ONJava.com -- The Independent Source for Enterprise Java
oreilly.comSafari Books Online.Conferences.

advertisement

AddThis Social Bookmark Button
Article:
  Introducing mod_security
Subject:   issue with mod_security2
Date:   2007-02-05 02:09:07
From:   shuvo70
Response to: issue with mod_security2

Hi


I have installed modsecurity-apache2-2.0.3-1 rpm at centos-4.4 server. my apache version is httpd-2.0.52-28.ent.centos4
i cant see any log at /var/log/modsec_audit.log can you please tell what is wrong.


here is the basic configuration file under /etc/httpd/conf.d/modsecurity.conf


<IfModule mod_security.c>
#SecRuleEngine On
SecFilterEngine On
SecRequestBodyAccess On
SecResponseBodyAccess Off
SecFilterCheckURLEncoding On
SecFilterCheckUnicodeEncoding Off
SecFilterCheckCookieFormat On
SecFilterScanPOST On
SecFilterForceByteRange 0 255
SecUploadDir /tmp
SecUploadKeepFiles Off
SecAuditEngine RelevantOnly
SecAuditLog /var/log/httpd/modsec_audit.log
SecFilterDebugLog /var/log/httpd/modsec_debug.log
SecFilterDebugLevel 0
SecFilterDefaultAction "deny,log,status:406"
SecFilterSelective REMOTE_ADDR "^127.0.0.1$" nolog,allow
</IfModule>


i tried to change as per your mail ifModule mod_security2.c but that time httpd cant start.


what could be the problem


1 to 1 of 1
  1. issue with mod_security2
    2007-02-07 11:26:00  Ivan Ristic | O'Reilly Author [View]

1 to 1 of 1