Re: [mod-security-users] alternatives for waf-fle

[Hans M. <mo...@ma...>]

Hi Ervin,

I am not sure if I want to go with an old PHP version.  I am not the one 
who uses always the latest version but during my 40 years working 
experience with UNIX I realized that there is a point where old versions 
are hard to maintain and brings more incompatibility than advantages.

In the meantime it seems that's not only the PHP version is the issue. 
It is also the Apache mode which is now FPM/FastCGI and was obviously 
not the case before. I will investigate a little bit how to switch this 
Apache mode but in general it's time for an other solution than "waf-fle".

"mod-sec" is a great tool and I don't want to loose it, just because 
there is no easy tool to view the logs.


Kind regards

Hans


-- 



On 08.02.24 21:27, Ervin Hegedüs wrote:
> Hi Hans,
>
> On Thu, Feb 08, 2024 at 05:57:11PM +0100, Hans Mayer wrote:
>>> (actually I don't understand what does it mean "by klaubert")
>> Sorry, if I didn't explain understandable what's the issue. The maintainer
>> for "waf-fle" is klaubert. Here the link at GitHub:
>> https://github.com/klaubert/waf-fle
> oh, sorry for my dump question :), I should have looked up.
>   
>> Apache with mod-sec is working fine. But waf-fle is not working any more.
>> "waf-fle" was the tool to display the alerts coming from mod-sec.
>> "waf-fle" is written in PHP and obviously using calls, which are not supported any more, like "apache_setenv()"
>>
>> So I am looking for an alternative to view the log entries generated by "mod-sec"
>>
>> I hope this explains a little bit more my issue.
> yes, definitely. Especially you mentioned that the waf-fle does
> not work with the new 8.2 PHP version.
>
> First your might try to add an older version of PHP:
>
> https://packages.sury.org/php/
>
> Sury (he is the official maintainer of PHP packages in Debian)
> supports older versions of PHP - perhaps those do not have any
> security updates, but at least work.
>
>
>
> Regards,
>
>
> a.