From 05c8ccd07ebb0f7490a1e91f07efca30d480d0d2 Mon Sep 17 00:00:00 2001 From: brectanus Date: Fri, 14 Dec 2007 23:31:33 +0000 Subject: [PATCH] Moved modsecurity_crs_55_marketing.conf. --- rules/modsecurity_crs_55_marketing.conf | 23 ------------------- .../modsecurity_crs_55_marketing.conf | 23 +++++++++++++++++++ 2 files changed, 23 insertions(+), 23 deletions(-) delete mode 100644 rules/modsecurity_crs_55_marketing.conf create mode 100644 rules/optional_rules/modsecurity_crs_55_marketing.conf diff --git a/rules/modsecurity_crs_55_marketing.conf b/rules/modsecurity_crs_55_marketing.conf deleted file mode 100644 index 0f3bae9b..00000000 --- a/rules/modsecurity_crs_55_marketing.conf +++ /dev/null @@ -1,23 +0,0 @@ -# --------------------------------------------------------------- -# Core ModSecurity Rule Set -# Copyright (C) 2006 Breach Security Inc. All rights reserved. -# -# The ModSecuirty Core Rule Set is distributed under GPL version 2 -# Please see the enclosed LICENCE file for full details. -# --------------------------------------------------------------- - - -# These rules do not have a security importance, but shows other benefits of -# monitoring and logging HTTP transactions. -# -- - -SecDefaultAction "log,pass,phase:2,t:lowercase" - -SecRule REQUEST_HEADERS:User-Agent "msn(?:bot|ptc)" \ - "log,auditlog,msg:'MSN robot activity',,id:'910008',severity:'5'" - -SecRule REQUEST_HEADERS:User-Agent "\byahoo(?:-(?:mmcrawler|blogs)|! slurp)\b" \ - "log,auditlog,msg:'Yahoo robot activity',,id:'910007',severity:'5'" - -SecRule REQUEST_HEADERS:User-Agent "(?:(?:gsa-crawler \(enterprise; s4-e9lj2b82fjjaa; me\@mycompany\.com|adsbot-google \(\+http:\/\/www\.google\.com\/adsbot\.html)\)|\b(?:google(?:-sitemaps|bot)|mediapartners-google)\b)" \ - "log,auditlog,msg:'Google robot activity',,id:'910006',severity:'5'" diff --git a/rules/optional_rules/modsecurity_crs_55_marketing.conf b/rules/optional_rules/modsecurity_crs_55_marketing.conf new file mode 100644 index 00000000..92264707 --- /dev/null +++ b/rules/optional_rules/modsecurity_crs_55_marketing.conf @@ -0,0 +1,23 @@ +# --------------------------------------------------------------- +# Core ModSecurity Rule Set ver.1.5 +# Copyright (C) 2006-2007 Breach Security Inc. All rights reserved. +# +# The ModSecuirty Core Rule Set is distributed under GPL version 2 +# Please see the enclosed LICENCE file for full details. +# --------------------------------------------------------------- + + +# These rules do not have a security importance, but shows other benefits of +# monitoring and logging HTTP transactions. +# -- + +SecDefaultAction "log,pass,phase:2,t:lowercase" + +SecRule REQUEST_HEADERS:User-Agent "msn(?:bot|ptc)" \ + "log,auditlog,msg:'MSN robot activity',id:'910008',severity:'5'" + +SecRule REQUEST_HEADERS:User-Agent "" \ + "log,auditlog,msg:'Yahoo robot activity',id:'910007',severity:'5'" + +SecRule REQUEST_HEADERS:User-Agent "" \ + "log,auditlog,msg:'Google robot activity',id:'910006',severity:'5'"