This is an old revision of the document!


mod_security Compatibility

We try to keep LSWS compatible with the latest mod_security 2.5(and above) and gotroot rules. LSWS supports most of these rules and attempts not to miss any really important features/rules used in the real world. We also keep updating support based on our user feedback.

However, because of the complexity and always updating nature of these security rules, it is not possible to be 100% compatible with Apache at any one time. This wiki will address the most current compatibility status.

  • @rbl - real time block list. (since 5.1)
  • @fileinspect - scan attached files. (since 5.1)
  • Scan request header/body.
  • Scan response header.
  • Scan response body.
  • PDF functions.
  • lua.
  • Parsing XML.
  • SecRemoteRules
  • The feature is not often used.
  • The feature may slow down LiteSpeed considerably due to our single-thread event driven architecture.
  • Requests to static files bypass mod_security scanning as they are unlikely to cause any real security issues.
  • Admin
  • Last modified: 2017/01/03 17:17
  • by Jackson Zhang