Introducing mod_security
Subject:   issue with mod_security2
Date:   2006-10-30 12:29:38
From:   monicat
Response to: issue with mod_security2

I found the fix for this:

Change <IfModule mod_security.c>
<IfModule mod_security2.c>

and it works like a charm!
- Monica

Main Topics Oldest First

Showing messages 1 through 1 of 1.

  • issue with mod_security2
    2007-02-05 02:09:07  shuvo70 [View]


    I have installed modsecurity-apache2-2.0.3-1 rpm at centos-4.4 server. my apache version is httpd-2.0.52-28.ent.centos4
    i cant see any log at /var/log/modsec_audit.log can you please tell what is wrong.

    here is the basic configuration file under /etc/httpd/conf.d/modsecurity.conf

    <IfModule mod_security.c>
    #SecRuleEngine On
    SecFilterEngine On
    SecRequestBodyAccess On
    SecResponseBodyAccess Off
    SecFilterCheckURLEncoding On
    SecFilterCheckUnicodeEncoding Off
    SecFilterCheckCookieFormat On
    SecFilterScanPOST On
    SecFilterForceByteRange 0 255
    SecUploadDir /tmp
    SecUploadKeepFiles Off
    SecAuditEngine RelevantOnly
    SecAuditLog /var/log/httpd/modsec_audit.log
    SecFilterDebugLog /var/log/httpd/modsec_debug.log
    SecFilterDebugLevel 0
    SecFilterDefaultAction "deny,log,status:406"
    SecFilterSelective REMOTE_ADDR "^$" nolog,allow

    i tried to change as per your mail ifModule mod_security2.c but that time httpd cant start.

    what could be the problem