131 Commits

Author SHA1 Message Date
Felipe Zimmerle
218eab6417 Fix libgeoip lookup during the build 2015-08-10 15:22:32 -03:00
Felipe Zimmerle
c06179f18e Adds support for Log and Rev actions 2015-08-07 14:27:43 -03:00
Felipe Zimmerle
ad9393a8c2 Adds support for the tag action 2015-08-07 14:27:43 -03:00
Felipe Zimmerle
f519717bdf Adds support to the msg action 2015-08-07 14:27:43 -03:00
Felipe Zimmerle
e12d95b10d Adds support to the TX collection and setvar action 2015-08-07 14:27:43 -03:00
Felipe Zimmerle
88c53575be Adds support to & (count) and ! (exclusion) as variables variations 2015-08-07 14:27:33 -03:00
Felipe Zimmerle
1924b4ebca Adds lowercase transformation 2015-08-05 14:48:28 -03:00
Felipe Zimmerle
4f47651a6f Adds variable TX and action "capture". 2015-08-05 10:07:47 -03:00
Felipe Zimmerle
95efb99a8c Adds support to the @pm operator 2015-08-04 14:25:48 -03:00
Felipe Zimmerle
17f88f5821 Using libpcre instead of c++11 regex 2015-08-03 13:45:09 -03:00
Felipe Zimmerle
f811ec6518 Adds support to @ipMatch operator 2015-07-30 20:58:19 -03:00
Felipe Zimmerle
b8f7fb441d Adds support to SecRemoteRules and Include directives
This commit includes a refactoring on important pieces of the parser
to allow it work in a stack fashion. Driver and Rules classes were
simplified and the RulesProperties class was created.
2015-07-24 22:57:29 -03:00
Felipe Zimmerle
76b34af357 Adds support to load remote rules 2015-07-23 14:40:56 -03:00
Felipe Zimmerle
16bb253d0e Adds all variables to the 'Variables' name space 2015-07-22 22:36:30 -03:00
Felipe Zimmerle
6f7d3fa67a Adds support to the TIME* variables 2015-07-22 01:07:42 -03:00
Felipe Zimmerle
4f20f5bf74 Adds initial support to chained rules 2015-07-21 12:02:10 -03:00
Felipe Zimmerle
95c2fed89c Adds support to severity action and HIGHEST_SEVERITY variable 2015-07-21 01:09:13 -03:00
Felipe Zimmerle
e189055ec3 Adds support to GeoIP operator and variables. 2015-07-20 21:05:14 -03:00
Felipe Zimmerle
41bf1490b7 Adds MODSEC_BUILD variable 2015-07-20 20:43:07 -03:00
Felipe Zimmerle
5d5e10bfde Adds support for basic Multipart process
Adjustments will be needed, for instance: the logging support is still missing
2015-07-17 15:12:15 -03:00
Felipe Zimmerle
d0b7a9966d Adds support to the ENV variable 2015-07-15 12:34:06 -03:00
Felipe Zimmerle
27252bc801 Adds support to the variable DURATION 2015-07-15 12:34:06 -03:00
Felipe Zimmerle
f13a1bd880 Adds support the Parallel audit log index creation
The index is now being generated.
2015-07-14 00:33:57 -03:00
Felipe Zimmerle
aa8dc9115b Adds first version of Assay's materialization in a JSON format
That format will be used by the audit logs.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
2109910848 Adds support to the server ID generation
The server ID is a sha-1 identifier generated from the mac address of the first
ethernet device plus the server name. The process is the same used by
ModSecurity 2.9
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
885fe14f30 Adds AuditLogWriter{Serial,Parallel} classes
Furhter those classes will be used to persist (or send) the auditlogs.
2015-07-08 18:28:00 -03:00
Felipe Zimmerle
e44d6e280d Adds actions 'auditlog' and 'noauditlog' 2015-07-08 18:06:46 -03:00
Felipe Zimmerle
616a2ae6de Adds AuditLog class
The properties related to the Audit Log were saved into the classes
Rules and Dirver, now all those properties will be saved into the
AuditLog class.
2015-07-08 18:05:09 -03:00
Andrew Hutchings
64a34584cd Build system fixes
1. Fix the build order so "make -j4" works
2. Remove binaries from git tree
3. Add .gitignore file
2015-07-06 15:53:44 -03:00
Felipe Zimmerle
721f951154 Adds transformation functions stub
Added stub for all transformations functions supported on
ModSecurity 2.9
2015-06-26 17:34:39 -03:00
Felipe Zimmerle
95cb4c56ab Very first commit: libmodsecurity
Check the README.md file for further information about the libmodsecurity.
2015-06-26 14:35:15 -03:00