Re: [mod-security-users] alternatives for waf-fle

[Hans M. <mo...@ma...>]

Hi Ervin,

many thanks for your swift reply.

 > (actually I don't understand what does it mean "by klaubert")

Sorry, if I didn't explain understandable what's the issue. The 
maintainer for "waf-fle" is klaubert. Here the link at GitHub: 
https://github.com/klaubert/waf-fle

> could you explain what's wrong with your setup? I mean what does
it mean "doesn't work".

Apache with mod-sec is working fine. But waf-fle is not working any more.
"waf-fle" was the tool to display the alerts coming from mod-sec.
"waf-fle" is written in PHP and obviously using calls, which are not supported any more, like "apache_setenv()"

So I am looking for an alternative to view the log entries generated by "mod-sec"

I hope this explains a little bit more my issue.

Kind regards
Hans

-- 


On 07.02.24 23:33, Ervin Hegedüs wrote:
> Hi Hans,
>
> On Wed, Feb 07, 2024 at 11:15:27PM +0100, Hans Mayer via mod-security-users wrote:
>> Dear All,
>>
>> Over years I am using modsec and Apache with mlogc sending the alerts to
>> waf-fle.
>>
>> With the last upgrade to Debian bookworm and PHP 8.2 waf-fle by klaubert
>> doesn't work any more.
> (actually I don't understand what does it mean "by klaubert")
>
> could you explain what's wrong with your setup? I mean what does
> it mean "doesn't work".
>
> (Note that I'm the maintainer of libapache2-mod-security2 package
> in Debian, so it's important to know me what's the issue.)
>
>> Actually I am wondering how long it was running as the last update is 10
>> years ago.
>>
>> Now I am looking for an alternative to view the alert logs.
>>
>> I liked waf-fle as it didn't use a lot of resources. Is there something
>> similar available ?
> If your package does not work (for some reason) could you try
> this repository?
>
> https://modsecurity.digitalwave.hu
>
> Thanks,
>
>
> a.
>