mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-10-01 20:17:46 +03:00
![](/avatar/831eee306f3a2822c33a278ddf439507?size=48 "Felipe \\"Zimmerle\\" Costa"){kind=small}
2ea5a74a7b
- Now the installation is divided in modules: ModSecurity and CRS. - Added default configuration - Configuration was moved to "Program Files" folder - Build_msi script now using candle available in %PATH%
Please note that installing ModSecurity for IIS requires IIS to be installed and enabled.
After installing ModSecurity for IIS, the module will be running in all websites by default. To remove from a website add to web.config:
<modules>
<remove name="ModSecurityIIS" />
</modules>
To configure module in a website add to web.config:
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
<ModSecurity enabled="true" configFile="c:\inetpub\wwwroot\xss.conf" />
</system.webServer>
</configuration>
where configFile is standard ModSecurity config file.
Events from the module will show up in "Application" Windows log.