Christian Folini

Results 509 comments of Christian Folini

Let me propose the following wording: ``` ModSecurity and CRS are suited to small scale application level DoS attacks. DoS attacks on the network level, distributed DoS attacks and larger...

Thank you very much.

I'm not really running ModSec3, so I am not sure I have the experience to understand and make this work. @theMiddleBlue, you are working on ModSec3. Would you be able...

Awesome. Thank you very much. For the record: The fake bot plugin is a very nice test case for plugins. I reckon that would also make for a nice sandbox...

This is a very good roundup and I like the approach. @airween : Could you chime in from a ModSec v2 / v3 perspective, namely with regards to `REQUEST_BODY` availability?

Exactly. It's one of the open quarrels we have with the ModSec devs. Airween might be able to give us the latest news / perspectives here.

@jptosso: What is the prospect of Coraza getting LUA Support on a horizon of 1-2 years?

@azurit : You meant the LUA solution you have get going might be so complicated that it is not worth to use in production?