Thread: [mod-security-users] mod security cause processes to run high
Brought to you by:
victorhora,
zimmerletw
From: Dan R. <sp...@el...> - 2006-08-30 01:51:31
|
hi there, im trying to implement mod security on a virtual server running apache 1.3 to do some spam blocking. It works perfectly however no sooner i turn on the module the apache processes run high like 90-99% and possibly forks the apache processes. But when i turn it off again, things run back to 1%. I even tried just turning the module on with no rules set even for logs and it was doing it, what exactly are the default options if anyway so i can turn them all off and try again. I dont understand why it would be doing this, i have them running on dual xeon servers so obviouslly no problems there, this is a virtual server so limited resources obviouslly. let me know thanks.. dan |
From: Michael S. <mi...@go...> - 2006-08-30 16:10:37
|
On Wed, 2006-08-30 at 11:51 +1000, Dan Rossi wrote: > hi there, im trying to implement mod security on a virtual server > running apache 1.3 to do some spam blocking. It works perfectly > however no sooner i turn on the module the apache processes run high > like 90-99% and possibly forks the apache processes. But when i turn > it off again, things run back to 1%. > > I even tried just turning the module on with no rules set even for > logs and it was doing it, what exactly are the default options if > anyway so i can turn them all off and try again. I dont understand why > it would be doing this, i have them running on dual xeon servers so > obviouslly no problems there, this is a virtual server so limited > resources obviouslly. This is probably a PCRE problem. If you have not compiled mod_Security to link in the PCRE libraries, then you are using the internal regexp engine in Apache 1.x which is extremely slow (unlike the engine in 2.x, which uses PCRE, and is nice and fast). You will need to recompile mod_security to use PCRE. > > let me know thanks.. > > dan > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ mod-security-users mailing list mod...@li... https://lists.sourceforge.net/lists/listinfo/mod-security-users -- Michael T. Shinn KeyID:0xDAE2EC86 Key Fingerprint: 1884 E657 A6DF DF1B BFB9 E2C5 DCC6 5297 DAE2 EC86 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xDAE2EC86 Got Root? http://www.gotroot.com modsecurity rules: http://www.modsecurityrules.com Troubleshooting Firewalls: http://troubleshootingfirewalls.com |
From: Dan R. <sp...@el...> - 2006-08-30 22:54:10
|
Michael Shinn wrote: > > > This is probably a PCRE problem. If you have not compiled mod_Security > to link in the PCRE libraries, then you are using the internal regexp > engine in Apache 1.x which is extremely slow (unlike the engine in 2.x, > which uses PCRE, and is nice and fast). You will need to recompile > mod_security to use PCRE. > Hi thanks ! yes no wonder, i use it on a dozen apache2's without a problem. is there any resources to find how to do this , i just followed the docs online for building the module with apxs. |
From: Dan R. <sp...@el...> - 2006-08-31 01:35:37
|
Michael Shinn wrote: > > This is probably a PCRE problem. If you have not compiled mod_Security > to link in the PCRE libraries, then you are using the internal regexp > engine in Apache 1.x which is extremely slow (unlike the engine in 2.x, > which uses PCRE, and is nice and fast). You will need to recompile > mod_security to use PCRE. > hey that did the job, thanks heaps. |
From: Michael S. <mi...@go...> - 2006-08-31 19:25:42
|
My pleasure, glad to hear it worked. :-) On Thu, 2006-08-31 at 11:35 +1000, Dan Rossi wrote: > Michael Shinn wrote: > > > > This is probably a PCRE problem. If you have not compiled mod_Security > > to link in the PCRE libraries, then you are using the internal regexp > > engine in Apache 1.x which is extremely slow (unlike the engine in 2.x, > > which uses PCRE, and is nice and fast). You will need to recompile > > mod_security to use PCRE. > > > > > hey that did the job, thanks heaps. > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users -- Michael T. Shinn KeyID:0xDAE2EC86 Key Fingerprint: 1884 E657 A6DF DF1B BFB9 E2C5 DCC6 5297 DAE2 EC86 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xDAE2EC86 Got Root? http://www.gotroot.com modsecurity rules: http://www.modsecurityrules.com Troubleshooting Firewalls: http://troubleshootingfirewalls.com |
From: Chris <chr...@gm...> - 2006-09-12 03:42:42
|
On 31/08/06, Dan Rossi <sp...@el...> wrote: > Michael Shinn wrote: > > > > This is probably a PCRE problem. If you have not compiled mod_Security > > to link in the PCRE libraries, then you are using the internal regexp > > engine in Apache 1.x which is extremely slow (unlike the engine in 2.x, > > which uses PCRE, and is nice and fast). You will need to recompile > > mod_security to use PCRE. > > > > > hey that did the job, thanks heaps. > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > So how did you compile it then I am interested also as the docs only show how to with apxs. Chris |