Thanks Nick, it makes sense. So can I assume that the Apache group is fine with its user base using 3rd party mod_security and that they do not plan to develop something similar ? The reason I am confused is I see Ryan Barnett as Team Lead for "Internet Security Apache Benchmark Project" and he talks/writes a lot about mod_security. regards - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Jignesh Badani Nick Kew <nick@xxxxxxxxxxxx> 08/22/2006 04:28 PM Please respond to users@xxxxxxxxxxxxxxxx To users@xxxxxxxxxxxxxxxx cc Subject Re: [users@httpd] mod_security general question... On Tuesday 22 August 2006 23:22, Jignesh Badani wrote: > We have been looking at implementing mod_security for quite some time now, > but it is not getting a green flag because the module is not part of the > Apache group offering (yet). > > 1. Is there a reason, this module is still not being bundled as part of > the Apache source ? Its author is an independent developer, and appears happy to remain that way. It's his work to distribute as he chooses. If you want it bundled with Apache, get a package from a distributor - e.g. a Linux CDROM. -- Nick Kew --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx