...
banner
Search
in:
Our Books
banner
Got Root >
The Internets original, oldest and largest source of web application firewall signatures, over 15,000 signatures and counting!
3D browser print

Download the rules

Automatically downloading the rules

How to download/setup/install/configure and use these rules

Commercial Support Now Available!

Gotroot.com modsecurity(TM) rules/signatures
Latest Rules (supports modsec 2.5!)

Apache 2.x rules: (gzip)external link

Apache 1.x rules: (modsecurity 2.5 does not support apache 1.x)

Sign up for subscriptionexternal link

Free Rules (Delayed 30 days)

All in one downloads for modsec 2.5

Apache 2.x rules: (gzip)external link

Apache 1.x rules: (modsecurity 2.5 does not support apache 1.x)

All in one downloads for modsec 2.0-2.1

All in one downloads for modsec 1.9

Individual Ruleset downloads for modsec 2.5 (Delayed 30 days)

Individual Ruleset downloads for modsec 2.x

Individual Ruleset downloads for modsec 1.9

Rule Types included in all versions

1. SQL injection, cross site scripting, code injection and other web security rules.

2. Antispam/comment spam rules

3. RBL rules

4. Malware and spam blacklists

5. Rootkit protection

6. OS specific rules, for Windows, Linux, Solaris and more.

7. Google hack protection

8. Custom exclusions for thousand of popular applications!

9. Overflow and protocol attack protection

10. Protection against bad user agents and other know bad actors and programs.

11. And more!

Forums and Mailing Lists

mod_security signatures forum

Mailing List Subscribe/Unsubscribeexternal link and Archivesexternal link

Frequently Asked Questions

What if I need commercial support?external link (cache)

What are these rules for?

Which rules should I install and use?

How can I submit a new rule? Or report a problem?

Some of these rules don't load in Apache 1.x!

mod_security slows down my Apache 1.x box!

Who wrote modsecurity?

News and administrivia
News

Notes
TODO List

Authors List

Downloading the rules automatically

The rules file is deliberately setup to allow for automatic downloading, thru tools such as wget, curl, etc. from a cronjob or other scheduling program. Once you download the new rules, you should restart apache for the new rules and signatures to take effect.

Ole Martin Eide has contributed a script to help with the process, you can download it here /downloads/ftp/mod_security/downloaders/modsec.sh. Any questions about the script should be directed to him, as we're not supporting it yet.

Created by: mshinn19283 points  last modification: Tuesday 22 of April, 2008 [14:15:57 UTC] by mshinn19283 points 

The content on this page is licensed under the terms of the Got Root License.


RSS Wiki RSS Blogs rss Articles RSS Forums
Powered by Tikiwiki CMS/Groupware