mod-security-users

[mod-security-users] 1.7.6 not running at all

[Mike P. <mpl...@am...>]

Hello,
  I am running version 1.7.6 with Apache 1.3.29 on a Slackware -current 
machine.  I am using a Slackware package so I did not compile it.  I 
installed mod_security using the apxs -cia command but I am having problems.

  I have the module loading, or so I think I do, and I have the mod_security.c 
configuration added at the very bottom of my httpd.conf file.  From what I 
can tell mod_security is not actualy running.  No log files are being created 
even though I have specfically given them an absolute path to the same place 
the apache log files are.  I have SecServerResponseToken set to On and when I 
run a GET request from a telnet session I do not see mod_security listed.

  What other steps do I need to do in order to get mod_security to work?

Thanks in advance,

-- 
Mike Plemmons
mpl...@am...

Re: [mod-security-users] 1.7.6 not running at all

[Ivan R. <iv...@we...>]

Mike Plemmons wrote:
> Hello,
>   I am running version 1.7.6 with Apache 1.3.29 on a Slackware -current 
> machine.  I am using a Slackware package so I did not compile it.  I 
> installed mod_security using the apxs -cia command but I am having problems.
> 
>   I have the module loading, or so I think I do, and I have the mod_security.c 
> configuration added at the very bottom of my httpd.conf file.  From what I 
> can tell mod_security is not actualy running.  No log files are being created 
> even though I have specfically given them an absolute path to the same place 
> the apache log files are.  I have SecServerResponseToken set to On and when I 
> run a GET request from a telnet session I do not see mod_security listed.
> 
> What other steps do I need to do in order to get mod_security to work?

  What you did normally works for me. Only one line is required to
  load the module:

   LoadModule security_module /usr/lib/apache/mod_security.so

  But if there is a "ClearModuleDirective" somewhere in the
  configuration file you will also need to add:

   AddModule mod_security.c

  After that, all you need is the module configuration. Send
  me your httpd.conf (and other files if you have your
  configuration distributed) and I'll look at it.

  The fact that the server started without complaining about the
  SecServerResponse directive means mod_security is active. About
  the tokens missing in the server signature - maybe you don't have
  ServerTokens set to Full?

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]

Re: [mod-security-users] 1.7.6 not running at all

[Ivan R. <iv...@we...>]

> Thanks for the reply and you are correct I do not have ServerTokens set to 
> full.  In fact, I do not even have ServerTokens in the configuration file at 
> all.

  Then you do, the default value for that directive is Full.


> Here is my httpd.conf file as you requested.  Although, I am still 
> confused as to why nothing is being logged when I tell it to.
> 
> Thanks for the help and thanks for creating this module.

  You are welcome.


> ------------------------------ File below -------------------
> 
> ##
> ## httpd.conf -- Apache HTTP server configuration file
> ##
> 
> ...
>
> <IfModule mod_securtiy.c>
                    ^^^^
  You have a typo here, that's why the module does not
  get loaded :)

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]

Re: [mod-security-users] 1.7.6 not running at all

[Mike P. <mpl...@am...>]

On Sunday 21 March 2004 7:47 pm, Ivan Ristic wrote:
> > Thanks for the reply and you are correct I do not have ServerTokens set
> > to full.  In fact, I do not even have ServerTokens in the configuration
> > file at all.
>
>   Then you do, the default value for that directive is Full.
>
> > Here is my httpd.conf file as you requested.  Although, I am still
> > confused as to why nothing is being logged when I tell it to.
> >
> > Thanks for the help and thanks for creating this module.
>
>   You are welcome.
>
> > ------------------------------ File below -------------------
> >
> > ##
> > ## httpd.conf -- Apache HTTP server configuration file
> > ##
> >
> > ...
> >
> > <IfModule mod_securtiy.c>
>
>                     ^^^^
>   You have a typo here, that's why the module does not
>   get loaded :)

Thanks for pointing that out.  :)

-- 
Mike Plemmons
mpl...@am...