Re: [mod-security-users] Upgrade to owasp-coreruleset 4.13.0

[Ervin H. <ai...@gm...>]

Hi Monan,


On Sat, Apr 05, 2025 at 04:02:09PM -0400, Monah Baki wrote:
> 
> ls /usr/local/etc/modsecurity/owasp-modsecurity-crs
> crs-setup.conf

as Christian wrote this is very strange.

Anyway,

are you sure your engine use this file?
 
> cat /usr/local/etc/apache24/modules.d/280_mod_security.conf

could you replace this line:

> IncludeOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf

by this one:

Include /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf

so just remote the "Optional" string.

And could you show us the output of this command?

grep -A12 900990 /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf


Thanks,


a.