https://inliniac.net/blog/tag/ivan-ristic/ Recent content in Ivan-Ristic on Inliniac Hugo en Tue, 22 Jan 2008 11:40:04 +0000 https://inliniac.net/blog/2008/01/22/new-security-weblog-by-ivan-ristic/ Tue, 22 Jan 2008 11:40:04 +0000 https://inliniac.net/blog/2008/01/22/new-security-weblog-by-ivan-ristic/ <p>I just noticed that ModSecurity developer Ivan Ristic has started a new blog on computer security and open source. Check it out here: <a href="http://blog.ivanristic.com/">http://blog.ivanristic.com/</a></p> <p>Great idea Ivan! :)</p> https://inliniac.net/blog/2007/03/01/update-on-using-realtime-blacklists-with-modsecurity/ Thu, 01 Mar 2007 08:04:55 +0000 https://inliniac.net/blog/2007/03/01/update-on-using-realtime-blacklists-with-modsecurity/ <p>A few days ago I posted a blog article about stopping comment spam with ModSecurity using realtime blacklists (rbl). While the approach was working, I noted having problems with rules when I tried to match on POST methods in HTTP requests.</p> <p>Luckily, ModSecurity creator Ivan Ristic was quick to point out where the problem is. I&rsquo;m using the Core Ruleset for ModSecurity, and one thing that ruleset does is use the &rsquo;lowercase&rsquo; transformation. This converts all text from arguments to lowercase, so my ^POST$ match would never be able to match. So like Ivan suggested, using ^post$ solved this part.</p>