Technical Blog


The new netnea-CRS-Upgrading-Plugin: Simplifying the Migration from CRS v3 to v4   Recently updated !

Migrating from CRS v3 to CRS v4 can be intimidating. It’s a complicated task that risks to leave you vulnerable during the transition. But with the help of the new netnea-CRS-Upgrading-Plugin you can keep your guards up during the transition. Introduction Upgrading the OWASP CRS ruleset from version 3 to version 4 is not as […]


Franziska Bühler joins netnea

It’s with great pleasure that netnea announces Franziska Bühler joining our team. Franziska, also known as Fränzi, brings over 15 years of experience in application security engineering, with certifications in CISSP and CSSP. She has worked on ModSecurity and Apache alongside our very own Christian Folini at Swiss Post and later joined Puzzle as their […]


Using GeoIP information together with ModSecurity

Introduction In my tutorial’s webserver logfile configuration, there is a position reserved for the country code of an IP address. I have never explained how I get the information into the environment variable that is then used to fill said position. There are several other guides around, but I think it’s time to provide my […]


Arch Linux logo

Kubuntu to Arch Linux

For years, and after using Gentoo in the years 2000-2005, I have been using Kubuntu LTS on my successive laptops. For a while I used an Apple Macbook Pro, but at some point I was constantly compiling diverse MacPorts packages to the point that Linux made more sense. Kubuntu seemed like the logical way. It […]


Ansible end_play vs end_host

If your Ansible playbook needs to be stopped for a single node (host) of your inventory, be sure you do use “meta: end_host” and not “meta: end_play”. The later stops the whole script, and can potentially creates a hard-to-debug situation, depending on your parallelism and the order on which nodes are checked during the playbook […]