text:
Re: [mod-security-users] Questions about STREAM_INPUT_BODY
From: Breno Silva <breno.silva@gm...> - 2011-04-29 13:09:46
You asked about STREAM*. I answer that must be used to data substitution.
You asked again why don't use the current buffers. And i gave you the
I think it is clear. Please if you want more technical details. Please
submit the questions to devel-list. There is no reason to discuss this
On Fri, Apr 29, 2011 at 2:14 AM, Christian Bockermann <chris@...>wrote:
> Am 29.04.2011 um 01:49 schrieb Ivan Ristic:
> > You missed my point, which is that users don't care and shouldn't need
> > to be aware of implementation details. The task at hand (protecting
> > applications) is difficult as it is.
> Thanks for pointing that out, Ivan. I believe this is what makes a lot of
> people struggle, just reminding of the phase-1-rules-inside-Location
> directives
> dilemma.
Re: [mod-security-users] Denial of Service Attacks
From: Josh Amishav-Zlatin <jamuse@gm...> - 2011-04-29 07:17:22
On Wed, Apr 27, 2011 at 5:34 PM, Abdullah, Ayub <Ayub.Abdullah@...> wrote:
> We are currently using Mod_security 2.5.13 /CRS 2.10 in our environment and
> we were under the impression that Denial of service attacks was a newly
> added feature that allows this functionality.  Well we have been running
It sounds like your referring to the new SecReadStateLimit directive.
For more details on that see:
http://blog.spiderlabs.com/2010/11/advanced-topic-of-the-week-mitigating-slow-http-dos-attacks.html
> into all sorts of problems getting this set up correctly.  At the moment we
> have enabled xforwarding for on our proxy servers which gives us the ability
> to identify offending IPs that are attacking us.   We would like defend
> against these denial of service attacks using mod_security and the
> httpd-guardian tool.
httpd-guardian can help defend against DoS attacks as well, but may be
limited in some scenarios, e.g. multiple clients behind a single
NATted IP.
> >From what I have read and assuming httpdguardian is already configured, we
> only need to add one line to the  Apache configuration to deploy it:
> SecGuardianLog |/path/to/httpd-guardian
> When I insert the above line it blocks all IPs to the site.  How do I
> configure this to blacklist just the offending IP?
What are the $THRESHOLD_1MIN and $THRESHOLD_5MIN variables set to in
httpd-guardian.pl?
From: Christian Bockermann <chris@jw...> - 2011-04-29 07:14:24
Am 29.04.2011 um 01:49 schrieb Ivan Ristic:
> You missed my point, which is that users don't care and shouldn't need
> to be aware of implementation details. The task at hand (protecting
> applications) is difficult as it is.
Thanks for pointing that out, Ivan. I believe this is what makes a lot of
people struggle, just reminding of the phase-1-rules-inside-Location directives
From: David Guimaraes <skysbsb@gm...> - 2011-04-29 01:32:52
Have you tried using apache mod_evasion or mod_limitipconn?
On Wed, Apr 27, 2011 at 11:34 AM, Abdullah, Ayub <Ayub.Abdullah@...>wrote:
>  Good Morning,
> added feature that allows this functionality.  Well we have been running
> into all sorts of problems getting this set up correctly.  At the moment we
> to identify offending IPs that are attacking us.   We would like defend
> only need to add one line to the  Apache configuration to deploy it:
> When I insert the above line it blocks all IPs to the site.  How do I
David Gomes Guimarães
From: Ivan Ristic <ivan.ristic@gm...> - 2011-04-28 23:49:18
You missed my point, which is that users don't care and shouldn't need
to be aware of implementation details. The task at hand (protecting
applications) is difficult as it is.
Come to think about it, I don't even care about the implementation details ;)
2011/4/28 Breno Silva <breno.silva@...>:
> Another reason... i still didn't to it .. but i'm thinking to deny
> transformations to be applied in stream* variables... since it can be
> reinjected and can break the data in the browser.
> So .. if i decided to use the current buffers i cannot do that.
> 2011/4/28 Breno Silva <breno.silva@...>
>> Also .. i want to change the reqbody to be alloced by apr.
>> On Thu, Apr 28, 2011 at 2:26 PM, Breno Silva <breno.silva@...>
>>> stream* is there to be now reallocable buffers. it will be used in the
>>> future for connection level buffers. and i will not do that with reqbody_
>>> and resbody_ data.
>>> Also .. resbody_data is using apr to alloc data which is much more faster
>>> that malloc. I don't think is a good idea try to realloc apr data and will
>>> make the management for difficult . Also input streams should have all kind
>>> of request body... reqbody buffer appears to not have data in some
>>> conten-types.
>>> On Thu, Apr 28, 2011 at 1:33 PM, Ivan Ristic <ivan.ristic@...>
>>>> Well that's the thing. I looked at the code, and there's practically
>>>> no difference, and no reason why @rsub can't be made to work with
>>>> REQUEST_BODY and RESPONSE_BODY.
>>>> Also, the "stream" part of the name is very misleading, because
>>>> there's no streaming going on.
>>>> On Wed, Apr 27, 2011 at 10:32 PM, Ryan Barnett <RBarnett@...>
>>>> > Breno has the details but the difference is that the STREAM_ variables
>>>> > can be swapped back into the live transaction for data modification.
>>>> > On Apr 27, 2011, at 5:17 PM, "Ivan Ristic" <ivan.ristic@...>
>>>> >> I think you should have reused REQUEST_BODY, seeing that the only
>>>> >> thing different about STREAM_INPUT_BODY is that it is always there
>>>> >> (whereas REQUEST_BODY is only there for
>>>> >> application/x-www-form-urlencoded C-T). The SecStreamInBodyInspection
>>>> >> could have easily controlled the presence of REQUEST_BODY.
>>>> >> On Wed, Apr 27, 2011 at 9:17 PM, Breno Silva <breno.silva@...>
>>>> >> wrote:
>>>> >>> STREAM_* variables are similar to its pairs body buffers. It runs in
>>>> >>> the
>>>> >>> same phase and the limits should work the same.
>>>> >>> However STREAM_* are created to be reallocable buffer for more
>>>> >>> complex data
>>>> >>> modifications like rsub operators and others in the future.
>>>> >>> When you enable SecStream* directives you will consume more memory.
>>>> >>> On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...>
>>>> >>>> I have a couple of questions about STREAM_INPUT_BODY:
>>>> >>>> - For STREAM_INPUT_BODY, the manual states that using @pm with it
>>>> >>>> is
>>>> >>>> better because the matching takes place before phase 2. But when I
>>>> >>>> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
>>>> >>>> execute in phase 2, just as any other rule.
>>>> >>>> - STREAM_INPUT_BODY contains the raw request body, no matter of
>>>> >>>> content type -- is that correct?
>>>> >>>> - What is the impact on memory consumption when
>>>> >>>> SecStreamInBodyInspection is enabled?
>>>> >>>> - Is the maximum size of the buffer still controlled with
>>>> >>>> SecRequestBodyLimit?
>>>> >>>> - Does that mean that when SecStreamInBodyInspection is enabled, it
>>>> >>>> effectively breaks the safety provided by
>>>> >>>> SecRequestBodyNoFilesLimit
>>>> >>>> (meaning that large file uploads will be fully buffered in RAM)?
>>>> >>>> --
>>>> >>>> Ivan Ristić
>>>> >>>> ------------------------------------------------------------------------------
>>>> >>>> WhatsUp Gold - Download Free Network Management Software
>>>> >>>> The most intuitive, comprehensive, and cost-effective network
>>>> >>>> management toolset available today.  Delivers lowest initial
>>>> >>>> acquisition cost and overall TCO of any competing solution.
>>>> >>>> http://p.sf.net/sfu/whatsupgold-sd
>>>> >>>> mod-security-users mailing list
>>>> >>>> mod-security-users@...
>>>> >>>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>>>> >>>> ModSecurity Services from Trustwave's SpiderLabs:
>>>> >>>> https://www.trustwave.com/spiderLabs.php
>>>> >> --
>>>> >> Ivan Ristić
>>>> >> ------------------------------------------------------------------------------
>>>> >> WhatsUp Gold - Download Free Network Management Software
>>>> >> The most intuitive, comprehensive, and cost-effective network
>>>> >> management toolset available today.  Delivers lowest initial
>>>> >> acquisition cost and overall TCO of any competing solution.
>>>> >> http://p.sf.net/sfu/whatsupgold-sd
>>>> >> mod-security-users mailing list
>>>> >> mod-security-users@...
>>>> >> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>>>> >> ModSecurity Services from Trustwave's SpiderLabs:
>>>> >> https://www.trustwave.com/spiderLabs.php
>>>> > This transmission may contain information that is privileged,
>>>> > confidential, and/or exempt from disclosure under applicable law. If you are
>>>> > not the intended recipient, you are hereby notified that any disclosure,
>>>> > copying, distribution, or use of the information contained herein (including
>>>> > any reliance thereon) is STRICTLY PROHIBITED. If you received this
>>>> > transmission in error, please immediately contact the sender and destroy the
>>>> > material in its entirety, whether in electronic or hard copy format.
>>>> Ivan Ristić
From: Breno Silva <breno.silva@gm...> - 2011-04-28 20:59:38
Another reason... i still didn't to it .. but i'm thinking to deny
transformations to be applied in stream* variables... since it can be
reinjected and can break the data in the browser.
So .. if i decided to use the current buffers i cannot do that.
2011/4/28 Breno Silva <breno.silva@...>
> Also .. i want to change the reqbody to be alloced by apr.
> On Thu, Apr 28, 2011 at 2:26 PM, Breno Silva <breno.silva@...>wrote:
>> stream* is there to be now reallocable buffers. it will be used in the
>> future for connection level buffers. and i will not do that with reqbody_
>> and resbody_ data.
>> Also .. resbody_data is using apr to alloc data which is much more faster
>> that malloc. I don't think is a good idea try to realloc apr data and will
>> make the management for difficult . Also input streams should have all kind
>> of request body... reqbody buffer appears to not have data in some
>> conten-types.
>> On Thu, Apr 28, 2011 at 1:33 PM, Ivan Ristic <ivan.ristic@...>wrote:
>>> Well that's the thing. I looked at the code, and there's practically
>>> no difference, and no reason why @rsub can't be made to work with
>>> REQUEST_BODY and RESPONSE_BODY.
>>> Also, the "stream" part of the name is very misleading, because
>>> there's no streaming going on.
>>> On Wed, Apr 27, 2011 at 10:32 PM, Ryan Barnett <RBarnett@...>
>>> > Breno has the details but the difference is that the STREAM_ variables
>>> can be swapped back into the live transaction for data modification.
>>> > On Apr 27, 2011, at 5:17 PM, "Ivan Ristic" <ivan.ristic@...>
>>> >> I think you should have reused REQUEST_BODY, seeing that the only
>>> >> thing different about STREAM_INPUT_BODY is that it is always there
>>> >> (whereas REQUEST_BODY is only there for
>>> >> application/x-www-form-urlencoded C-T). The SecStreamInBodyInspection
>>> >> could have easily controlled the presence of REQUEST_BODY.
>>> >> On Wed, Apr 27, 2011 at 9:17 PM, Breno Silva <breno.silva@...>
>>> >>> STREAM_* variables are similar to its pairs body buffers. It runs in
>>> >>> same phase and the limits should work the same.
>>> >>> However STREAM_* are created to be reallocable buffer for more
>>> complex data
>>> >>> modifications like rsub operators and others in the future.
>>> >>> When you enable SecStream* directives you will consume more memory.
>>> >>> On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...>
>>> >>>> I have a couple of questions about STREAM_INPUT_BODY:
>>> >>>> - For STREAM_INPUT_BODY, the manual states that using @pm with it is
>>> >>>> better because the matching takes place before phase 2. But when I
>>> >>>> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
>>> >>>> execute in phase 2, just as any other rule.
>>> >>>> - STREAM_INPUT_BODY contains the raw request body, no matter of
>>> >>>> content type -- is that correct?
>>> >>>> - What is the impact on memory consumption when
>>> >>>> SecStreamInBodyInspection is enabled?
>>> >>>> - Is the maximum size of the buffer still controlled with
>>> >>>> SecRequestBodyLimit?
>>> >>>> - Does that mean that when SecStreamInBodyInspection is enabled, it
>>> >>>> effectively breaks the safety provided by SecRequestBodyNoFilesLimit
>>> >>>> (meaning that large file uploads will be fully buffered in RAM)?
>>> >>>> --
>>> >>>> Ivan Ristić
>>> >>>> WhatsUp Gold - Download Free Network Management Software
>>> >>>> The most intuitive, comprehensive, and cost-effective network
>>> >>>> management toolset available today.  Delivers lowest initial
>>> >>>> acquisition cost and overall TCO of any competing solution.
>>> >>>> http://p.sf.net/sfu/whatsupgold-sd
>>> >>>> mod-security-users mailing list
>>> >>>> mod-security-users@...
>>> >>>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>>> >>>> ModSecurity Services from Trustwave's SpiderLabs:
>>> >>>> https://www.trustwave.com/spiderLabs.php
>>> >> Ivan Ristić
>>> >> WhatsUp Gold - Download Free Network Management Software
>>> >> The most intuitive, comprehensive, and cost-effective network
>>> >> management toolset available today.  Delivers lowest initial
>>> >> acquisition cost and overall TCO of any competing solution.
>>> >> http://p.sf.net/sfu/whatsupgold-sd
>>> >> mod-security-users mailing list
>>> >> mod-security-users@...
>>> >> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>>> > This transmission may contain information that is privileged,
>>> Ivan Ristić
From: Breno Silva <breno.silva@gm...> - 2011-04-28 19:29:44
Also .. i want to change the reqbody to be alloced by apr.
On Thu, Apr 28, 2011 at 2:26 PM, Breno Silva <breno.silva@...> wrote:
> stream* is there to be now reallocable buffers. it will be used in the
> future for connection level buffers. and i will not do that with reqbody_
> and resbody_ data.
> Also .. resbody_data is using apr to alloc data which is much more faster
> that malloc. I don't think is a good idea try to realloc apr data and will
> make the management for difficult . Also input streams should have all kind
> of request body... reqbody buffer appears to not have data in some
> conten-types.
> On Thu, Apr 28, 2011 at 1:33 PM, Ivan Ristic <ivan.ristic@...>wrote:
>> Well that's the thing. I looked at the code, and there's practically
>> no difference, and no reason why @rsub can't be made to work with
>> REQUEST_BODY and RESPONSE_BODY.
>> Also, the "stream" part of the name is very misleading, because
>> there's no streaming going on.
>> On Wed, Apr 27, 2011 at 10:32 PM, Ryan Barnett <RBarnett@...>
>> > Breno has the details but the difference is that the STREAM_ variables
>> can be swapped back into the live transaction for data modification.
>> > On Apr 27, 2011, at 5:17 PM, "Ivan Ristic" <ivan.ristic@...>
>> >> I think you should have reused REQUEST_BODY, seeing that the only
>> >> thing different about STREAM_INPUT_BODY is that it is always there
>> >> (whereas REQUEST_BODY is only there for
>> >> application/x-www-form-urlencoded C-T). The SecStreamInBodyInspection
>> >> could have easily controlled the presence of REQUEST_BODY.
>> >> On Wed, Apr 27, 2011 at 9:17 PM, Breno Silva <breno.silva@...>
>> >>> STREAM_* variables are similar to its pairs body buffers. It runs in
>> >>> same phase and the limits should work the same.
>> >>> However STREAM_* are created to be reallocable buffer for more complex
>> >>> modifications like rsub operators and others in the future.
>> >>> When you enable SecStream* directives you will consume more memory.
>> >>> On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...>
>> >>>> I have a couple of questions about STREAM_INPUT_BODY:
>> >>>> - For STREAM_INPUT_BODY, the manual states that using @pm with it is
>> >>>> better because the matching takes place before phase 2. But when I
>> >>>> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
>> >>>> execute in phase 2, just as any other rule.
>> >>>> - STREAM_INPUT_BODY contains the raw request body, no matter of
>> >>>> content type -- is that correct?
>> >>>> - What is the impact on memory consumption when
>> >>>> SecStreamInBodyInspection is enabled?
>> >>>> - Is the maximum size of the buffer still controlled with
>> >>>> SecRequestBodyLimit?
>> >>>> - Does that mean that when SecStreamInBodyInspection is enabled, it
>> >>>> effectively breaks the safety provided by SecRequestBodyNoFilesLimit
>> >>>> (meaning that large file uploads will be fully buffered in RAM)?
>> >>>> Ivan Ristić
>> >>>> WhatsUp Gold - Download Free Network Management Software
>> >>>> The most intuitive, comprehensive, and cost-effective network
>> >>>> management toolset available today.  Delivers lowest initial
>> >>>> acquisition cost and overall TCO of any competing solution.
>> >>>> http://p.sf.net/sfu/whatsupgold-sd
>> >>>> mod-security-users mailing list
>> >>>> mod-security-users@...
>> >>>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>> >>>> ModSecurity Services from Trustwave's SpiderLabs:
>> >>>> https://www.trustwave.com/spiderLabs.php
>> >> Ivan Ristić
>> >> WhatsUp Gold - Download Free Network Management Software
>> >> The most intuitive, comprehensive, and cost-effective network
>> >> management toolset available today.  Delivers lowest initial
>> >> acquisition cost and overall TCO of any competing solution.
>> >> http://p.sf.net/sfu/whatsupgold-sd
>> >> mod-security-users mailing list
>> >> mod-security-users@...
>> >> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>> confidential, and/or exempt from disclosure under applicable law. If you are
>> not the intended recipient, you are hereby notified that any disclosure,
>> copying, distribution, or use of the information contained herein (including
>> any reliance thereon) is STRICTLY PROHIBITED. If you received this
>> transmission in error, please immediately contact the sender and destroy the
>> material in its entirety, whether in electronic or hard copy format.
>> Ivan Ristić
From: Breno Silva <breno.silva@gm...> - 2011-04-28 19:26:43
stream* is there to be now reallocable buffers. it will be used in the
future for connection level buffers. and i will not do that with reqbody_
and resbody_ data.
Also .. resbody_data is using apr to alloc data which is much more faster
that malloc. I don't think is a good idea try to realloc apr data and will
make the management for difficult . Also input streams should have all kind
of request body... reqbody buffer appears to not have data in some
conten-types.
On Thu, Apr 28, 2011 at 1:33 PM, Ivan Ristic <ivan.ristic@...> wrote:
> Well that's the thing. I looked at the code, and there's practically
> no difference, and no reason why @rsub can't be made to work with
> REQUEST_BODY and RESPONSE_BODY.
> Also, the "stream" part of the name is very misleading, because
> there's no streaming going on.
> On Wed, Apr 27, 2011 at 10:32 PM, Ryan Barnett <RBarnett@...>
> > Breno has the details but the difference is that the STREAM_ variables
> can be swapped back into the live transaction for data modification.
> > On Apr 27, 2011, at 5:17 PM, "Ivan Ristic" <ivan.ristic@...>
> >> I think you should have reused REQUEST_BODY, seeing that the only
> >> thing different about STREAM_INPUT_BODY is that it is always there
> >> (whereas REQUEST_BODY is only there for
> >> application/x-www-form-urlencoded C-T). The SecStreamInBodyInspection
> >> could have easily controlled the presence of REQUEST_BODY.
> >> On Wed, Apr 27, 2011 at 9:17 PM, Breno Silva <breno.silva@...>
> >>> STREAM_* variables are similar to its pairs body buffers. It runs in
> >>> same phase and the limits should work the same.
> >>> However STREAM_* are created to be reallocable buffer for more complex
> >>> modifications like rsub operators and others in the future.
> >>> When you enable SecStream* directives you will consume more memory.
> >>> On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...>
> >>>> I have a couple of questions about STREAM_INPUT_BODY:
> >>>> - For STREAM_INPUT_BODY, the manual states that using @pm with it is
> >>>> better because the matching takes place before phase 2. But when I
> >>>> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
> >>>> execute in phase 2, just as any other rule.
> >>>> - STREAM_INPUT_BODY contains the raw request body, no matter of
> >>>> content type -- is that correct?
> >>>> - What is the impact on memory consumption when
> >>>> SecStreamInBodyInspection is enabled?
> >>>> - Is the maximum size of the buffer still controlled with
> >>>> SecRequestBodyLimit?
> >>>> - Does that mean that when SecStreamInBodyInspection is enabled, it
> >>>> effectively breaks the safety provided by SecRequestBodyNoFilesLimit
> >>>> (meaning that large file uploads will be fully buffered in RAM)?
> >>>> Ivan Ristić
> >>>> WhatsUp Gold - Download Free Network Management Software
> >>>> The most intuitive, comprehensive, and cost-effective network
> >>>> management toolset available today.  Delivers lowest initial
> >>>> acquisition cost and overall TCO of any competing solution.
> >>>> http://p.sf.net/sfu/whatsupgold-sd
> >>>> mod-security-users mailing list
> >>>> mod-security-users@...
> >>>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> >>>> ModSecurity Services from Trustwave's SpiderLabs:
> >>>> https://www.trustwave.com/spiderLabs.php
> >> Ivan Ristić
> >> WhatsUp Gold - Download Free Network Management Software
> >> The most intuitive, comprehensive, and cost-effective network
> >> management toolset available today.  Delivers lowest initial
> >> acquisition cost and overall TCO of any competing solution.
> >> http://p.sf.net/sfu/whatsupgold-sd
> >> mod-security-users mailing list
> >> mod-security-users@...
> >> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> confidential, and/or exempt from disclosure under applicable law. If you are
> copying, distribution, or use of the information contained herein (including
> any reliance thereon) is STRICTLY PROHIBITED. If you received this
> transmission in error, please immediately contact the sender and destroy the
> material in its entirety, whether in electronic or hard copy format.
> Ivan Ristić
From: Ivan Ristic <ivan.ristic@gm...> - 2011-04-28 18:33:26
Well that's the thing. I looked at the code, and there's practically
no difference, and no reason why @rsub can't be made to work with
REQUEST_BODY and RESPONSE_BODY.
Also, the "stream" part of the name is very misleading, because
there's no streaming going on.
On Wed, Apr 27, 2011 at 10:32 PM, Ryan Barnett <RBarnett@...> wrote:
> Breno has the details but the difference is that the STREAM_ variables can be swapped back into the live transaction for data modification.
> On Apr 27, 2011, at 5:17 PM, "Ivan Ristic" <ivan.ristic@...> wrote:
>> I think you should have reused REQUEST_BODY, seeing that the only
>> thing different about STREAM_INPUT_BODY is that it is always there
>> (whereas REQUEST_BODY is only there for
>> application/x-www-form-urlencoded C-T). The SecStreamInBodyInspection
>> could have easily controlled the presence of REQUEST_BODY.
>> On Wed, Apr 27, 2011 at 9:17 PM, Breno Silva <breno.silva@...> wrote:
>>> STREAM_* variables are similar to its pairs body buffers. It runs in the
>>> same phase and the limits should work the same.
>>> However STREAM_* are created to be reallocable buffer for more complex data
>>> modifications like rsub operators and others in the future.
>>> When you enable SecStream* directives you will consume more memory.
>>> On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...> wrote:
>>>> I have a couple of questions about STREAM_INPUT_BODY:
>>>> - For STREAM_INPUT_BODY, the manual states that using @pm with it is
>>>> better because the matching takes place before phase 2. But when I
>>>> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
>>>> execute in phase 2, just as any other rule.
>>>> - STREAM_INPUT_BODY contains the raw request body, no matter of
>>>> content type -- is that correct?
>>>> - What is the impact on memory consumption when
>>>> SecStreamInBodyInspection is enabled?
>>>> - Is the maximum size of the buffer still controlled with
>>>> SecRequestBodyLimit?
>>>> - Does that mean that when SecStreamInBodyInspection is enabled, it
>>>> effectively breaks the safety provided by SecRequestBodyNoFilesLimit
>>>> (meaning that large file uploads will be fully buffered in RAM)?
>>>> WhatsUp Gold - Download Free Network Management Software
>>>> The most intuitive, comprehensive, and cost-effective network
>>>> management toolset available today.  Delivers lowest initial
>>>> acquisition cost and overall TCO of any competing solution.
>>>> http://p.sf.net/sfu/whatsupgold-sd
>>>> mod-security-users mailing list
>>>> mod-security-users@...
>>>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>> WhatsUp Gold - Download Free Network Management Software
>> The most intuitive, comprehensive, and cost-effective network
>> management toolset available today.  Delivers lowest initial
>> acquisition cost and overall TCO of any competing solution.
>> http://p.sf.net/sfu/whatsupgold-sd
From: Ryan Barnett <RBarnett@tr...> - 2011-04-27 21:33:33
Breno has the details but the difference is that the STREAM_ variables can be swapped back into the live transaction for data modification.
On Apr 27, 2011, at 5:17 PM, "Ivan Ristic" <ivan.ristic@...> wrote:
> I think you should have reused REQUEST_BODY, seeing that the only
> thing different about STREAM_INPUT_BODY is that it is always there
> (whereas REQUEST_BODY is only there for
> application/x-www-form-urlencoded C-T). The SecStreamInBodyInspection
> could have easily controlled the presence of REQUEST_BODY.
> On Wed, Apr 27, 2011 at 9:17 PM, Breno Silva <breno.silva@...> wrote:
>> STREAM_* variables are similar to its pairs body buffers. It runs in the
>> same phase and the limits should work the same.
>> However STREAM_* are created to be reallocable buffer for more complex data
>> modifications like rsub operators and others in the future.
>> When you enable SecStream* directives you will consume more memory.
>> On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...> wrote:
>>> I have a couple of questions about STREAM_INPUT_BODY:
>>> - For STREAM_INPUT_BODY, the manual states that using @pm with it is
>>> better because the matching takes place before phase 2. But when I
>>> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
>>> execute in phase 2, just as any other rule.
>>> - STREAM_INPUT_BODY contains the raw request body, no matter of
>>> content type -- is that correct?
>>> - What is the impact on memory consumption when
>>> SecStreamInBodyInspection is enabled?
>>> - Is the maximum size of the buffer still controlled with
>>> SecRequestBodyLimit?
>>> - Does that mean that when SecStreamInBodyInspection is enabled, it
>>> effectively breaks the safety provided by SecRequestBodyNoFilesLimit
>>> (meaning that large file uploads will be fully buffered in RAM)?
>>> WhatsUp Gold - Download Free Network Management Software
>>> The most intuitive, comprehensive, and cost-effective network
>>> management toolset available today.  Delivers lowest initial
>>> acquisition cost and overall TCO of any competing solution.
>>> http://p.sf.net/sfu/whatsupgold-sd
>>> mod-security-users mailing list
>>> mod-security-users@...
>>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
From: Ivan Ristic <ivan.ristic@gm...> - 2011-04-27 21:17:14
Looking at STREAM_OUTPUT_BODY now -- how is it different from RESPONSE_BODY?
I see no difference, except that the memory consumption is buffered
because response bodies are stored twice when
SecStreamOutBodyInspection is enabled? Maybe I am not looking in the
right places?
On Wed, Apr 27, 2011 at 9:17 PM, Breno Silva <breno.silva@...> wrote:
> STREAM_* variables are similar to its pairs body buffers. It runs in the
> same phase and the limits should work the same.
> However STREAM_* are created to be reallocable buffer for more complex data
> modifications like rsub operators and others in the future.
> When you enable SecStream* directives you will consume more memory.
> On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...> wrote:
>> I have a couple of questions about STREAM_INPUT_BODY:
>> - For STREAM_INPUT_BODY, the manual states that using @pm with it is
>> better because the matching takes place before phase 2. But when I
>> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
>> execute in phase 2, just as any other rule.
>> - STREAM_INPUT_BODY contains the raw request body, no matter of
>> content type -- is that correct?
>> - What is the impact on memory consumption when
>> SecStreamInBodyInspection is enabled?
>> - Is the maximum size of the buffer still controlled with
>> SecRequestBodyLimit?
>> - Does that mean that when SecStreamInBodyInspection is enabled, it
>> effectively breaks the safety provided by SecRequestBodyNoFilesLimit
>> (meaning that large file uploads will be fully buffered in RAM)?
From: Ivan Ristic <ivan.ristic@gm...> - 2011-04-27 21:14:35
I think you should have reused REQUEST_BODY, seeing that the only
thing different about STREAM_INPUT_BODY is that it is always there
(whereas REQUEST_BODY is only there for
application/x-www-form-urlencoded C-T). The SecStreamInBodyInspection
could have easily controlled the presence of REQUEST_BODY.
From: Breno Silva <breno.silva@gm...> - 2011-04-27 20:17:37
STREAM_* variables are similar to its pairs body buffers. It runs in the
same phase and the limits should work the same.
However STREAM_* are created to be reallocable buffer for more complex data
modifications like rsub operators and others in the future.
When you enable SecStream* directives you will consume more memory.
On Wed, Apr 27, 2011 at 2:58 PM, Ivan Ristic <ivan.ristic@...> wrote:
> I have a couple of questions about STREAM_INPUT_BODY:
> - For STREAM_INPUT_BODY, the manual states that using @pm with it is
> better because the matching takes place before phase 2. But when I
> look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
> execute in phase 2, just as any other rule.
> - STREAM_INPUT_BODY contains the raw request body, no matter of
> content type -- is that correct?
> - What is the impact on memory consumption when
> SecStreamInBodyInspection is enabled?
> - Is the maximum size of the buffer still controlled with
> SecRequestBodyLimit?
> - Does that mean that when SecStreamInBodyInspection is enabled, it
> effectively breaks the safety provided by SecRequestBodyNoFilesLimit
> (meaning that large file uploads will be fully buffered in RAM)?
[mod-security-users] Questions about STREAM_INPUT_BODY
From: Ivan Ristic <ivan.ristic@gm...> - 2011-04-27 19:58:26
I have a couple of questions about STREAM_INPUT_BODY:
- For STREAM_INPUT_BODY, the manual states that using @pm with it is
better because the matching takes place before phase 2. But when I
look at my debug logs, I see the @pm rule against STREAM_INPUT_BODY
execute in phase 2, just as any other rule.
- STREAM_INPUT_BODY contains the raw request body, no matter of
content type -- is that correct?
- What is the impact on memory consumption when
SecStreamInBodyInspection is enabled?
- Is the maximum size of the buffer still controlled with SecRequestBodyLimit?
- Does that mean that when SecStreamInBodyInspection is enabled, it
effectively breaks the safety provided by SecRequestBodyNoFilesLimit
(meaning that large file uploads will be fully buffered in RAM)?
[mod-security-users] Mod Security e AuditConsole go (more)
From: yersinia spiros <yersinia.spiros@gm...> - 2011-04-27 15:08:45
Perhaps is of interest for someone here that  a Central Bank
http://www.bancaditalia.it/bancaditalia/bandigara/altri/bandi/webfarm/Allegato1-CapitolatoTecnico.pdf
(pag.
87 cfr. WAF) intend to use mod_security and AuditConsole for the its
new webfarm.
It requires professional services and support.
[mod-security-users] Denial of Service Attacks
From: Abdullah, Ayub <Ayub.Abdullah@tt...> - 2011-04-27 14:54:52
We are currently using Mod_security 2.5.13 /CRS 2.10 in our environment and we were under the impression that Denial of service attacks was a newly added feature that allows this functionality.  Well we have been running into all sorts of problems getting this set up correctly.  At the moment we have enabled xforwarding for on our proxy servers which gives us the ability to identify offending IPs that are attacking us.   We would like defend against these denial of service attacks using mod_security and the httpd-guardian tool.
>From what I have read and assuming httpdguardian is already configured, we only need to add one line to the  Apache configuration to deploy it:
SecGuardianLog |/path/to/httpd-guardian
When I insert the above line it blocks all IPs to the site.  How do I configure this to blacklist just the offending IP?
Re: [mod-security-users] What is the purpose of SecInterceptOnError?
From: Ivan Ristic <ivan.ristic@gm...> - 2011-04-26 20:55:55
Ah, so this is MODSEC-12 then
https://www.modsecurity.org/tracker/browse/MODSEC-12
If that's all SecInterceptOnError does, I don't think the directive is
needed. Simply continue to process the remaining rules when one fails.
I don't see why anyone would want to stop processing all rules in a
phase -- that was a bug.
What I think SecInterceptOnError should be doing (when set to "on"),
is blocking with Internal Server Error 500 ("fail closed"). Rules have
no business failing silently. It's probably a result of
misconfiguration. There's a patch that does that, attached to
MODSEC-12.
On Tue, Apr 26, 2011 at 9:50 PM, Breno Silva <breno.silva@...> wrote:
> In previous version of ModSecurity when a rule fails the engine just stop
> processing rules in the same phase.
> As we don't think it is a good idea the SecInterceptOnError were created.
> You can control if modsecurity will stop or continue processing rules.
> On Tue, Apr 26, 2011 at 3:38 PM, Ivan Ristic <ivan.ristic@...> wrote:
>> I can't figure out the purpose of SecInterceptOnError. From the name
>> it sounds as if ModSecurity will block when a rule fails, but all it
>> seem to do is stop processing further rules. (That's also what the
>> documentation says.) What's the intended use case? Why would I set
>> SecInterceptOnError to on?
From: Breno Silva <breno.silva@gm...> - 2011-04-26 20:50:22
In previous version of ModSecurity when a rule fails the engine just stop
processing rules in the same phase.
As we don't think it is a good idea the SecInterceptOnError were created.
You can control if modsecurity will stop or continue processing rules.
On Tue, Apr 26, 2011 at 3:38 PM, Ivan Ristic <ivan.ristic@...> wrote:
> I can't figure out the purpose of SecInterceptOnError. From the name
> it sounds as if ModSecurity will block when a rule fails, but all it
> seem to do is stop processing further rules. (That's also what the
> documentation says.) What's the intended use case? Why would I set
> SecInterceptOnError to on?
[mod-security-users] What is the purpose of SecInterceptOnError?
From: Ivan Ristic <ivan.ristic@gm...> - 2011-04-26 20:38:29
I can't figure out the purpose of SecInterceptOnError. From the name
it sounds as if ModSecurity will block when a rule fails, but all it
seem to do is stop processing further rules. (That's also what the
documentation says.) What's the intended use case? Why would I set
SecInterceptOnError to on?
[mod-security-users] Detecting Malice with ModSecurity: Request
Method Anomalies
From: Ryan Barnett <RBarnett@tr...> - 2011-04-26 18:45:36
http://blog.spiderlabs.com/2011/04/detecting-malice-with-modsecurity-request-method-anomalies.html
Re: [mod-security-users] [Mod-security-developers] Presentation and
Mod Security for Java Advance
[mod-security-users] Log rotation for Concurrent logs
From: Ray Van Dolson <rvandolson@es...> - 2011-04-22 04:37:16
Someone probably has a simpler method to do this, but wrote up a quick
Python script to handle rotating concurrent log files (which can get
fairly big / unwieldy quickly depending on your logging options).
http://fedorapeople.org/~rayvd/modsec_rotate/modsec_rotate.py
[mod-security-users] ModSecurity Advanced Topic of the Week:
Integrating IDS Signatures
From: Ryan Barnett <RBarnett@tr...> - 2011-04-21 14:58:48
http://blog.spiderlabs.com/2011/04/modsecurity-advanced-topic-of-the-week-integrating-ids-signatures.html
[mod-security-users] New mail-list to report false positives with
From: Ryan Barnett <RBarnett@tr...> - 2011-04-20 20:29:07
Per a recent email thread on the OWASP ModSecurity CRS list (https://lists.owasp.org/pipermail/owasp-modsecurity-core-rule-set/2011-April/000732.html) - we need help from the community with identifying false positives with rules.  We have therefore setup a separate mail-list whose sole purpose is to report on and discuss false positives -
https://lists.sourceforge.net/lists/listinfo/mod-security-report-false-positives
Please sign-up for and use that list to send an email when you encounter a false positive with any of the CRS rules.  When sending an email, please provide the following -
1.  Short error_log alert message
2.  Attach an audit log file showing the full transaction
[mod-security-users] Compile ModSec 2.6.0 under AIX
From: Breno Silva <breno.silva@gm...> - 2011-04-19 13:21:54
Please if someone will try to compile modsec 2.6.0 under AIX. Please contact
me for tests and adjusts.

value: This website is a web service that offers software consumers a centralized online location to control and manage open-source software projects and research business software. It provides source code repository hosting, bug tracking, mirroring of downloads for load balancing, a wiki for documentation, developer and user mailing lists, user-support forums, user-written reviews and ratings, a news bulletin, micro-blog for publishing project updates, and other features.


text:
Booking.com: 3 hotels in Brea, United States of America. Book your hotel now!
Different ways to stay in Brea:
Brea 3 properties
Featured Hotels in Brea
Just 20 minutes' from Disneyland and California Adventure amusement parks, this Brea motel provides a daily continental breakfast and free Wi-Fi in all guest rooms. More…
A 4-minute drive off the Orange Freeway, this Southern California motel is 10.9 miles from Disneyland. It offers free Wi-Fi access and a 24-hour front desk. More…
Free garage parking, clean well- appointed suites, free brunch.
Conveniently located near the Brea Mall in Brea, California, this all-suite property offers spacious accommodations and a variety of convenient and delicious on-site dining options. More…
(8.8 miles from Brea)
Everything! The room was a two bedroom suite with a sofa bed in living room. The kitchen is great with full size fridge freezer and oven. The breakfast was great with lots of choice and all fresh and yummy.
(7.7 miles from Brea)
giant pool, hot tub, location to Disneyland, nice rooms, clean and comfy!
Just a 4-minute walk from Disneyland, this family-friendly hotel features an Olympic-size pool and hot tub. It has an on-site tour desk and game room. More…
An outdoor pool and fitness center are featured at this Anaheim hotel. Disneyland is one mile from the property and the pet-friendly rooms offer a full kitchen. More…
(7.3 miles from Brea)
Great hotel for family with young children. 5 min walk from Disneyland. Very convenient for the price.
Neighboring Disneyland and 0.3 miles from the entrance of Disneyland, Fairfield Inn Anaheim offers Disney themed accommodation with cable TV. Hotel features an outdoor pool and games room. More…

type: global

value: This website is a Dutch online travel agency for lodging reservations & other travel products, and a subsidiary of Booking Holdings. It is headquartered in Amsterdam.The website has over 28 million listings.


text:
Takehiro Takama - Semantic Scholar
Y Orita12
Y Fujiwara10
13Y Orita
10T Kamada
10Y Fujiwara
6Pascale M. Y. Smets
6S Ochi
Perceptions of biodiversity, environmental services, and conservation of planted mangroves: a case study on Nijhum Dwip Island, Bangladesh
M. S. Iftekhar, Takehiro Takama
Restoration of mangroves is often considered a way to minimize losses incurred from their decline and to provide additional services to coastal communities. However, the success of restoration… (More)
Recurrent Cushing's disease associated with nephrotic syndrome.
Tetsuya Tatsumi, Takkan Morishima, +7 authors SungShik Shin
A case of recurrent Cushing's disease with nephrotic syndrome due to membranoproliferative glomerulonephritis (MPGN) is presented. Functional pituitary adenoma recurred 6 years after transsphenoidal… (More)
Hiroshi Isozaki, Sasau Matsumoto, +7 authors Toshiyoshi Fujiwara
Using the Postgastrectomy Syndrome Assessment Scale (PGSAS)-45, we compared the surgical outcomes and the quality of life (QOL) between patients undergoing limited gastrectomies and those undergoing… (More)
A case of polycystic kidney disease with nephrotic syndrome.
Hajime Nakahama, T. Inoue, +4 authors Toshikazu Kamada
Nephrotic syndrome developed in a patient with autosomal-dominant polycystic kidney disease. Renal biopsy revealed minor glomerular abnormalities. This type of nephrotic syndrome complication in an… (More)
A novel triple secured technique for pancreatic reconstruction following pancreaticoduodenectomy for a soft pancreas.
Kazukuni Kakinoki, Kumiko Okano, +12 authors Yoshihisa Suzuki
BACKGROUND/AIMS Soft pancreases are susceptible to developing pancreatic fistula following pancreaticoduodenectomy. To reduce the incidence of pancreatic fistula after pancreaticoduodenectomy in… (More)
Sae Ochi, Y. Fujiwara, +6 authors Toshikazu Kamada
To clarify the signal transduction mechanism of angiotensin II in renal glomeruli, we studied the effect of the hormone on phospholipid metabolism using isolated rat glomeruli. Stimulation of the… (More)
Long-term effects of a cholesterol-free diet on serum cholesterol levels in Zen monks.
Hitomi Otani, Tamotsu Kita, +7 authors Masao Yoshii
[Structure and functions of the kidney glomerulus. The regulatory mechanism of the glomerular filtration rate].
Yorihisa Orita, Y. Fujiwara, Sae Ochi, S. H. Shin, Takehiro Takama, Toshikazu Kamada
Endothelin-1 stimulates prostaglandin E2 production in an extracellular calcium-independent manner in cultured rat mesangial cells.
Mutsumi Fukunaga, Sae Ochi, +4 authors Toshikazu Kamada
To study a possible role of endothelin-1 (ET-1) in the regulation of glomerular function, we examined the presence of receptors for, and the biological action of, ET-1 in cultured rat mesangial (M)… (More)
Furosemide accelerates gentamicin accumulation in cultured renal cells (LLC-PK1 cells).
Hajime Nakahama, Yasuo Fukuhara, Yorihisa Orita, Akiko Yamauchi, Takehiro Takama, Toshikazu Kamada
Furosemide is known to potentiate gentamicin nephrotoxicity. The mechanism of potentiation is unclear. In our previous studies, we demonstrated that furosemide enhanced gentamicin accumulation in… (More)

value: This website is an artificial-intelligence backed search engine for academic publications developed at the Allen Institute for AI and publicly released in November 2015. It uses advances in natural language processing to provide summaries for scholarly papers.


text:
Sanctions vs. energy and Iran - The New York Times
International Business|Sanctions vs. energy and Iran
Sanctions vs. energy and Iran
By DANIEL ALTMAN JAN. 23, 2006
The United States and its allies face a quandary as they confront Iran over its nuclear ambitions.
If sanctions are the answer, what economic levers could they safely use against a country that controls a substantial share of the oil supply for Europe and Asia? It's a difficult question to begin with, but it becomes more complex in light of Iran's unique political and economic situation.
At the moment, sanctions are a purely hypothetical topic, given that China or Russia are inclined to veto attempts by the United Nations' security council to impose them on Iran. On Friday, the Bush administration and European officials also said they did not want to take steps toward an oil embargo or other economic penalties that would increase hardships in Iran.
Indeed, such a move would be counterproductive for a number of reasons, experts said. The United States has already tiptoed down this path by banning virtually all commercial and financial transactions with the country. Yet there are very few areas where further sanctions might be effective, experts said.
One reason is that Iran's government has discouraged the formation of an industrial middle class, said Abbas Milani, director of the Iranian studies program at Stanford University, who left Iran in 1987. That would leave 80 percent of the economy essentially in the hands of the state. As a result, there is no solid cadre of business leaders to pressure the government.
Another reason is the difficulty of enforcement. "Sanctions are very, very porous," Askari said. "In the case of Iran, both because of where it is situated and where it can get things from, it can get what it wants."
Even stopping the flow of the high-technology goods mostly manufactured in the United States and Europe could be difficult, said Ali Fatemi, dean of the graduate school of business at the American University of Paris. Fatemi said he left Iran in 1954, returned two years before the revolution of 1978-79 and then left again in the early 1980's. "The only thing that it could do in most cases is it could raise the price, because there are so many loopholes, as we've seen in Iraq," he said.
Iran is more vulnerable, Fatemi said, in its imports of refined petroleum products. Despite its massive oil reserves, the country has very little capacity to produce substances like gasoline and jet fuel. He estimated Iran's imports in this area are at about $10 billion a year, a figure that may represent up to a third of all imports.
Another energy-related area in which Iran's future economic growth could suffer is its natural gas industry. The country has the world's second-largest gas reserves but has yet to become a net exporter of the commodity.
"They know they're sitting on a ton of gas and they're dying to develop it," said Cliff Kupchan, an Iran analyst at the Eurasia Group who was formerly in the U.S. State Department. "They can't do it by themselves, and sanctions that prevented them from doing it would hurt Iran."
The hurt might be especially acute because the domestic economy in a slump.
"Unemployment has increased in Iran in the last six months, despite of absolutely unheard-of revenue for the government," Milani said. "There's a massive flight of capital. No one knows the exact figure, but it is massive."
The government keeps prices for food and other necessities fixed at low levels, so there is little incentive for suppliers to produce more. Yet the oil money is filtering into the economy, leading to "too many dollars chasing too few goods," Milani said. "Inflation is close to 20 percent officially," he added. "Many people think it's much, much higher."
In the midst of this general inflation, however, house prices are falling along with the capital flight, eroding average Iranians' wealth. "In real estate, for the first time in recent memory, the prices are going down," Milani said. "There's a glut of properties on the market."
Even under these circumstances, sanctions might be counterproductive if they provoked Iran to turn off its oil taps, said Paul Stevens, a professor of petroleum policy at the University of Dundee who helped Iran to unravel its international legal claims after the revolution. "They're quite capable of doing so," he said. "Cutting off noses despite faces is something that comes to mind."
The prospect of Iran curbing oil supply - and the threat, however remote, of sanctions on Iran's oil exports - has already helped drive the price of crude back toward $70 per barrel in the past week.
Indeed, oil is an obvious focus of any talk of sanctions, as it was in Iraq's case under Saddam Hussein. But several experts cautioned against trying an Iraq-style embargo on Iran.
"If Iran was not allowed to export its oil, probably the price of oil in today's dollars would go over $100 a barrel," said Hossein Askari, who holds the Iran professorship of international business at George Washington University. Aksari said he left Iran in 1954 and that his chair was endowed by the pre-revolutionary government of Shah Reza Pahlavi in 1974.
A high oil price would hurt consumers all over the world but particularly in Iran's major markets, which include China and Japan, said Milani.
Instead of barring Iran from exporting oil, he said, a better approach would be to freeze the assets and confiscate the properties of its leaders. He also suggested freezing the foreign assets of Iran's revolutionary foundations, through which the country's elites control vast business empires.
The foundations, called ponyads, may be the repositories for money skimmed off government oil revenue, Fatemi said.
"They don't give any account to anybody, and they're bigger than the public sector," Fatemi said of the ponyads. "They are basically run for the profit of the ruling mafia."
Fatemi added that billions of dollars in assets owned by Iran's rulers were in Switzerland and the rest of Europe. He also asserted that the regime laundered oil revenue through Dubai and other countries, sometimes for business, sometimes to support militant groups like Hezbollah.
"There's a lot of room there to apply pressure on Dubai to stiffen its anti-money-laundering rules," Fatemi said. "If Dubai wants to be a responsible international financial center, it has to change its methods in terms of giving Iranians a blank check to do whatever they want to do."

value: This website is an American daily newspaper based in New York City with a worldwide readership. Founded in 1851, the Times has since won 132 Pulitzer Prizes, the most of any newspaper, and has long been regarded within the industry as a national "newspaper of record".


text:
Kayak day trip on Lake Superior to see Pictured Rocks - Review of Northern Waters Adventures, Munising, MI - TripAdvisor
Restaurants near Northern Waters Adventures
Things to do near Northern Waters Adventures
Kayak day trip on Lake Superior to see... - Northern Waters Adventures
“Kayak day trip on Lake Superior to see Pictured Rocks”
Review of Northern Waters Adventures
Ranked #5 of 7 Tours in Munising
breadbaker5632 Westerville, Ohio
Kayak day trip on Lake Superior to see Pictured Rocks
The owner of the Falling Rock Cafe' (another great place) referred us to Carl Hansen and Northern Waters. When I called Carl to set up our trip, he not only took care of answering any questions I had about our trip with him, but he also took the time to recommend hiking trails and put-ins for our recreational kayaks. The day of our trip (moved back 1 day due to water conditions - communicated ahead of time), we were fitted with a tandem kayak that was comfortable for my 6'4" husband and me and given spray skirts, paddles, PFDs, dry bags and lunch bags to use. Our trip leader, Alex, was personable, helpful and knew the area. We had beautiful weather, paddled through arches and caves, beached on a rock ledge for lunch, and even saw a shipwreck under the clear water! At one point after lunch, we had the opportunity to swim in Lake Superior. Alex led the way to a spot where there was a rock cave with a ledge perfect for jumping in. I sort of felt sorry for the folks who chose the ferry trip - we waved to them as they passed and resumed our fun :) The day trip was about 9 miles. It gave us the opportunity to really see the rocks up close and to take some awesome pictures. I would highly recommend Northern Waters Adventures!
Ask breadbaker5632 about Northern Waters Adventures
6 Thank breadbaker5632
"tour guides were amazing"
theresa571
theresa571 Munising, Michigan
Went through Northern Waters Adventures with Carl Hansen, owner and head guide. Perfect trip, stunning cliff formations, gorgeous Lake Superior and well-planned. Carl has been kayaking for over 30 years and is a great guide, local 'historian', and has a perfect day trip agenda for the experienced as well as the novice kayaker.
Ask theresa571 about Northern Waters Adventures
6 Thank theresa571
seela Michigan
My husband and I are in our mid 50's and have kayaked some on rivers. We are active but not terribly athletic. Kayaking Lake Superior was a whole new experience. The day was pretty windy but hot and sunny and it felt good to be on the water. Our group ranged from totally novice to quite experienced. We had two guides since our group was a little larger - about 9. Most of us had tandem kayaks as I did with my husband. The water was a little rough but definitely the hardest part was hauling the kayaks down to the water and back again afterwards. As some of the other reviewers noted - it was quite a haul from the parking lot to the shore. Take note: Guests and guides haul equally - no slacking here! The scenery was fantastic - what a thrill to paddle thru Miners Arch! Our guides were very personable, sharing stories and history about Pictured Rocks and the area. The lunchtime highlight was a story about indian chief, Powers of the Air, and the face in the rock in Autrain. This trip does take some muscle and we were tired at the end of the trip but it was worth every moment.
P.S. In response to that story we did make a special stop to see the face in the rock in Autrain.
Ask seela about Northern Waters Adventures
3 Thank seela
Great Trip and Owner does everything that someone can hope for
Our original 3-day kayaking trip was altered due to bad weather but Carl (owner-guide) did everything in his power to make sure that we had a great trip (putting together options for accommodations / day trips / food. He really made our trip special. The day that we did get to go out on the Pictured Rocks lakeshore was amazing and would highly recommendation Northern Waters for any kayaking!!
Ask schulze52 about Northern Waters Adventures
There's no other way to see Pictured Rocks than to kayak. We got up close to the colorful rocks and explored caves. We also got wet by a waterfall and paddled over a shipwreck. This area is absolutely magnificent and shouldn't be missed. Our guides, Alex and Carl, were experienced and entertaining. The only caution is the heavy lifting of equipment that's involved. Please, if you're able-bodied, help your fellow kayakers and guides!
Ask KTBNY about Northern Waters Adventures
Travelers who viewed Northern Waters Adventures also viewed
Been to Northern Waters Adventures? Share your experiences!
0.1 miles from Northern Waters Adventures
0.8 miles from Northern Waters Adventures
0.9 miles from Northern Waters Adventures
1.4 miles from Northern Waters Adventures
1.7 miles from Northern Waters Adventures
2.7 miles from Northern Waters Adventures
2.8 miles from Northern Waters Adventures

value: This website is an American online travel company that operates a website and mobile app with user-generated content and a comparison shopping website.


text:
$10 for Merchandise at Peaux Pouri Gifts - Peaux Pouri Gifts | Groupon
$10 for $20 Worth of Merchandise at Peaux Pouri Gifts
Peaux Pouri Gifts 5
$20 Groupon to Peaux Pouri Gifts
Peaux Pouri Gifts showcases vibrant and whimsical gifts, accessories, and art within its walls, from scarves and purses to products adorned with fleur-de-lis, and more. Pamper bodies and scent-starved nasal glands with Niven Morgan lotions, bath products, and perfumes ($10–$48) or bedeck lucky heads and limbs with jewelry ($10–$55). Sassy wine glasses ($10–$25) become willing receptacles for frozen, fruity Wine-a-Rita mixes ($12.50). Refresh water closets after filling a bathtub full of chum with Poo-Pourri deodorizers ($5–$20) or decoratively illuminate pantries and giant birthday cakes with Lux and Votivo candles ($10–$35). Peaux Pouri Gifts also carries a collection of wall art ($15–$42), including creations by local talent Rebecca Tyree ($15–$50).
Promotional value expires Oct 2, 2011. Amount paid never expires. Limit 1 per person, may buy 2 additional as gifts. Limit 1 per visit. In-store only. Not valid toward gift cards. Must use in 1 visit, no cash back. Merchant is solely responsible to purchasers for the care and quality of the advertised goods and services.
About Peaux Pouri Gifts

value: This website is an American global e-commerce marketplace connecting subscribers with local merchants by offering activities, travel, goods and services in 15 countries. Based in Chicago, Groupon was launched there in November 2008, launching soon after in Boston, New York City and Toronto.


text:
Community-level text messaging for 2009 H1N1 prevention in China. - PubMed - NCBI
AbstractFormatSummarySummary (text)AbstractAbstract (text)MEDLINEXMLPMID ListApplySend to:Choose DestinationFileClipboardCollectionsE-mailOrderMy BibliographyCitation managerFormatSummary (text)Abstract (text)MEDLINEXMLPMID ListCSVCreate File1 selected item: 23867026FormatSummarySummary (text)AbstractAbstract (text)MEDLINEXMLPMID ListMeSH and Other DataE-mailSubjectAdditional textE-mailDidn't get the message? Find out why...Add to ClipboardAdd to CollectionsOrder articlesAdd to My BibliographyGenerate a file for use with external citation management software.Create File
See comment in PubMed Commons belowAm J Prev Med. 2013 Aug;45(2):190-6. doi: 10.1016/j.amepre.2013.03.014.Community-level text messaging for 2009 H1N1 prevention in China.Chai SJ1, Tan F, Ji Y, Wei X, Li R, Frost M.Author information1CDC, Atlanta, GA 30333, USA. schai@cdc.govAbstractBACKGROUND: Although patients worldwide increasingly are using mobile phone text messaging (SMS) for clinical care, quality data are sparse on the community-level effectiveness of SMS to prevent and control disease.PURPOSE: To determine SMS effectiveness in improving 2009 H1N1 knowledge, attitudes, behaviors, and self-reported outcomes and to assess community SMS acceptability.METHODS: A program evaluation of Shanghai, China's SMS system using a single-blinded, randomized-controlled method was conducted in 2010 and results were analyzed in 2010-2011. Randomly selected community residents who agreed to participate were assigned to receive 3 weeks of either 2009 H1N1 prevention and control or tobacco-cessation messages. Assessments were made of 2009 H1N1 knowledge, attitudes, behaviors, and self-reported influenza-like illness before and after sending messages to participants. Acceptability of SMS also was assessed.RESULTS: Of 1992 respondents, those receiving 2009 H1N1 messages had higher scores measuring 2009 H1N1 knowledge (4.2% higher) and desired attitudes (9.4% higher) (p<0.001); 1.77 times greater odds of new 2009 H1N1 vaccination (p<0.001); and 0.12 times smaller odds of reporting influenza-like illness (p<0.001) than those receiving tobacco messages. More than 95% of participants found the SMS program useful and trustworthy; nearly 90% would use it again.CONCLUSIONS: SMS can improve self-reported uptake of short-term behaviors, such as vaccination, that can result in long-term prevention and control of disease. SMS can improve knowledge and influence attitudes about infection prevention and control and self-reported health outcomes. In Shanghai, health-based SMS is acceptable to users.Published by Elsevier Inc. on behalf of American Journal of Preventive Medicine.PMID: 23867026 [PubMed - indexed for MEDLINE] SharePublication Types, MeSH TermsPublication TypesRandomized Controlled TrialResearch Support, Non-U.S. Gov'tResearch Support, U.S. Gov't, P.H.S.MeSH TermsAdultChinaDelivery of Health Care/methodsFemaleHealth Knowledge, Attitudes, PracticeHumansInfection Control/methodsInfluenza A Virus, H1N1 Subtype*Influenza, Human/prevention & control*MaleMiddle AgedOutcome Assessment (Health Care)Patient Acceptance of Health CarePatient PreferenceProgram EvaluationSmoking Cessation*/methodsSmoking Cessation*/psychologyText Messaging/statistics & numerical data*Vaccination*/psychologyVaccination*/statistics & numerical dataLinkOut - more resourcesFull Text SourcesElsevier ScienceClinical KeyMedicalFlu - MedlinePlus Health InformationH1N1 Flu (Swine Flu) - MedlinePlus Health InformationImmunization - MedlinePlus Health InformationQuitting Smoking - MedlinePlus Health InformationPubMed Commons home

value: This website is part of the United States National Library of Medicine , a branch of the National Institutes of Health . It is approved and funded by the government of the United States.


text:
Dale L. Warren Condolences | Times-News
Thank you for signing the Guest Book for Dale L. Warren.
Please take a moment to sign the Guest Book for Dale L. Warren.
So sorry to hear of Dale's passing. My thoughts and prayers are with you and the family.
Debbie Lunsford, East Flat Rock, NC
Send me a daily email when updates are made to the obituary or Condolence page for Dale L. Warren.

value: This website is a United States-based website founded in 1998, the world's largest commercial provider of online memorials. The Web site hosts obituaries and memorials for more than 70 percent of all U.S. deaths.


text:
[Front Drill&Slot Brake Rotors Ceramic Pads Fit 95-99 Chevrolet Tahoe 4WD DIESEL | eBay
[Front Slott Brake Rotors Ceramic Pads] Fit 95-99 Chevrolet Tahoe 4WD DIESEL
[Front Drill Brake Rotors Metallic Pads] Fit 95-99 Chevrolet Tahoe 4WD DIESEL
[Front Drill Brake Rotors Ceramic Pads] Fit 95-99 Chevrolet Tahoe 4WD DIESEL
Details about [Front Drill&Slot Brake Rotors Ceramic Pads Fit 95-99 Chevrolet Tahoe 4WD DIESEL
Original priceC $211.27
C $52.82 (25% off)
Discounted price C $158.45
254119097748
Last updated on Mar 20, 2019 15:56:06 EDT View all revisions
Country/Region of Manufacture: Canada Manufacturer Part Number: ZSD-5593x-CRD370
Superseded Part Number: D370 Interchange Part Number: 56242
Bolt Pattern: 8x6.5 Other Part Number: 5593
Weight of Rotor: 20.5 Fitment Type: Direct Replacement

value: This website is an American multinational e-commerce corporation based in San Jose, California, that facilitates consumer-to-consumer and business-to-consumer sales through its website.


text:
THE WEEKS, Future Thieves and H.A.R.D. Tickets, Fri, Nov 8, 2019 at 7:00 PM | Eventbrite
AEG LIVE PRESENTS THE WEEKS. Future Thieves and H.A.R.D.
Future Thieves and H.A.R.D. open.
That's the sound of Easy, The Weeks' long-awaited followup to their breakthrough album, Dear Bo Jackson. Recorded at Ardent Studios in Memphis — a place filled with the ghosts (and gear) of the Replacements, ZZ Top, and Big Star, all of whom traveled to Ardent to create their own landmark albums —Easy finds The Weeks doubling down on a mix of groove, grit, and guitars. It's swaggering and sharply-focused, shining new light on a band of brothers who, although still in their mid-20s, have already logged a decade's worth of sweaty gigs together.
THE WEEKS, Future Thieves and H.A.R.D. at recordBar

value: This website is an American event management and ticketing website. The service allows users to browse, create, and promote local events.


text:
Journal ListProc Natl Acad Sci U S Av.106(31); 2009 Aug 4PMC2722304
Proc Natl Acad Sci U S A. Aug 4, 2009; 106(31): 12909–12914. Published online Jun 30, 2009. doi: 10.1073/pnas.0810403106PMCID: PMC2722304Medical SciencesMet induces diverse mammary carcinomas in mice and is associated with human basal breast cancerCarrie R. Graveel,a Jack D. DeGroot,a Yanli Su,a Julie Koeman,b Karl Dykema,c Samuel Leung,d Jacqueline Snider,e Sherri R. Davies,e Pamela J. Swiatek,b Sandra Cottingham,f Mark A. Watson,e Matthew J. Ellis,e Robert E. Sigler,g Kyle A. Furge,c and George F. Vande Woudea,1Departments of aMolecular Oncology, bCytogenetics, cComputational Biology, and gAnalytical, Cellular, and Molecular Microscopy, Van Andel Research Institute, Grand Rapids, MI 49503; dGenetic Pathology Evaluation Centre, University of British Columbia, Vancouver, BC, Canada V5Z 4E6; eSiteman Comprehensive Cancer Center, Washington University School of Medicine, St. Louis, MO 63110; and fSpectrum Health Hospitals, Grand Rapids, MI 495031To whom correspondence should be addressed. E-mail: gro.iav@eduowednav.egroegEdited by Joan S. Brugge, Harvard Medical School, Boston, MA, and approved May 7, 2009Author contributions: C.R.G. and G.F.V.W. designed research; C.R.G., J.D.D., Y.S., J.K., K.D., and K.A.F. performed research; J.S., S.R.D., P.J.S., M.A.W., and M.J.E. contributed new reagents/analytic tools; C.R.G., J.D.D., J.K., K.D., S.L., S.R.D., S.C., R.E.S., and K.A.F. analyzed data; and C.R.G. wrote the paper.Author information ► Article notes ► Copyright and License information ►Received October 15, 2008Copyright notice This article has been cited by other articles in PMC.AbstractUnderstanding the signaling pathways that drive aggressive breast cancers is critical to the development of effective therapeutics. The oncogene MET is associated with decreased survival in breast cancer, yet the role that MET plays in the various breast cancer subtypes is unclear. We describe a knockin mouse with mutationally activated Met (Metmut) that develops a high incidence of diverse mammary tumors with basal characteristics, including metaplasia, absence of progesterone receptor and ERBB2 expression, and expression of cytokeratin 5. With gene expression and tissue microarray analysis, we show that high MET expression in human breast cancers significantly correlated with estrogen receptor negative/ERBB2 negative tumors and with basal breast cancers. Few treatment options exist for breast cancers of the basal or trastuzumab-resistant ERBB2 subtypes. We conclude from these studies that MET may play a critical role in the development of the most aggressive breast cancers and may be a rational therapeutic target.Keywords: ErbB2, mouse modelBreast cancer affects >200,000 women in the United States each year, yet the mortality rate is rapidly declining with earlier detection and the availability of targeted therapies. However, tumors that do not express estrogen receptor (ER), progesterone receptor (PR), or both are less differentiated, more clinically aggressive, and less likely to respond to hormone-targeted therapy (1, 2). Moreover, 20–30% of all breast cancers overexpress human epidermal growth factor receptor-2 (HER2/ERBB2) and are associated with reduced survival (3). Those tumors that no longer depend on ER/PR and ERBB2 signaling have the poorest prognosis and no targeted therapeutic options (4). Recently, gene expression studies have identified several distinct breast cancer subtypes that correlate with clinical outcome (5, 6). These molecular subtypes include three main groups of ER negative tumors, including basal, ERBB2, and the normal-like/unclassified subtype, and at least two types of ER positive tumors (luminal A and luminal B). Patients with tumors classified as basal or ERBB2 have significantly shorter survival rates compared with those with the ER+ luminal A subtype. Metaplastic breast carcinomas have various combinations of adenocarcinoma, mesenchymal, and epithelial features and are associated with the basal subtype (7, 8). These classifications have improved our understanding of the unique molecular signatures present in breast cancer and how they may relate to patient prognosis.The receptor tyrosine kinase Met is a well-known oncogene that is involved in the progression and metastasis of most solid human cancers (www.vai.org/metandcancer) (9). Under normal physiological conditions, Met is expressed by epithelial cells and activated through paracrine ligand binding of hepatocyte growth factor/scatter factor (HGF/SF). In neoplastic conditions, aberrant Met activity occurs through numerous mechanisms, including overexpression of Met, HGF/SF, or both, autocrine signaling, or mutational activation. In breast cancer, MET is overexpressed in 20–30% of cases, is a strong, independent predictor of decreased survival (10–12), and correlates with poor patient outcome, independent of HER2/ERBB2 expression (13). Met signaling may therefore have a unique function in breast cancer progression distinct from ERBB2 signaling.We investigated the role of Met in mammary tumorigenesis, through a mouse model of mutationally activated Met. This model contains activating missense mutations within the tyrosine kinase domain (M1248T/L1193V) that have been knocked into the endogenous Met locus and are referred to as Metmut (14). Here, we report that activated Met (on a FVB/N background) induced a high incidence of mammary tumors with diverse histopathological phenotypes. High levels of Met amplification were present as extrachromosomal double minutes in the tumors. Most notable was that several mice developed multiple mammary tumors with distinct histopathologies and ER/PR/ErbB2 signatures. Metmut tumors were ER+/PR−, half did not express ErbB2, and several expressed the basal marker cytokeratin 5 (CK5). These results led us to examine MET expression in human breast cancer subtypes. Our analyses of human breast cancer expression data and tissue microarrays revealed that high MET expression correlates with ER−/ERBB2− tumors and the basal subtype.Here, we show that a single oncogene, such as Met, is able to induce a spectrum of mammary cancers (solid adenocarcinomas, adenosquamous carcinomas, and myoepitheliomas) with histological, cytogenetic, and ER/ErbB2 characteristics that are present in aggressive human breast cancers. This is a valuable model for aggressive human breast cancers that express high levels of MET. Moreover, our mouse model, in conjunction with the human breast cancer analysis, indicates that MET may be a significant therapeutic target for one of the most aggressive breast cancer subtypes.ResultsMutationally Activated Met Induces Diverse Mammary Adenocarcinomas. We wished to investigate the role of the Met oncogene in mammary tumorigenesis. Earlier our lab created a transgenic model of mutationally activated Met that developed metastatic mammary tumors in the founder mice, yet they failed to transmit (15). We previously described a knockin mouse model of mutationally activated Met generated on a C57BL/6;129/SV background that developed sarcomas, lymphomas, and carcinomas, but failed to generate mammary tumors (14). Because parous FVB/N females commonly develop hyperplasia (16), we bred the M1248T/L1193V mutant line congenically onto the FVB/N background. This model is referred to as Metmut and contains activating missense mutations within the tyrosine kinase domain (M1248T/L1193V). These mutations are knocked into the genomic Met locus and, therefore, expressed under the endogenous Met promoter. When maintained as heterozygotes, these mice develop aggressive mammary tumors. Both nulliparous (n = 16) and multiparous females (n = 15) developed mammary tumors with high penetrance, and Kaplan–Meier analysis revealed only a slight difference in the average age of tumor onset (Fig. 1 A and B).Fig. 1.Mutationally activated Met induces diverse mammary tumors. (A) Kaplan–Meier analysis demonstrated a slight difference in age of death between multiparous and nulliparous females (P = 0.04). (B) A high incidence of mammary tumor development was ...Analysis of mammary pads from 6- and 8-month-old females showed no evidence of preneoplastic growth, indicating that tumor growth is extremely rapid after initiation. A surprising variety of histopathological phenotypes were identified (Fig. 1 C–H and Table S1). Solid features were present in 30% of the tumors, but in several cases the solid phenotype was intermixed with squamous metaplastic cells (Fig. 1C). Significant squamous metaplasia was observed in 65% of mammary tumors (Fig. 1D), and three myoepitheliomas were identified (Fig. 1E). In addition to mammary neoplasia, five mice developed undifferentiated sarcomas (Fig. 1F), as was observed on the B6 background (14). Interestingly, four mice developed two tumors with quite different histopathological phenotypes. For example, one animal developed both an adenocarcinoma with squamous metaplasia and an adenocarcinoma with solid patterns (Fig. 1 G and H). This may be explained if Met mediates transformation in early stages of mammary development and variation in the cell lineages allows for the development of distinct tumor types.Met Amplification Is a Primary Chromosomal Alteration in Metmut Mammary Adenocarcinomas. In both human papillary renal tumors and mice with germline-activating mutations, nonrandom duplication of the mutant Met allele was observed (14, 17). To determine if similar chromosomal events were present in the Metmut mammary tumors, we performed interphase dual-color FISH on six mammary tumors with various histologies. Using a BAC clone specific for the Met locus on chromosome (Chr) 6 and a control probe on Chr 6 allowed us to distinguish between a gain of Chr 6 and localized amplification of the Met locus. In six tumors examined, we observed up to 50 copies of Met (Fig. 2A and Table S2). The high levels of Met amplification were observed in cells with extremely large nuclei that composed 2–5% of the tumor. Trisomy and larger gains of Chr 6 also were detected. We performed metaphase FISH analysis on three primary tumors (Table S3) to assess if the amplification was extrachromosomal. In all cases, the majority of Met amplifications were present as extrachromosomal double minutes (Fig. 2B). Only one tumor showed intrachromosomal and extrachromosomal Met amplification by metaphase FISH (Table S3). However, we did identify several metaphases containing trisomy 6 and no double minutes (Fig. 2C). Curiously, we did observe a higher copy number of Chr 6 in interphase FISH compared with that observed in metaphase FISH, but some tetraploid metaphases did not spread sufficiently and were unanalyzable for metaphase FISH. Therefore, the amplification of Met and gain of Chr 6 may be higher than that detected by metaphase FISH.Fig. 2.Met amplification is a primary chromosomal alteration present in Metmut mammary tumors. (A) Relative copy number of Met was measured using FISH. Photomicrographs with Met probe (red), control probe (green), and DAPI (blue) are shown for animal 17. One ...We examined the chromosomal region around the Met locus and observed that the Wnt2 proto-oncogene is 0.5 Mb from Met. Interphase FISH analysis revealed that the double minutes also contained Wnt2. However, further analysis determined that Wnt2 expression was not increased in these tumors, yet Met expression was increased.To determine what other chromosomal changes occur in Metmut tumors, we performed spectral karyotyping on three adenocarcinomas. We observed trisomy of Chr 1, 2, and 15 frequently (Fig. 2 D and E and Table S3) and a low occurrence of trisomy of Chr 3, 6, and 13. The lack of numerous chromosomal aberrations suggests that Met amplification is sufficient to avoid the need for extensive instability ordinarily associated with mammary tumorigenesis. These results and a study showing high levels of Met amplification in Brca1/Trp-53 mammary tumors (18) indicate that Met amplification may be a common event in murine mammary tumorigenesis. However, interphase FISH was performed on a human breast cancer tissue microarray, and Met amplification was not observed.Met Is Highly Expressed in Tumor Cells that Are PR and ErbB2 Negative. To determine the ER/PR/ErbB2 profile of Met-induced tumors, we performed immunohistochemical staining on 12 tumors with various histologies and normal tissue sections. All of the tumors expressed high levels of Met (Fig. 3), which was confirmed through Western blot analysis (Fig. S1). The majority of tumors (11 of 12) were ER+ (Fig. 3 and Table S4). This result was unexpected given that genetically engineered mouse models commonly develop ER− mammary tumors (19). In addition, we observed that all Metmut tumors lacked PR expression. The absence of PR may reflect a lack of ER activity or the up-regulation of growth factor signaling pathways (20). When we examined ErbB2 expression, we found that half of the tumors were ErbB2 negative. We also observed that a single animal could develop tumors with unique ER/PR/ErbB2 profiles. For instance, animal 26 developed two carcinomas, one which was ER+/PR−/ErbB2− (Fig. 3A) and one which was ER+/PR−/ErB2+ (Fig. 3B). Remarkably, a single oncogene, such as Met, is able to induce diverse tumors with unique histologic features and signaling requirements within a single animal.Fig. 3.Immunohistochemical analysis of ER, PR, ErbB2, and Met in Metmut tumors. In animal 26, two tumors developed with diverse profiles. Tumor 26a (A) was ER+/PR−/ErbB2−, and Tumor 26b (B) was ER−/PR−/ErbB2+. In Tumor 26a, we ...Within the Metmut mammary tumors, we often observed ductal structures that appeared more differentiated. When we carefully evaluated these structures compared with adjacent anaplastic regions, we observed an inverse relationship between Met and ER/PR/ErbB2 expression within individual cells. As seen in Fig. 3C, high ER, PR, and ErbB2 expression was observed in a hyperplastic ductal structure, yet Met expression was negligible. Conversely, high levels of Met expression were observed in the surrounding tumor regions, whereas PR and ErbB2 expression was diminished and ER expression decreased. This inverse relationship with Met and ER/PR/ErbB2 expression occurred only in hyperplastic regions within the tumors. Expression of Met, in addition to ER, PR, and ErbB2, was observed in hyperplastic ducts outside the tumor borders (Fig. S2). We hypothesize that increased Met signaling compensates for the decrease or absence of ER, PR, or ErbB2 signaling within tumorigenic cells.MET Expression Is Enhanced in Basal and ErbB2 Breast Cancer Subtypes. Basal-like breast carcinomas are heterogeneous and have distinct histological features, such as myoepithelial and metaplastic differentiation. In addition, basal-like tumors typically express genes characteristic of basal epithelial cells (i.e., cytokeratins 5, 14, 15, and 17) (21). Because Metmut tumors consist of myoepithelial and metaplastic features and are often PR−/ErbB2−, we examined Metmut tumors for expression of the basal marker CK5. We detected CK5 expression in the majority of the Metmut tumors but not in solid regions within the tumors (Fig. S3). The above results suggested that the Metmut tumors may have basal-like characteristics and led us to examine MET gene expression in human basal and nonbasal cancers.Examination of MET expression in an existing human breast cancer expression dataset (22) indicated that MET was significantly expressed in basal-like cancers compared with nonbasal cancers (P = 0.007, Fig. 4A). In addition, there were two subsets in the basal-like category: one with increased expression of MET (Fig. 4A, red) and one with MET expression levels similar to those of the nonbasal cancers (Fig. 4A, blue). To determine if increased expression of MET had functional consequences in these cancers, we generated a gene signature of MET activation from mouse embryonic fibroblasts (MEFs) and used a gene set enrichment approach to evaluate MET activation in the breast cancer gene expression data (Fig. 4 B and C and SI Methods) (23). Although a signature of MET activation was identified in all of the breast tumors, activation of MET was most strongly associated with basal-like cancers (P = 0.012, Fig. 4D).Fig. 4.MET expression significantly correlates with basal breast cancers. (A) Gene expression data show that MET expression correlates with basal breast cancers (P = 0.007) (21). (B) Generation of gene expression signatures associated with MET activation. Gene ...We examined the correlation between clinical outcome and MET expression and the MET signature in an additional dataset that contained survival data. Analysis revealed that increased MET expression (P = 0.036) and the MET gene expression signature (P = 0.00078) associated with poor clinical outcome. Moreover, both MET expression and the MET signature associated with poor outcome independent of ER status or the ERBB2 subtype.We further examined MET expression in human breast cancer subtypes using a breast cancer tissue microarray (Table S5) (21). MET staining was performed using an antibody specifically designed for staining formalin-fixed tissues (24), which revealed distinct patterns of cytoplasmic and membrane expression (Fig. 5 A and B). Tumor cores were evaluated similar to Lindemann et al. (25): 0, no immunoreactivity; 1, weak immunoreactivity; 2, moderately strong immunoreactivity; 3, strong immunoreactivity. Immunohistochemistry for ER, PR, ERBB2, EGF receptor (EGFR), and CK5/6 also was performed, and subtypes were determined as described (21, 26).Fig. 5.High MET staining (score = 3) correlates with ER−, ER−/ERBB2−, and basal cancers. (A) Strong membrane staining and (B) strong cytoplasmic staining of MET observed in breast cancer tissue microarray cores (Magnification: 400×). ...Correlative analysis was performed to determine if MET levels were associated with ER, ERBB2, luminal, or basal breast cancer subtypes. Although MET expression was observed in all subtypes, MET levels ≥2 were not associated with ER expression, ERBB2 expression, or a specific subtype. However, the highest MET staining (score = 3) was enriched in ER− and ER−/ERBB2− cancers (Fig. 5 C and D and Table S6). Furthermore, high MET expression (MET = 3) correlated with the basal immunohistochemical subtype (Fig. 5E and Table S6). These findings show that MET is expressed in the majority of breast cancers and highest levels of MET are present more frequently in aggressive subtypes.DiscussionSeveral studies have demonstrated that Met and HGF/SF are associated with poor prognosis in breast cancer (www.vai.org/metandcancer), but we still have a limited understanding for how and when Met influences mammary tumorigenesis. Here, we report that mutationally activated Met on the FVB/N background is able to induce a high incidence of diverse breast carcinomas in a knockin mouse model. Other mouse studies support the tumorigenic effect that Met activation has on the mammary epithelium (15, 27). In this issue, Ponzo et al. describe a transgenic model of mutationally activated Met that develops mammary carcinomas (28). The development of diverse histological phenotypes with basal characteristics in both models suggests that Met may initiate tumorigenesis in an early progenitor cell. This is contrary to the conventional thought of Met primarily being involved in the later stages of tumor progression but consistent with the Wang et al. transgenic hepatocellular carcinoma model (29). Metmut mice require both mutation and Met amplification for the development of aggressive mammary cancers, yet MET has not been shown to be mutated or amplified in human breast cancer. We hypothesize that Metmut bypasses the genetic instability required for sporadic human breast cancer and genetic amplification is key to the high penetrance observed in the mouse.Understanding the signaling pathways that drive tumorigenic growth in the absence of hormone and ErbB2 signaling is critical for the development of effective therapies. Several reports indicate that up-regulation of growth factor signaling pathways may compensate for decreased estrogen and progesterone signaling (2). More recent work has shown that MET amplification occurs in lung cancers that develop resistance to gefitinib or erlotinib treatment (30). Metmut mammary tumors are ER+/PR−, suggesting that Met activation may overcome decreased hormone signaling. In addition, high MET expression was associated with ER−/ERBB2− human breast cancers. These results corroborate the finding in human breast cancers that MET is a prognostic factor independent of ERBB2 and suggest that MET signaling may be a critical component for driving tumor progression in the absence of ER, PR, or ERBB2 expression.Molecular subtypes of breast cancer have given us a new understanding of factors that affect prognosis, yet our comprehension of these subtypes is still somewhat limited to their hormone receptor and ERBB2 status. Recent work has connected EGFR and CK5 expression to the basal subtype, but an independent predictor has not been defined (31). More likely, several genes will be needed to predict each subtype. This is the first report of a receptor tyrosine kinase mouse model that develops tumors with basal characteristics In addition, we demonstrate that high MET expression is associated with human basal cancers. These results are strongly supported by both the mouse model and the human breast cancer analysis reported by Ponzo et al. Importantly, these studies indicate that MET may serve as a therapeutic target for those patients with the most aggressive tumors and currently the fewest therapeutic options.MethodsSurvival Curves. Survival was determined using the Kaplan and Meier survival function. Pairwise comparisons of survival curves were done using a log-rank test.Tumor Analysis. Mice were examined biweekly for tumor development and euthanized when tumors were between 1 and 2 cm3. Tumor samples were surgically isolated and fixed in 4% paraformaldehyde/PBS for 24 h. Fixed tissues were dehydrated, paraffin-embedded, and cut into 5-μm sections. Experiments using mice were approved by the Van Andel Research Institute Institutional Animal Care and Use Committee.Met FISH. Interphase FISH was performed on tumor touch preparations as described in ref. 14. Detailed procedures are provided in the SI Methods.Immunohistochemical Analysis. Antigen retrieval and detection were performed using a Discovery XT (Ventana Medical Systems). Detailed procedures are provided in the SI Methods.Breast Tissue Microarray Construction and Immunohistochemical Subtype Scoring. Human breast tissue microarrays consisting of duplicate 0.6-mm cores (Beecher Instruments) were constructed from archival tumor blocks from 137 patients with invasive breast cancer after surgical intervention at Washington University and Barnes-Jewish Hospital in St. Louis from 1997 to 2003. Immunohistochemistry for ER, PR, EGFR, Ck5/6, and HER2 and FISH for HER2 were performed as described in refs. 21 and 26. Detailed procedures are provided in the SI Methods.Gene Expression Analysis. Detailed procedures are provided in the SI Methods.Supplementary Material
Acknowledgments.We thank B. Berghuis and Van Andel Research Institute Histology for their expertise, the members of the B. Williams laboratory for advice, B. Eagleson and the Van Andel Research Institute Vivarium staff for technical assistance, and S. Moshkovitz for critical reading of the manuscript. We thank R. D. Cardiff for pathology consultation and T. O. Nielsen for assistance with the FISH studies and critical review of the manuscript. This work was supported by National Institutes of Health (NIH) Ruth L. Kirschstein National Research Service Award F32CA105748, NIH Grant U01 CA114722), and the Breast Cancer Research Foundation.Footnotes The authors declare no conflict of interest.This article is a PNAS Direct Submission.This article contains supporting information online at www.pnas.org/cgi/content/full/0810403106/DCSupplemental.References1. Lapidus RG, Nass SJ, Davidson NE. The loss of estrogen and progesterone receptor gene expression in human breast cancer. J Mammary Gland Biol Neoplasia. 1998;3:85–94. [PubMed]2. Cui X, Schiff R, Arpino G, Osborne CK, Lee AV. Biology of progesterone receptor loss in breast cancer and its implications for endocrine therapy. J Clin Oncol. 2005;23:7721–7735. [PubMed]3. Lohrisch C, Piccart M. HER2/neu as a predictive factor in breast cancer. Clin Breast Cancer. 2001;2:129–135. discussion 136–127. [PubMed]4. Cleator S, Heller W, Coombes RC. Triple-negative breast cancer: Therapeutic options. Lancet Oncol. 2007;8:235–244. [PubMed]5. Perou CM, et al. Molecular portraits of human breast tumours. Nature. 2000;406:747–752. [PubMed]6. Sorlie T, et al. Gene expression patterns of breast carcinomas distinguish tumor subclasses with clinical implications. Proc Natl Acad Sci USA. 2001;98:10869–10874. [PMC free article] [PubMed]7. Reis-Filho JS, et al. Metaplastic breast carcinomas are basal-like tumours. Histopathology. 2006;49:10–21. [PubMed]8. Pezzi CM, et al. Characteristics and treatment of metaplastic breast cancer: Analysis of 892 cases from the National Cancer Data Base. Ann Surg Oncol. 2007;14:166–173. [PubMed]9. Birchmeier C, Birchmeier W, Gherardi E, Vande Woude GF. Met, metastasis, motility and more. Nat Rev Mol Cell Biol. 2003;4:915–925. [PubMed]10. Ghoussoub RA, et al. Expression of c-met is a strong independent prognostic factor in breast carcinoma. Cancer. 1998;82:1513–1520. [PubMed]11. Camp RL, Rimm EB, Rimm DL. Met expression is associated with poor outcome in patients with axillary lymph node negative breast carcinoma. Cancer. 1999;86:2259–2265. [PubMed]12. Ocal IT, Dolled-Filhart M, D'Aquila T, Camp RL, Rimm DL. Tissue microarray-based studies of patients with lymph node negative breast carcinoma show that met expression is associated with worse outcome but is not correlated with epidermal growth factor family receptors. Cancer. 2003;97:1841–1847. [PubMed]13. Lengyel E, et al. C-Met overexpression in node-positive breast cancer identifies patients with poor clinical outcome independent of Her2/neu. Int J Cancer. 2005;113:678–682. [PubMed]14. Graveel C, et al. Activating Met mutations produce unique tumor profiles in mice with selective duplication of the mutant allele. Proc Natl Acad Sci USA. 2004;101:17198–17202. [PMC free article] [PubMed]15. Jeffers M, et al. The mutationally activated Met receptor mediates motility and metastasis. Proc Natl Acad Sci USA. 1998;95:14417–14422. [PMC free article] [PubMed]16. Nieto AI, et al. Persistent mammary hyperplasia in FVB/N mice. Comp Med. 2003;53:433–438. [PubMed]17. Schmidt L, et al. Germline and somatic mutations in the tyrosine kinase domain of the Met proto-oncogene in papillary renal carcinomas. Nat Genet. 1997;16:68–73. [PubMed]18. Smolen GA, et al. Frequent met oncogene amplification in a Brca1/Trp53 mouse model of mammary tumorigenesis. Cancer Res. 2006;66:3452–3455. [PubMed]19. Zhang X, et al. Estrogen receptor positivity in mammary tumors of Wnt-1 transgenic mice is influenced by collaborating oncogenic mutations. Oncogene. 2005;24:4220–4231. [PubMed]20. Kim HJ, Cui X, Hilsenbeck SG, Lee AV. Progesterone receptor loss correlates with human epidermal growth factor receptor 2 overexpression in estrogen receptor-positive breast cancer. Clin Cancer Res. 2006;12:1013s–1018s. [PubMed]21. Nielsen TO, et al. Immunohistochemical and clinical characterization of the basal-like subtype of invasive breast carcinoma. Clin Cancer Res. 2004;10:5367–5374. [PubMed]22. Richardson AL, et al. X chromosomal abnormalities in basal-like human breast cancer. Cancer Cell. 2006;9:121–132. [PubMed]23. Sweet-Cordero A, et al. An oncogenic KRAS2 expression signature identified by cross-species gene-expression analysis. Nat Genet. 2005;37:48–55. [PubMed]24. Knudsen BS, et al. A novel multipurpose monoclonal antibody for evaluating human c-Met expression in preclinical and clinical settings. Appl Immunohistochem Mol Morphol. 2009;17:57–67. [PMC free article] [PubMed]25. Lindemann K, et al. Differential expression of c-Met, its ligand HGF/SF and HER2/neu in DCIS and adjacent normal breast tissue. Histopathology. 2007;51:54–62. [PubMed]26. Cheang MC, et al. Basal-like breast cancer defined by five biomarkers has superior prognostic value than triple-negative phenotype. Clin Cancer Res. 2008;14:1368–1376. [PubMed]27. Gallego MI, Bierie B, Hennighausen L. Targeted expression of HGF/SF in mouse mammary epithelium leads to metastatic adenosquamous carcinomas through the activation of multiple signal transduction pathways. Oncogene. 2003;22:8498–8508. [PubMed]28. Ponzo MG, et al. Met induces mammary tumors with multiple pathologies and is associated with both poor outcome and basal-type breast cancers. Proc Natl Acad Sci USA. 2009 doi/ 10.1073/pnas.0810402106. [PMC free article] [PubMed]29. Wang R, Ferrell LD, Faouzi S, Maher JJ, Bishop JM. Activation of the Met receptor by cell attachment induces and sustains hepatocellular carcinomas in transgenic mice. J Cell Biol. 2001;153:1023–1034. [PMC free article] [PubMed]30. Engelman JA, et al. MET amplification leads to gefitinib resistance in lung cancer by activating ERBB3 signaling. Science. 2007;316:1039–1043. [PubMed]31. Yehiely F, Moyano JV, Evans JR, Nielsen TO, Cryns VL. Deconstructing the molecular portrait of basal-like breast cancer. Trends Mol Med. 2006;12:537–544. [PubMed]Articles from Proceedings of the National Academy of Sciences of the United States of America are provided here courtesy of National Academy of Sciences
Formats:Article | PubReader | ePub (beta) | PDF (3.8M) | CitationRelated citations in PubMedMet induces mammary tumors with diverse histologies and is associated with poor outcome and human basal breast cancer.[Proc Natl Acad Sci U S A. 2009]Ponzo MG, Lesurf R, Petkiewicz S, O'Malley FP, Pinnaduwage D, Andrulis IL, Bull SB, Chughtai N, Zuo D, Souleimanova M, et al. Proc Natl Acad Sci U S A. 2009 Aug 4; 106(31):12903-8. Epub 2009 Jul 17.The Met oncogene and basal-like breast cancer: another culprit to watch out for?[Breast Cancer Res. 2010]Gastaldi S, Comoglio PM, Trusolino L. Breast Cancer Res. 2010; 12(4):208. Epub 2010 Aug 23.Met signaling regulates growth, repopulating potential and basal cell-fate commitment of mammary luminal progenitors: implications for basal-like breast cancer.[Oncogene. 2013]Gastaldi S, Sassi F, Accornero P, Torti D, Galimi F, Migliardi G, Molyneux G, Perera T, Comoglio PM, Boccaccio C, et al. Oncogene. 2013 Mar 14; 32(11):1428-40. Epub 2012 May 7.Lunatic fringe deficiency cooperates with the Met/Caveolin gene amplicon to induce basal-like breast cancer.[Cancer Cell. 2012]Xu K, Usary J, Kousis PC, Prat A, Wang DY, Adams JR, Wang W, Loch AJ, Deng T, Zhao W, et al. Cancer Cell. 2012 May 15; 21(5):626-41. Tyrosine kinase signalling in breast cancer: tyrosine kinase-mediated signal transduction in transgenic mouse models of human breast cancer.[Breast Cancer Res. 2000]Andrechek ER, Muller WJ. Breast Cancer Res. 2000; 2(3):211-6. Epub 2000 Apr 12.See reviews...See all...Cited by other articles in PMCThe three-way switch operation of Rac1/RhoA GTPase-based circuit controlling amoeboid-hybrid-mesenchymal transition[Scientific Reports. ]Huang B, Lu M, Jolly MK, Tsarfaty I, Onuchic J, Ben-Jacob E. Scientific Reports. 46449Olive Phenolics as c-Met Inhibitors: (-)-Oleocanthal Attenuates Cell Proliferation, Invasiveness, and Tumor Growth in Breast Cancer Models[PLoS ONE. ]Akl MR, Ayoub NM, Mohyeldin MM, Busnena BA, Foudah AI, Liu YY, Sayed KA. PLoS ONE. 9(5)e97622Mechanisms of HGF/Met Signaling to Brk and Sam68 in Breast Cancer Progression[Hormones & cancer. 2012]Locatelli A, Lofgren KA, Daniel AR, Castro NE, Lange CA. Hormones & cancer. 2012 Apr; 3(0)14-25Biomarkers for Basal-like Breast Cancer[Cancers. ]Choo JR, Nielsen TO. Cancers. 2(2)1040-1065Breast tumor kinase (Brk/PTK6) is a mediator of hypoxia-associated breast cancer progression[Cancer research. 2013]Regan Anderson TM, Peacock DL, Daniel AR, Hubbard GK, Lofgren KA, Girard BJ, Schörg A, Hoogewijs D, Wenger RH, Seagroves TN, Lange CA. Cancer research. 2013 Sep 15; 73(18)10.1158/0008-5472.CAN-13-0523See all...LinksGeneGeneGene linksGEO ProfilesGEO ProfilesRelated GEO recordsHomoloGeneHomoloGeneHomoloGene linksMedGenMedGenRelated information in MedGenPubMedPubMedPubMed citations for these articlesSubstanceSubstancePubChem Substance linksRecent ActivityClearTurn OffTurn OnMet induces diverse mammary carcinomas in mice and is associated with human basa...Met induces diverse mammary carcinomas in mice and is associated with human basal breast cancerProceedings of the National Academy of Sciences of the United States of America. Aug 4, 2009; 106(31)12909Your browsing activity is empty.Activity recording is turned off.Turn recording back onSee more...


text:
php - (WordPress) Keep get method/parameters through multiple pages - Stack Overflow
(WordPress) Keep get method/parameters through multiple pages
Is it possible to hold the get params. in the url by switching pages?
Situation: At the first page the user can choose between different prices. The "submit" button is just an easy
<a href="/genrepage?price=twoDollars" value.....>
So the user does get directed from the ".../pricepage" to the ".../genrepage?price=twoDollars" url. At this point it is possible to choose between different genres. The submit button is in a ..
<input type="submit" name="genre" value="action">
..now the user does get redirected to the ".../genrepage?genre=action" url. I would like to see something like ".../genrepage?price=twoDollars&genre=action.
Is it possible to realise this via WordPress (only) or would I need to code "smthg like a" plugin with php? Or is the price get param. saved in the $_Session so I could call it anyhow in the functions.php?
(Sry for this english and my bad knowledge, still learning^^)
Alex SchwiftyAlex Schwifty
You are obviously a web dev noob but we all have been in earlier times 😉 well in case you have a session opened (WordPress does not use sessions by default) you simply could do:
$_SESSION["price"] = $_GET["price"];
You also could start a session if none exists by adding
in the beginning of your functions.php file.
The get variable is saved to the session then and will be available in your functions.php (and elswhere) as long as the session is alive. Save into your session whatever get/post variables you want.
If you are not using sessions you could put the price value into a hidden field at the form in the second page:
<!-- ... your other fields ... -->
<input type="hidden" name="price" value="<?php echo htmlentities($_GET["price"]); ?>" />
Then on the next page both variables will available in $_GET.
5,061124375
Yeah I am totally a noob in web dev and get some struggle with wordpress but thank you very much. I'll try your second method just to look how it works but in the end i'll do something with the functions.php (I guess/hope) ^^ thank you very much !! – Alex Schwifty Oct 6 '18 at 0:39
Button links to page in wordpress
Why the submitted data is not getting displayed in the URL when an HTML form is submitted using “get” method?
Passing multiple arguments through the URL in Wordpress

value: This website is a question and answer website for professional and enthusiast programmers. It is the flagship site of the Stack Exchange Network, created in 2008 by Jeff Atwood and Joel Spolsky.


text:
Top-down/ Bottom-up Ivory Cellular Shade (23 in. x 64 in.) - 12517097 - Overstock.com Shopping - Great Deals on Blinds & Shades
Top-down/ Bottom-up Ivory Cellular Shade (23 in. x 64 in.) Today: $26.99 Add to Cart

value: This website is an American internet retailer selling primarily furniture headquartered in Midvale, Utah, near Salt Lake City.