Are both if these true?
Modsecurity is an Application layer firewall, and bash (any shell) is Link
Layer?
Maybe an iptables ruleset?
John Crout
- via phone
On Sep 26, 2014 5:16 PM, "Joshua Roback" wrote:
> http://seclists.org/oss-sec/2014/q3/650
>
> https://securityblog.re
and I suspect it has vastly better protocol
> decoding capabilities.
>
> (Sounds like more bash patches on the way according to Michal
> Zalewski, so both mod_sec rules and patching are preferred rather than
> either in isolation.)
>
> cheers,
> Jamie
>
> On 27 September
Went through this with ssh, ftp, and RATs over HTTP. Thanks.
John Crout
On Sep 28, 2014 10:31 AM, "Jamie Riden" wrote:
> Application layer in the 4 layer TCP model I think. I've never really
> liked the distinctions at the top of the 7 layer OSI model.
>
> http://w
