Provide ModSecurity 3 modules for supported operating systems
ModSecurity 3.0 was released about a year and a half ago, and the 2.x branch support seems to decline.
In addition to that there are some features of ModSecurity 3.x, that would be nice to have:
* Proper support for webservers other than Apache, without having to resort to an Apache-like wrapper module running within other web servers
* Better performance due to the architecture rewrite
* GeoIP2 databases support out-of-box (MaxMind no longer provides new Legacy-GeoIP databases, so this would be very good to have)
Considering that newer *nix OS (Debian 10, CentOS 7 through EPEL) ship libmodsecurity-3, I think it's reasonable to add that to Obsidian roadmap
Anonymous
shared this idea
Already supported in Plesk 18.0.32: https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18032
—
IG
-
EhudZ
commented
May I ask, what are you waiting for?
Old versions are full of bugs... -
IntelInside
commented
Modsecurity v3 - or actually libmodsecurity - is essential to run nginx without apache on plesk servers with imunify360.
-
Pete
commented
Specially the part about GeoIP2 DB support is needed so much. We use it to stop attacks from certain countries. We would like to continue to be able to do this, with an up-to-date GeoIP database.