Apache mod-security

Ivan Ristic | 3 Nov 11:47

Re: mod_security + webmail + body message

Tomas Hidalgo Salvador wrote:
> Thanks to both!!
> 
> I am going to continue making tests with your indications.
> 
> According to the table 12-1 of the book of Ivan, I believe
> that THE_REQUEST=REQUEST_METOD + REQUEST_URI + REQUEST_PROTOCOL.

  Yes, but it's the other way round. REQUEST_METHOD, REQUEST_URI
  and REQUEST_PROTOCOL are created out of THE_REQUEST.

> As he would be formulates it for POST_PAYLOAD?
> As it is the result of POST_PAYLOAD - THE_REQUEST?

  Can you please rephrase the question? I am not sure I understand it.

>  Some reference to know more on headers HTTP? 

  How about the HTTP 1.1 RFC?

  http://www.ietf.org/rfc/rfc2616.txt

--

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org

-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download

(Continue reading)

headers

Tomas Hidalgo Salvador | 2 Nov 17:18

RE: mod_security + webmail + body message

Thanks to both!!

I am going to continue making tests with your indications.

According to the table 12-1 of the book of Ivan, I believe that THE_REQUEST=REQUEST_METOD + REQUEST_URI +
REQUEST_PROTOCOL. 

As he would be formulates it for POST_PAYLOAD?
As it is the result of POST_PAYLOAD - THE_REQUEST?

 Some reference to know more on headers HTTP? 

Many thanks for you help.

Tomás Hidalgo Salvador
thidalgo <at> tecnologia.cajamar.es
Dpto. Sistemas Unix
Tlf.: 2333
DSF Almariya

-----Mensaje original-----
De: Ivan Ristic [mailto:ivanr <at> webkreator.com] 
Enviado el: sábado, 29 de octubre de 2005 21:09
Para: Ryan Barnett
CC: Tomas Hidalgo Salvador; mod-security-users <at> lists.sourceforge.net
Asunto: Re: [mod-security-users] mod_security + webmail + body message

Ryan Barnett wrote:
> Tomas - Welcome to my world :)  I have been using Apache/Mod_Security as
> a reverse proxy for Microsoft's Outlook Web Access and have run this

(Continue reading)