Seems to work then. Are you sure that you tested some requests that should've been blocked by mod_security during your tests?
Hi falko Thanks for your reply, yes I did test it using the method described at the Debian site link in the previous post , I also turned on the post payload filter and set viagra as a secfilter etc... and tried sending from a form on the site with viagra in the content, and it didn.t do anything either. I have had mod_security running great on a fedora 6 box previously and have used almost the same configuration for mod security. Both the above testing methods used to work on the fedora box, this is why I think it is not working. have you tried it on Debian etch? Thanks again, I have just renewed my subscription to this great site. T.
I've put a Debian Etch + mod_security on my TO-DO list, and if I get it working, I'll publish it soon.