Re: NEW: security/libmodsecurity

2020-12-28 Thread Alexander Bluhm
Hi, I found this libmodsecurity.tgz still in mystuff. security/libmodsecurity-3.0.4 Comment: intrusion detection and prevention engine Description: ModSecurity is an embeddable web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP

Re: NEW: security/libmodsecurity

2020-09-08 Thread Alexander Bluhm
On Wed, Aug 26, 2020 at 03:54:50PM +0200, Matthias Pitzl wrote: > The attached version contains the diff of Stuart. But the patch files from Stuart were missing. > In addition I made a patch for configure which disables the PCRE JIT by > disabling the whole check for it. Better patch away things

Re: NEW: security/libmodsecurity

2020-08-26 Thread Matthias Pitzl
On 24.08.2020 - 16:19:06, Stuart Henderson wrote: > On 2020/08/24 14:28, Matthias Pitzl wrote: > > Hello, > > > > This new port is needed for adding ModSecurity support to nginx. > > > > Excerpt from github: > > ModSecurity is an open source, cross platform web application firewall > > (WAF) >

Re: NEW: security/libmodsecurity

2020-08-24 Thread Stuart Henderson
On 2020/08/24 14:28, Matthias Pitzl wrote: > Hello, > > This new port is needed for adding ModSecurity support to nginx. > > Excerpt from github: > ModSecurity is an open source, cross platform web application firewall (WAF) > engine for Apache, IIS and Nginx that is developed by Trustwave's Sp

NEW: security/libmodsecurity

2020-08-24 Thread Matthias Pitzl
Hello, This new port is needed for adding ModSecurity support to nginx. Excerpt from github: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming langua

Re: NEW: security/libmodsecurity

2020-07-26 Thread Matthias Pitzl
On 22.07.2020 - 10:43:09, Matthias Pitzl wrote: > On 21.07.2020 - 14:34:59, Stuart Henderson wrote: > > > > > +V = 3.0.4 > > > > > +DISTNAME = modsecurity-v$V > > > > > +PKGNAME = libmodsecurity-$V > > > > > + > > > > > +SHARED_LIBS += modsecurity

Re: NEW: security/libmodsecurity

2020-07-22 Thread Matthias Pitzl
On 21.07.2020 - 14:34:59, Stuart Henderson wrote: > > > > +V =3.0.4 > > > > +DISTNAME = modsecurity-v$V > > > > +PKGNAME = libmodsecurity-$V > > > > + > > > > +SHARED_LIBS += modsecurity 3.3 # 3.3 > > > > > > start with 0.0 > > > > > >

Re: NEW: security/libmodsecurity

2020-07-21 Thread Stuart Henderson
> > > +V = 3.0.4 > > > +DISTNAME = modsecurity-v$V > > > +PKGNAME = libmodsecurity-$V > > > + > > > +SHARED_LIBS += modsecurity 3.3 # 3.3 > > > > start with 0.0 > > > > Problem is, if the library is not using 3.x, the check in t

Re: NEW: security/libmodsecurity

2020-07-21 Thread Matthias Pitzl
Hi, The attached tgz contains an updated version of the new libmodsecurity port. I fixed the comments of Stuart except the library version. As written in my last mail, the nginx ModSecurity connector relies on a lib version 3.x and I do not want to patch the connector. Greetings, Matthias libmo

Re: NEW: security/libmodsecurity

2020-07-21 Thread Matthias Pitzl
Hello Stuart, Thank you for your quick reply. On 21.07.2020 - 11:46:29, Stuart Henderson wrote: > On 2020/07/21 10:45, Matthias Pitzl wrote: > > Hello, > > > > The following patch adds a new port for libmodsecurity of > > https://www.modsecurity.org/. > > > > https://github.com/SpiderLabs/ModSe

Re: NEW: security/libmodsecurity

2020-07-21 Thread Stuart Henderson
On 2020/07/21 10:45, Matthias Pitzl wrote: > Hello, > > The following patch adds a new port for libmodsecurity of > https://www.modsecurity.org/. > > https://github.com/SpiderLabs/ModSecurity: > Libmodsecurity is one component of the ModSecurity v3 project. The library > codebase serves as an int

NEW: security/libmodsecurity

2020-07-21 Thread Matthias Pitzl
Hello, The following patch adds a new port for libmodsecurity of https://www.modsecurity.org/. https://github.com/SpiderLabs/ModSecurity: Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and

Re: NEW: security/libmodsecurity

2018-07-20 Thread Christian Weisgerber
Juan Francisco Cantero Hurtado: > Run a grep in the dpb logs. I'm sure that I saw O3 somewhere. Yes, there are ports that don't respect CFLAGS/CXXFLAGS and that should be fixed. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: NEW: security/libmodsecurity

2018-07-20 Thread Juan Francisco Cantero Hurtado
On Thu, Jul 19, 2018 at 11:11:55PM +0200, Klemens Nanni wrote: > On Thu, Jul 19, 2018 at 07:23:22PM +0200, Juan Francisco Cantero Hurtado > wrote: > > On Thu, Jul 19, 2018 at 06:01:41PM +0200, Juan Francisco Cantero Hurtado > > wrote: > > > On Thu, Jul 19, 2018 at 05:28:17PM +0200, Klemens Nanni

Re: NEW: security/libmodsecurity

2018-07-20 Thread Juan Francisco Cantero Hurtado
On Thu, Jul 19, 2018 at 11:11:55PM +0200, Klemens Nanni wrote: > On Thu, Jul 19, 2018 at 07:23:22PM +0200, Juan Francisco Cantero Hurtado > wrote: > > On Thu, Jul 19, 2018 at 06:01:41PM +0200, Juan Francisco Cantero Hurtado > > wrote: > > > On Thu, Jul 19, 2018 at 05:28:17PM +0200, Klemens Nanni

Re: NEW: security/libmodsecurity

2018-07-20 Thread Juan Francisco Cantero Hurtado
On Thu, Jul 19, 2018 at 08:55:51PM -, Christian Weisgerber wrote: > On 2018-07-19, Juan Francisco Cantero Hurtado wrote: > > > I saw that but our flags are passed at the end and have priority over > > O3. I just want to avoid the extra patches. > > That's insufficient. If I specify CFLAGS='

Re: NEW: security/libmodsecurity

2018-07-19 Thread Klemens Nanni
On Thu, Jul 19, 2018 at 07:23:22PM +0200, Juan Francisco Cantero Hurtado wrote: > On Thu, Jul 19, 2018 at 06:01:41PM +0200, Juan Francisco Cantero Hurtado > wrote: > > On Thu, Jul 19, 2018 at 05:28:17PM +0200, Klemens Nanni wrote: > > > On Thu, Jul 19, 2018 at 04:43:30PM +0200, Juan Francisco Cant

Re: NEW: security/libmodsecurity

2018-07-19 Thread Christian Weisgerber
On 2018-07-19, Juan Francisco Cantero Hurtado wrote: > I saw that but our flags are passed at the end and have priority over > O3. I just want to avoid the extra patches. That's insufficient. If I specify CFLAGS='' that's supposed to work and should not require -O0. -- Christian "naddy" Weisg

Re: NEW: security/libmodsecurity

2018-07-19 Thread Juan Francisco Cantero Hurtado
On Thu, Jul 19, 2018 at 06:01:41PM +0200, Juan Francisco Cantero Hurtado wrote: > On Thu, Jul 19, 2018 at 05:28:17PM +0200, Klemens Nanni wrote: > > On Thu, Jul 19, 2018 at 04:43:30PM +0200, Juan Francisco Cantero Hurtado > > wrote: > > > I need the library for the upcoming nginx-modsecurity packa

Re: NEW: security/libmodsecurity

2018-07-19 Thread Juan Francisco Cantero Hurtado
On Thu, Jul 19, 2018 at 05:28:17PM +0200, Klemens Nanni wrote: > On Thu, Jul 19, 2018 at 04:43:30PM +0200, Juan Francisco Cantero Hurtado > wrote: > > I need the library for the upcoming nginx-modsecurity package. > > C patches by robert@. Thanks for the review. > sparc64: > > cc1plus: er

Re: NEW: security/libmodsecurity

2018-07-19 Thread Klemens Nanni
On Thu, Jul 19, 2018 at 04:43:30PM +0200, Juan Francisco Cantero Hurtado wrote: > I need the library for the upcoming nginx-modsecurity package. > C patches by robert@. sparc64: cc1plus: error: unrecognized command line option "-std=c++11" Lots of `-O3' as well, please get rid of these an

NEW: security/libmodsecurity

2018-07-19 Thread Juan Francisco Cantero Hurtado
I need the library for the upcoming nginx-modsecurity package. C patches by robert@. OK? Comment: library used by the modsecurity modules Description: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache and Nginx that is developed by Trustwave's SpiderL