[users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
I try to filter incoming HTTP request. Here is configuration of my filter: LoadModule ext_filter_module modules/mod_ext_filter.so ExtFilterDefine myFilter ftype=30 mode=input \ cmd=c:/tools/perl/bin/perl.exe c:/temp/dump.pl c:/temp/dump.out Directory c:/Apache24/htdocs SetOutputFilter

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Jeff Trawick
On Wed, Oct 23, 2013 at 12:07 PM, Daniel Stefaniuk daniel.stefan...@gmail.com wrote: I try to filter incoming HTTP request. Here is configuration of my filter: LoadModule ext_filter_module modules/mod_ext_filter.so ExtFilterDefine myFilter ftype=30 mode=input \

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
That's a good question. I don't set it at all. Thanks for pointing that out Jeff. Now, I face another problem. I want to modify header parameters of incoming request from the Perl script. Is this possible at all? I can see headers in the output file but the input file contains just the request

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Jeff Trawick
On Wed, Oct 23, 2013 at 3:18 PM, Daniel Stefaniuk daniel.stefan...@gmail.com wrote: That's a good question. I don't set it at all. Thanks for pointing that out Jeff. Now, I face another problem. I want to modify header parameters of incoming request from the Perl script. Is this possible at

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
Ok, thanks Jeff. I think I can work around that problem. What about this scenario: 1) Filter incoming request based on content (HTTP POST) 2) Stop further processing of a request if content matches (or doesn't match) dynamic criteria (Perl script is aware of these criteria) 3) do not

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Nick Kew
On 23 Oct 2013, at 20:53, Daniel Stefaniuk wrote: Is this doable with filters? Yes and no. Yes, it can be done. No, it can easily be done wrong, so it might pass your tests then be bypassed in operation. For example, the filter encounters something that should abort the request, but the

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
Thanks Nick. Yes, it looks like mod_security provides dynamic collections that I could use to match header parameters against a whitelist and change that list on demand (for example by hitting defined URL address). Does Ironbee provide any similar functionality? Daniel

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Nick Kew
On 23 Oct 2013, at 22:08, Daniel Stefaniuk wrote: Thanks Nick. Yes, it looks like mod_security provides dynamic collections that I could use to match header parameters against a whitelist and change that list on demand (for example by hitting defined URL address). Does Ironbee provide