From Crazy_Canucks at rogers.com Mon Mar 19 14:22:08 2007 From: Crazy_Canucks at rogers.com (Crazy Canucks) Date: Mon Jan 7 18:22:32 2008 Subject: [Modsecurity] mod_magnet for Lighttpd Message-ID: <45FED4D0.501@rogers.com> Lighttpd is gaining a big following, and is being used for a lot of high traffic server situations due to the fact that it's requirements in terms of resources are significantly less than that of Apache's. My website is far from high traffic, but it could definitely benefit from more efficient, less demanding server software. The only thing that is holding me back is there is nothing like the GotRoot rules for mod_magnet for Lighttpd (the rough equivalent to mod_security for Lighttpd). I'm wondering if there is any chance that a set of rules could be created for mod_magnet for Lighttpd. If even the basic generic rules could be ported, that might make me more comfortable with the idea of a switch. Here is the url for the mod_magnet documentation for Lighttpd. http://trac.lighttpd.net/trac/wiki/Docs%3AModMagnet Thanks for your consideration, Owen Stairs. From mike at gotroot.com Mon Mar 19 18:24:38 2007 From: mike at gotroot.com (Michael Shinn) Date: Mon Jan 7 18:22:32 2008 Subject: [Modsecurity] mod_magnet for Lighttpd In-Reply-To: <45FED4D0.501@rogers.com> References: <45FED4D0.501@rogers.com> Message-ID: <1174343078.4372.6.camel@localhost.localdomain> Wow, this looks really interesting. I'll take a look at it this week and see what can be done with it. On Mon, 2007-03-19 at 15:22 -0300, Crazy Canucks wrote: > Lighttpd is gaining a big following, and is being used for a lot of high > traffic server situations due to the fact that it's requirements in > terms of resources are significantly less than that of Apache's. My > website is far from high traffic, but it could definitely benefit from > more efficient, less demanding server software. > > The only thing that is holding me back is there is nothing like the > GotRoot rules for mod_magnet for Lighttpd (the rough equivalent to > mod_security for Lighttpd). I'm wondering if there is any chance that a > set of rules could be created for mod_magnet for Lighttpd. If even the > basic generic rules could be ported, that might make me more comfortable > with the idea of a switch. > > Here is the url for the mod_magnet documentation for Lighttpd. > > http://trac.lighttpd.net/trac/wiki/Docs%3AModMagnet > > Thanks for your consideration, Owen Stairs. > _______________________________________________ > Modsecurity mailing list > Modsecurity@gotroot.com > http://lists.gotroot.com/mailman/listinfo/modsecurity -- Michael T. Shinn KeyID:0xDAE2EC86 Key Fingerprint: 1884 E657 A6DF DF1B BFB9 E2C5 DCC6 5297 DAE2 EC86 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xDAE2EC86 Got Root? http://www.gotroot.com modsecurity rules: http://www.modsecurityrules.com Troubleshooting Firewalls: http://troubleshootingfirewalls.com From Crazy_Canucks at rogers.com Mon Mar 19 20:07:31 2007 From: Crazy_Canucks at rogers.com (Crazy Canucks) Date: Mon Jan 7 18:22:32 2008 Subject: [Modsecurity] mod_magnet for Lighttpd In-Reply-To: <1174343078.4372.6.camel@localhost.localdomain> References: <45FED4D0.501@rogers.com> <1174343078.4372.6.camel@localhost.localdomain> Message-ID: <45FF25C3.10208@rogers.com> That's what I said when I first heard about it, I'm glad you had the same reaction. :) What got my attention was word of mouth from other users of Lighttpd, and claims such as Lighttpd using 4MB of ram where, with exactly the same website, traffic and software, Apache used 80MB of ram, as well as claims of faster rendering times for PHP, greater stability, etc. I'm waiting for some new hardware to arrive, at which point I'll be upgrading the hardware for my server, and if I can be comfortable with the security, I'll probably be making the switch to Lighttpd then. Thanks for looking into it, Owen Stairs Michael Shinn wrote: > Wow, this looks really interesting. I'll take a look at it this week > and see what can be done with it. > > > On Mon, 2007-03-19 at 15:22 -0300, Crazy Canucks wrote: > >> Lighttpd is gaining a big following, and is being used for a lot of high >> traffic server situations due to the fact that it's requirements in >> terms of resources are significantly less than that of Apache's. My >> website is far from high traffic, but it could definitely benefit from >> more efficient, less demanding server software. >> >> The only thing that is holding me back is there is nothing like the >> GotRoot rules for mod_magnet for Lighttpd (the rough equivalent to >> mod_security for Lighttpd). I'm wondering if there is any chance that a >> set of rules could be created for mod_magnet for Lighttpd. If even the >> basic generic rules could be ported, that might make me more comfortable >> with the idea of a switch. >> >> Here is the url for the mod_magnet documentation for Lighttpd. >> >> http://trac.lighttpd.net/trac/wiki/Docs%3AModMagnet >> >> Thanks for your consideration, Owen Stairs. >> _______________________________________________ >> Modsecurity mailing list >> Modsecurity@gotroot.com >> http://lists.gotroot.com/mailman/listinfo/modsecurity >>