On 8/24/06, DK <sp23@...> wrote:
> Hey All
> I just installed modsec 1.9.4 on a Centos 4.3/Apache 2.0.52 server and
> it doesn't do anything.
> I've installed it from source using DSO. The .so file was copied to the
> modules directory and the module is loaded in the httpd.conf
> I've also put the modsec configuration inside an IfModule and restarted
> apache ..
Remove the IfModule bits. If Apache does not complain about unknown
directive that should mean the module was loaded into the server.
> Yet still when I hit the http with certain keywords that are supposed to
> be filtered, nothing happens - ie. apache behaves as if modsec doesn't
> exist at all.
Configure the debug log at level 9 and see what happens on such a request.
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall