| Posted by jthornton, 01-16-2008, 03:02 AM | | I have been trying to install mod_security for the last few days and I can't seem to get it working. I'm with Rockmyweb hosting and for some reason although I have it listed in the httpd.conf, it is showing up in my vps control panel (under the security script) that it isn't installed.
Is there some way that I can test to see if it is actually installed or not?
Here is what is in my httpd.conf:
|
| Posted by JohnSH, 01-16-2008, 03:51 AM | | If you have CPanel they may be able to help you if your host isn't willing to.
I didnt see you that you mentioned any control panel, so I am only assuming
|
| Posted by net, 01-16-2008, 03:59 AM | | Moved > Technical & Security Issues.
|
| Posted by domainworldaccess, 01-16-2008, 04:02 AM | | What were the steps you took to install the module/
|
| Posted by david510, 01-16-2008, 05:46 AM | | Make sure the file /usr/local/apache/conf/modsec.user.conf is included using one of the files specified in the conf/modsec/*.conf. Also make sure it contain the necessary rules. The mod_sec log file would be normally /usr/local/apache/logs/audit_log. If the following rule is present in the modsec.user.conf file, take a url as follows and check the log file to see if it is reporting there.
SecFilterSelective THE_REQUEST "/bin"
Take url as
http://domain.com/bin
|
| Posted by jthornton, 01-16-2008, 11:41 AM | | Here is a list of the files in that directory:
This is just the core rules that were on the modsecurity.org's website.
|
| Posted by jthornton, 01-16-2008, 11:48 AM | | These are the steps that I took to setup mod_security.
|
| Posted by devonblzx, 01-16-2008, 03:38 PM | | Our security check only checks for the install done by our automated managed system. So if you installed it manually, it may not be detected, but that doesn't mean it isn't working.
Have you checked to see what modules are loaded in your apache to see if it is loading?
Sincerely,
|
| Posted by karem, 01-16-2008, 08:34 PM | | any one have good rules for mod_secuirty 2 ?
|
| Posted by jthornton, 01-16-2008, 11:09 PM | | I don't know how to check. I typed # httpd -l but it isn't listed there. I think that I read somewhere that it only shows up there if I was to compile the module into apache.
Last edited by jthornton; 01-16-2008 at 11:19 PM.
|
| Posted by E-Learning, 03-12-2008, 05:45 PM | | i install mod_Security as the below but when i restart my httpd here is the resualt ..
here is my vps info
---------------------------------------------
root@box modsecurity]# httpd -v
Server version: Apache/2.2.3
Server built: Jan 15 2008 20:33:30
[root@box modsecurity]#
----------------------------------------------
[root@box modsecurity]# rpm -q libxml2
libxml2-2.6.26-2.1.2.1
[root@box modsecurity]#
----------------------------------------------
whats wrong there ???
|
| Posted by SparkSupport, 03-13-2008, 02:07 AM | | It is clear from the error that mod_sec's DSO module - /usr/lib/apache/mod_security2.so is missing or not placed correctly.
As a quick remedy, try this.
This should give the correct path to mod_security2.so. Now, copy the file to the folder /usr/lib/apache/ and restart apache.
Good luck !
|
| Posted by LayeredSoft, 03-13-2008, 05:43 AM | | Welcome broth
look at here
u are using apache 2.x.x
so u dont need to use :
|
| Posted by E-Learning, 03-13-2008, 03:38 PM | | i try to install 2.5 + 2.4 ... how can i be sure that i delete 2.4 ??
|
|
 Add to Favourites
 Print this Article
|
