Ervin Hegedus
Ervin Hegedus
CRS's Docker uses LMDB (based on [this](https://github.com/coreruleset/modsecurity-crs-docker/blob/main/nginx/Dockerfile#L42-L44) configuration part), which means you have to have a file inside the container with name `modsec-shared-collections` (may be with some extension). [Here](https://gist.github.com/airween/09a9c8dd033eaf5fa317bc6da07c64a4) you...
@ne20002, Today I investigated this issue and found a few problems. I will write a summary later.
Here is what I found: * in case of LMDB, collections' data (except `TX`) stored in a file * the path of this file is [hardcoded](https://github.com/owasp-modsecurity/ModSecurity/blob/31507404e6a6c0da46a85b478301fc73b8c202d4/src/collection/backend/lmdb.cc#L645-L646) * this path is...
> I updated my config to fix the lower-/uppercase issue (all lowercase now). I think that has no effect, because as you wrote you don't have the database files... >...
> For me, with mounting the files into the docker container in its root directory, it is working now. Thank you very much for the investigation, I wouldn't have expected...
@vzhirnov, no worries, feel free to ask here, we are happy to help. And sorry for the late reply. Just to clarify: do you want to use this modification only...
Hi @bijancot, you should try to pass CFLAGS when you build Tengine and ModSecurity connector: ``` export CFLAGS="-I/usr/local/modsecurity/headers -L/usr/local/modsecurity/lib" ```
Pfsense is based on FreeBSD, right? I'm sure libmodsecuirty3 and Nginx connector can be built on FreeBSD too. Seems like [here](https://forum.opnsense.org/index.php?topic=21739.0) is a tutorial how to make a custom package...
> although This pkg is not available for FreeBSD : [modsecurity-crs](https://pkgs.org/download/modsecurity-crs), but you don't need to compile/build this source, > I have come across these packages: > > [modsecurity3-nginx-1.0.3.pkg](https://freebsd.pkgs.org/13/freebsd-amd64/modsecurity3-nginx-1.0.3.pkg.html) and...
Hi @arminabf, thanks for reporting. First of all, could you explain why does it need to install CRS 3.3.5 and **upgrade** that to 4.2.0? Does it need it just to...