the error was ModSecurity: Output filter: Response body too large (over limit of 524288, total not specified) To correct this edit this file /etc/httpd/modsecurity.d/modsecurity_crs_10_config.conf Look for the line SecResponseBodyLimit 524288 I just added a leading 1 [...]]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/modsecurity-wordpress-and-akismet-problem/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kaspersky WebSite Database Breached.</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/kaspersky-website-database-breached</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/kaspersky-website-database-breached#comments</comments>
		<pubDate>Mon, 09 Feb 2009 00:33:02 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[database]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[Kaspersky]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.gray.me.uk/?p=571</guid>
		<description><![CDATA[http://www.theregister.co.uk/2009/02/08/kaspersky_compromise_report/ I am only surmising from the limited information I can see here that ModSecurity would have protected them? Comments on this one welcome&#8230; Rule 959001 does seem to cover the &#8220;SelECT&#8221; part of the URL in the screen shots but when I try a random url with this string in it on my website [...]]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/kaspersky-website-database-breached/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mod Security Application Specific Rules</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/mod-security-application-specific-rules</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/mod-security-application-specific-rules#comments</comments>
		<pubDate>Wed, 04 Feb 2009 16:07:40 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>

		<guid isPermaLink="false">http://www.gray.me.uk/?p=529</guid>
		<description><![CDATA[Ofer Shezaf at xiom.com has created a list of Application Specific Rules for ModSecurity. He is actively looking for these rules so it should be updated quite regularly I think. Ofer Shezaf was one of the Team that brought us ModSecurity in the first place although he is no longer there. You can still see [...]]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/mod-security-application-specific-rules/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ModSecurity and PHPMyAdmin</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/modsecurity-and-phpmyadmin</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/modsecurity-and-phpmyadmin#comments</comments>
		<pubDate>Mon, 02 Feb 2009 18:09:45 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>
		<category><![CDATA[PHPMyAdmin]]></category>

		<guid isPermaLink="false">http://www.fulltiming.info/?p=492</guid>
		<description><![CDATA[Too many ModSecurity rules trip up PHPMyAdmin so I decided to find another way to protect it. I personally use the .htaccess password protection and then disable ModSecurity totally for this directory. It is also advisable to use a totally unique directory name so that it can&#8217;t be guessed. Again this goes in modsecurity_crs_15_customrules.conf &#60;LocationMatch [...]]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/modsecurity-and-phpmyadmin/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mod Security and ACatalog Actinic</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-acatalog</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-acatalog#comments</comments>
		<pubDate>Mon, 02 Feb 2009 17:58:52 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[Actinic]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>

		<guid isPermaLink="false">http://www.fulltiming.info/?p=487</guid>
		<description><![CDATA[This is necessary to allow Actinic to work on a shared server. &#60;LocationMatch &#8220;/cgi-bin/ca000001.pl&#8221;&#62; SecRuleRemoveById 950910 &#60;/LocationMatch&#62; &#60;LocationMatch &#8220;/acatalog/&#8221;&#62; SecRuleRemoveById 950910 &#60;/LocationMatch&#62;]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-acatalog/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mod Security and Mambo</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-mambo</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-mambo#comments</comments>
		<pubDate>Mon, 02 Feb 2009 17:56:14 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[Mambo]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>

		<guid isPermaLink="false">http://www.fulltiming.info/?p=483</guid>
		<description><![CDATA[I am managing a bunch of shared hosting servers and I still find clients of this company are installing older version of Mambo. This ModSecurity Rule is essential when you are dealing with a server where clients can install anything they want. This goes in modsecurity_crs_15_custom.conf also SecRule ARGS_NAMES &#8220;mosConfig_absolute_path&#8221; &#8220;deny,log,auditlog,redirect:http://www.google.co.uk&#8221; I redirect to http://www.google.co.uk [...]]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-mambo/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mod security and wordpress the final config</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config#comments</comments>
		<pubDate>Sun, 01 Feb 2009 18:11:34 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[exception]]></category>
		<category><![CDATA[mod security]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://www.fulltiming.info/?p=465</guid>
		<description><![CDATA[Just re-read the title and it sounds like science fiction B movie title.. Oh well. After running this for a while and having played with all the possible options in WordPress here is my final Mod_Security custom file. This is saved as /etc/httpd/modsecurity.d/modsecurity_crs_15_customrules.conf on my system but may be different on yours. &#60;LocationMatch &#8220;/wp-includes/js/tinymce/plugins/spellchecker/rpc.php&#8221;&#62; SecRuleRemoveById [...]]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config/feed</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>Top Security Tips for your own Dedicated Servers or VPS</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/top-security-tips-for-your-own-dedicated-servers-or-vps</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/top-security-tips-for-your-own-dedicated-servers-or-vps#comments</comments>
		<pubDate>Sat, 10 Jan 2009 19:47:57 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mod_security]]></category>
		<category><![CDATA[Securing your server]]></category>
		<category><![CDATA[Server Security]]></category>

		<guid isPermaLink="false">http://www.gray.me.uk/?p=234</guid>
		<description><![CDATA[Top tips to secure your Linux Server]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/top-security-tips-for-your-own-dedicated-servers-or-vps/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Another mod_security exception for WordPress</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/another-mod_security-exception-for-wordpress</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/another-mod_security-exception-for-wordpress#comments</comments>
		<pubDate>Sat, 10 Jan 2009 14:23:06 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[exceptions]]></category>
		<category><![CDATA[mod security]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://www.gray.me.uk/?p=238</guid>
		<description><![CDATA[Mod Security exceptions for WordPress, yet another addition.]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/another-mod_security-exception-for-wordpress/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mod Security and WordPress Exceptions &#8211; The results</title>
		<link>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-exceptions-the-results</link>
		<comments>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-exceptions-the-results#comments</comments>
		<pubDate>Sat, 10 Jan 2009 00:30:10 +0000</pubDate>
		<dc:creator>WanderingTechy</dc:creator>
				<category><![CDATA[Linux Admin]]></category>
		<category><![CDATA[ModSecurity]]></category>
		<category><![CDATA[mod_security]]></category>

		<guid isPermaLink="false">http://www.gray.me.uk/?p=228</guid>
		<description><![CDATA[Fixing WordPress problems caused by Mod_security the result.]]></description>
		<wfw:commentRss>http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-exceptions-the-results/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

