mod_sec FULL intergration

[pimpinjg]

is there anyway litespeed could be fully intergradeable with mod_sec as i host multiple websites and people like to buy hosting just to upload shells and whatnot with openbase_dir enabled you cant jump into other hom directories but with a simple addon to the url can browse public_html to get config files and connect to sql via sql manager in the shell there using wich is potentialy bad, i had a nice set of rules with mod_Sec that would make them unable to run at all but with just basic url filtering in litespeed it isnt the same so is there any way to fully integrate it?

 

[mistwang]

LSWS 3.x support mod_security 1.9 rules, 4.x releases will support mod_security 2.x rules.

 

[pimpinjg]

but thats only url filtering?

 

[anewday]

It works with mod_security 1.9 for Apache, just make sure the module is loaded in httpd.conf if you are importing the apache config in litespeed.

 

[pimpinjg]

i used easy apache to install it and got the rules from my friend

 

[mistwang]

If the rules are "SecRule", then those are 2.x rules, please wait for 4.0b3, if those are "SecFilter", "SecfilterSelective", those are 1.9 rules, you can use it with current LSWS.