Re: mod_security for Apache

["Haas, Matt (CL Tech Sv)" <matt.haas@xxxxxxxxxxx>]

You could also download and compile the module. I took a look at the install documentation and they do not say you have to re-build Apache. You could also likely use AIX binaries of this module (and its dependencies). The InfoCenter has information on building additional modules for the HTTP server.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Nathan Andelin
Sent: Tuesday, February 10, 2009 6:53 AM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] mod_security for Apache

> From: Peter Connell
> If IBM fail to provide a way to implement mod_security then the
> other options are installing an application firewall in front ...

Well, at least you have that option.

One other thought that occurred to me was to try running an open-source version of Apache under PASE - a version that has mod_security built-in, as a proxy in front of the IBM i HTTP server.  But I know little about getting software to run under PASE.

Does Zend Core come with mod_security?

Nathan.