Re: mod_security for Apache

But isn't that exactly what you're being asked to do?

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Peter Connell
Sent: Tuesday, February 10, 2009 1:27 PM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] mod_security for Apache

Yes, one would hope that if was all so easy to take advantage of such a
frequently suggested security module then someone in the OS400 community
would have broken this ground some time ago. There is always some
apprehension in attempting to explain that the most significant gateway
for the enterprise is protected because I downloaded something from the
web.

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of Haas, Matt (CL Tech Sv)
Sent: Wednesday, 11 February 2009 0:01
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] mod_security for Apache

You could also download and compile the module. I took a look at the
install documentation and they do not say you have to re-build Apache.
You could also likely use AIX binaries of this module (and its
dependencies). The InfoCenter has information on building additional
modules for the HTTP server.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of Nathan Andelin
Sent: Tuesday, February 10, 2009 6:53 AM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] mod_security for Apache

From: Peter Connell
If IBM fail to provide a way to implement mod_security then the
other options are installing an application firewall in front ...

Well, at least you have that option.

One other thought that occurred to me was to try running an open-source
version of Apache under PASE - a version that has mod_security built-in,
as a proxy in front of the IBM i HTTP server. But I know little about
getting software to run under PASE.

Does Zend Core come with mod_security?

Nathan.