Downloading Rules

Introduction

The rules come in two forms:

1) Real Time Rules

2) Delayed/Unsupported Rules

Real Time/Supported Rules

Subscription

If you have not already setup a subscription to the Real Time rules (only $14.95 a month, or $99.95 a year), you can do so here:

Real Time Feed Signup

Download

Once your account is setup, you can download the Real Time by following this process:

Automated Method

Install ASL. ASL will automatically download and keep your rules up to date.

Do it Yourself Method

Step 1)

The rules are available from the URL below:

Real Time Rules Download

Step 2) Download the file VERSION

http://www.atomicorp.com/channels/rules/subscription/VERSION

This file will contain the following fields:

ASL_VERSION=3.2.14-31
APPINV_VERSION=201305181247
CLAMAV_VERSION=201307181043
GEOMAP_VERSION=201307191033
GRSEC_VERSION=0
KERNEL_VERSION=3.2.48-54
MODSEC_VERSION=201307191101
OSSEC_VERSION=201307171751
WAF_DELAYED_VERSION=201305151625
WAF_ENGINE_VERSION=2.7.4-15

Step 3) Download the latest rule file

Each rule file will contain the version of that rule file. For example, using the version information above the latest modsecurity rules version would be:

https://www.atomicorp.com/channels/rules/subscription/modsec-201307191101.tar.gz

We recommend you use a tool like wget or curl to download the rules.

Delayed/Unsupported/Free Rules

The Delayed/Unsupported/Free rules are available at the URL below. Keep in mind the Delayed feed is released at least 90 days after the realtime feed (that includes any fixes) and is unsupported.

Delayed/Unsupported Feed Download

If you want to try out the Real Time rules please sign up here.

Or if you want to try the full security suite, Atomic Secured Linux (ASL), on a trial basis, just sign up for a 30 day free trial here.

Questions

Please see the https://www.atomicorp.com/wiki/index.php/Atomic_ModSecurity_Rules_FAQ.