ModSecurity-apache

ModSecurity-apache copied to clipboard

I deployed modsecurity-apache v2.9 on my linux server. As shown in the figure, this is the log I saved to the database. There are always more # signs in front...

hygeiavvv

What does "ModSecurity-apache is unstable" mean, exactly?

2

I have written a guide on how to install ModSecurity-apache from source for Ubuntu 20.04 [here](https://github.com/SpiderLabs/ModSecurity-apache/wiki/Installation-from-Source-Ubuntu-20.04). When attempting to Include crs-setup.conf and the coreruleset/rules directory I receive a startup error...

ghost

fail to compile on standard archlinux install

16

Hello, I would like to package modsecurity-apache for Archlinux but I am encountering the following issues : ```sh ./configure --prefix=/usr --with-libmodsecurity=/usr/lib checking for a BSD-compatible install... /usr/bin/install -c checking whether...

ririsoft

Even with REQUEST_BODY disabled ModSecurity starts phase 2 to check POST Data ``` [159835978570.134615] [xxxxx] [4] (Rule: 5040) Executing operator "Rx" with param "^/.+/(xx)?xxx/|^/.+/xxx/|^/.+/xml/" against REQUEST_FILENAME. [159835978570.134615] [xxxxx] [4] Rule...

akefallonitis

Stage 1 of converting automated tests for libmodsecurity apache connector. These changes: - enable examination of the audit log in the automated tests - include a first batch of automated...

martinhsv

Apache error log does not work for blocking actions.

1

Setting any rule with action `"log,deny"` does not generate apache error log entry. It works for `SecRuleEngine DetectionOnly` . `"log,success"` also works in both `SecRuleEngine On` and `DetectionOnly`. Is there...

onursehitoglu

Removing the input filter using the corresponding API

1

BodaciousPie

Smallfixes

2

With these commits, the Apache passes all CRS (3.1) regression tests (with patched libmodsecurity3).

airween

General Apache Startup Error

1

I finally managed to get libmodsecurity and modsecurity-apache compiled and installed, both from upstream latest versions. However, it seems none of the commands are recognized although the apache module is...

spacerunner5

Having all the configurations set in the Apache fashion.

2

The Apache configuration directives are available in v2 here: https://github.com/SpiderLabs/ModSecurity/blob/v2/master/apache2/apache2_config.c#L3180-L3923 This functionality have to be mimic-ed into something related on version 3. In case of an error, the error message...

zimmerle