|
|
| (51 intermediate revisions by 3 users not shown) |
| Line 1: |
Line 1: |
| − | = Introduction =
| + | Please see our new documentation website: |
| | | | |
| − | The rules come in two forms:
| + | https://docs.atomicorp.com/gotrootModsec/installation.html |
| − | | + | |
| − | 1) Real Time Rules
| + | |
| − | | + | |
| − | 2) Delayed/Unsupported Rules
| + | |
| − | | + | |
| − | == Real Time/Supported Rules ==
| + | |
| − | | + | |
| − | === Subscription ===
| + | |
| − | | + | |
| − | If you have not already setup a subscription to the '''Real Time rules''' (only $14.95 a month, or $99.95 a year), you can do so here:
| + | |
| − | | + | |
| − | [https://www.atomicorp.com/acshop.html Real Time Feed Signup]
| + | |
| − | | + | |
| − | === Download ===
| + | |
| − | | + | |
| − | Once your account is setup, you can download the Real Time by following this process:
| + | |
| − | | + | |
| − | ==== Automated Method ====
| + | |
| − | | + | |
| − | Install [[ASL]]. ASL will automatically download and keep your rules up to date.
| + | |
| − | | + | |
| − | ==== Do it Yourself Method ====
| + | |
| − | | + | |
| − | Step 1)
| + | |
| − | | + | |
| − | The rules are available from the URL below:
| + | |
| − | | + | |
| − | [http://updates.atomicorp.com/channels/rules/subscription/ Real Time Rules Download]
| + | |
| − | | + | |
| − | | + | |
| − | Step 2) Download the file VERSION
| + | |
| − | | + | |
| − | http://www.atomicorp.com/channels/rules/subscription/VERSION
| + | |
| − | | + | |
| − | This file will contain the following fields:
| + | |
| − | | + | |
| − | <pre>
| + | |
| − | ASL_VERSION=3.2.14-31
| + | |
| − | APPINV_VERSION=201305181247
| + | |
| − | CLAMAV_VERSION=201307181043
| + | |
| − | GEOMAP_VERSION=201307191033
| + | |
| − | GRSEC_VERSION=0
| + | |
| − | KERNEL_VERSION=3.2.48-54
| + | |
| − | MODSEC_VERSION=201307191101
| + | |
| − | OSSEC_VERSION=201307171751
| + | |
| − | WAF_DELAYED_VERSION=201305151625
| + | |
| − | WAF_ENGINE_VERSION=2.7.4-15
| + | |
| − | </pre>
| + | |
| − | | + | |
| − | Step 3) Download the latest rule file
| + | |
| − | | + | |
| − | Each rule file will contain the version of that rule file. For example, using the version information above the latest modsecurity rules version would be:
| + | |
| − | | + | |
| − | https://www.atomicorp.com/channels/rules/subscription/modsec-201307191101.tar.gz
| + | |
| − | | + | |
| − | We recommend you use a tool like wget or curl to download the rules.
| + | |
| − | | + | |
| − | == Delayed/Unsupported/Free Rules ==
| + | |
| − | | + | |
| − | The '''Delayed/Unsupported/Free''' rules are available at the URL below. Keep in mind the Delayed feed is released at least 90 days after the realtime feed (that includes any fixes) and is unsupported.
| + | |
| − | | + | |
| − | [http://updates.atomicorp.com/channels/rules/delayed/ Delayed/Unsupported Feed Download]
| + | |
| − | | + | |
| − | If you want to try out the Real Time rules please sign up [https://www.atomicorp.com/amember/signup.php?price_group=-2&product_id=22&hide_paysys=free here].
| + | |
| − | | + | |
| − | Or if you want to try the full security suite, Atomic Secured Linux (ASL), on a trial basis, just sign up for a [https://www.atomicorp.com/amember/signup.php?price_group=-1&product_id=17&hide_paysys=free 30 day free trial here].
| + | |
| − | | + | |
| − | = Questions =
| + | |
| − | | + | |
| − | Please see the https://www.atomicorp.com/wiki/index.php/Atomic_ModSecurity_Rules_FAQ.
| + | |
