From fa6205797d9d09b748603542c1a5c07700bddc32 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Thu, 23 Jun 2022 16:51:42 -0700 Subject: [PATCH 1/2] Update location for core rule set --- example/plugins/lua-api/modsecurity/README.md | 4 ++-- example/plugins/lua-api/modsecurity/owasp.conf | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/example/plugins/lua-api/modsecurity/README.md b/example/plugins/lua-api/modsecurity/README.md index 1b17a4258a3..77ce1b6813e 100644 --- a/example/plugins/lua-api/modsecurity/README.md +++ b/example/plugins/lua-api/modsecurity/README.md @@ -1,7 +1,7 @@ Integrating ATS with ModSecurity V3 using LuaJIT and FFI ==== -Opensource WAF for [Apache Traffic Server](http://trafficserver.apache.org/). +Open source WAF for [Apache Traffic Server](http://trafficserver.apache.org/). Tested with the following ==== @@ -30,7 +30,7 @@ Contents/Rules inside example.conf Working with CRS ==== - - Go to [here](https://github.com/SpiderLabs/owasp-modsecurity-crs) and get release v3.2.0 + - Go [here](https://github.com/coreruleset/coresuleset) and download release v3.3.2 - Uncompress the contents and copy `crs-setup.conf.example` to `/usr/local/var/modsecurity` and rename it to `crs-setup.conf` - Copy all files in `rules` directory to `/usr/local/var/modsecurity/rules` - Copy `owasp.conf` in this repository to `/usr/local/var/modsecurity` diff --git a/example/plugins/lua-api/modsecurity/owasp.conf b/example/plugins/lua-api/modsecurity/owasp.conf index 3162939ef15..98d74ac5f42 100644 --- a/example/plugins/lua-api/modsecurity/owasp.conf +++ b/example/plugins/lua-api/modsecurity/owasp.conf @@ -51,6 +51,7 @@ SecRuleRemoveById 951230 SecRuleRemoveById 951240 SecRuleRemoveById 951250 SecRuleRemoveById 951260 +SecRuleRemoveById 952100 SecRuleRemoveById 952110 SecRuleRemoveById 953100 SecRuleRemoveById 953110 From 64bca6f0e3ecbf96f736cfcba4a9017153b77374 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Fri, 24 Jun 2022 09:55:39 -0700 Subject: [PATCH 2/2] fix typo --- example/plugins/lua-api/modsecurity/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/example/plugins/lua-api/modsecurity/README.md b/example/plugins/lua-api/modsecurity/README.md index 77ce1b6813e..71798ee88ec 100644 --- a/example/plugins/lua-api/modsecurity/README.md +++ b/example/plugins/lua-api/modsecurity/README.md @@ -30,7 +30,7 @@ Contents/Rules inside example.conf Working with CRS ==== - - Go [here](https://github.com/coreruleset/coresuleset) and download release v3.3.2 + - Go [here](https://github.com/coreruleset/coreruleset) and download release v3.3.2 - Uncompress the contents and copy `crs-setup.conf.example` to `/usr/local/var/modsecurity` and rename it to `crs-setup.conf` - Copy all files in `rules` directory to `/usr/local/var/modsecurity/rules` - Copy `owasp.conf` in this repository to `/usr/local/var/modsecurity`