@@ -1,13 +1,14 @@

 Summary:   Security module for the Apache HTTP Server

 Name:      mod_security 

 Version:   2.5.13

-Release:   16

+Release:   17

 License:   GPLv2

 URL:       http://www.modsecurity.org/

 Group:     System Environment/Daemons

 Source:        http://www.modsecurity.org/download/modsecurity-apache_%{version}.tar.gz

 Source1:   00_mod_security.conf

 Source2:   modsecurity_crs_10_config-default.conf 

+Source3:   00_asl_custom_exclude.conf

 Patch1:        waf-label.patch

 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

 Requires:  httpd httpd-mmn = %([ -a %{_includedir}/httpd/.mmn ] && cat %{_includedir}/httpd/.mmn || echo missing)

@@ -53,6 +54,7 @@

 install -D -m755 apache2/.libs/mod_security2.so %{buildroot}/%{_libdir}/httpd/modules/mod_security2.so

 install -D -m644 %{SOURCE1} %{buildroot}/%{_sysconfdir}/httpd/conf.d/00_mod_security.conf

 install -D -m644 %{SOURCE2} %{buildroot}/%{_sysconfdir}/httpd/modsecurity.d/modsecurity_crs_10_config.conf

+install -D -m644 %{SOURCE3} %{buildroot}/%{_sysconfdir}/httpd/modsec/00_asl_custom_exclude.conf

 %clean

 rm -rf %{buildroot}

@@ -64,6 +66,7 @@

 %config %{_sysconfdir}/httpd/conf.d/00_mod_security.conf

 %dir %{_sysconfdir}/httpd/modsecurity.d

 %config(noreplace) %{_sysconfdir}/httpd/modsecurity.d/modsecurity_crs_10_config.conf

+%config(noreplace) %{_sysconfdir}/httpd/modsec/00_asl_custom_exclude.conf

 %defattr(-,apache,apache)

 %dir /var/asl

 %dir /var/asl/data

@@ -72,6 +75,9 @@

 %dir /var/asl/data/audit

 %changelog

+* Tue May 03 2011 Carsten Schoene <cs@linux-administrator.com> - 2.5.13-17

+- add 00_asl_custom_exclude.conf and disable RBL rule 350000 by default

+

 * Fri Apr 01 2011 Carsten Schoene <cs@linux-administrator.com> - 2.5.13-16

 - update to release 2.5.13

​