mod-security-users

[mod-security-users] BUilding 3.0.0

[Ed G. <ED...@ha...>]

Thank you to the developers for all your work on Mod Security and congratulations on 3.0.0.

When running configure, I see this:

 Optional dependencies
   + GeoIP                                         ....not found
   + LibCURL                                       ....found v7.29.0
      -lcurl  ,  -DWITH_CURL
   + YAJL                                          ....not found
   + LMDB                                          ....not found
   + LibXML2                                       ....found v2.9.1
      -lxml2 -lz -lm -ldl, -I/usr/include/libxml2 -DWITH_LIBXML2
   + SSDEEP                                        ....not found
   + LUA                                           ....not found

Which of these missing optional depedencies would be worth adding to production Centos/Apache servers?

Thanks,


--

Ed Greenberg  |  Web Developer and LInux System Administrator
________________________________
HAPPY Software, Inc. l  Work HAPPY-er!
t. 888-484-2779  l  f. 518-584-5388

This message and any of its attachments are intended only for the use of the designated recipient, or the recipient’s designee, and may contain information that is confidential or privileged. If you are not the intended recipient, please immediately notify HAPPY Software, Inc., delete all copies of the message and any attachments and do not disseminate or make any use of their contents.

Re: [mod-security-users] BUilding 3.0.0

[Ervin H. <ai...@gm...>]

Hi Ed,


On Fri, Dec 15, 2017 at 01:02:51PM +0000, Ed Greenberg wrote:
> Thank you to the developers for all your work on Mod Security and congratulations on 3.0.0.
> 
> When running configure, I see this:
> 
>  Optional dependencies
>    + GeoIP                                         ....not found

on Debian, there are these packages:

geoip-bin geoip-database libgeoip-dev libgeoip1:amd64

looks like on RH these packages are with same names:

https://www.rpmfind.net/linux/rpm2html/search.php?query=geoip
https://www.rpmfind.net/linux/rpm2html/search.php?query=libgeoip

>    + YAJL                                          ....not found

Deb: libyajl-dev:amd64 libyajl2:amd64

RH: https://www.rpmfind.net/linux/rpm2html/search.php?query=yajl
RH: https://www.rpmfind.net/linux/rpm2html/search.php?query=libyajl

>    + LMDB                                          ....not found

Deb: liblmdb-dev:amd64 liblmdb0:amd64 lmdb-doc

RH: https://www.rpmfind.net/linux/rpm2html/search.php?query=lmdb
RH: https://www.rpmfind.net/linux/rpm2html/search.php?query=liblmdb

>    + SSDEEP                                        ....not found

on Debian 8, there isn't ssdeep package, only on Deb9, but I'm
not using so much prod system. There is the pkg sseed.

On Centos, I've found this:

https://apps.fedoraproject.org/packages/ssdeep/overview/

>    + LUA                                           ....not found

Deb: liblua5.1-0:amd64 liblua5.1-0-dev:amd64 liblua5.2-0:amd64
     liblua5.2-dev:amd64 libluajit-5.1-2:amd64 libluajit-5.1-common
     libluajit-5.1-dev:amd64 lua5.1 lua5.2

(you can install more version of Lua as paralell)

On RH, you can find many Lua packages:

https://www.rpmfind.net/linux/rpm2html/search.php?query=lua
https://www.rpmfind.net/linux/rpm2html/search.php?query=liblua
 
> Which of these missing optional depedencies would be worth adding to production Centos/Apache servers?

anyway, I'm not an expert RH user/admin, but as I remember, you
can search in packages with "rpm -qa | grep PATTERN", where the
pattern is what you're looking for.



Regards,

a.
 

Re: [mod-security-users] BUilding 3.0.0

[Felipe C. <FC...@tr...>]

Hi Ed,


Good point.


Let me try to compile a list with dependency vs functionality.


+ GeoIP: Used by the operator @GeoLookup and variables: COUNTRY_CODE, COUNTRY_CODE3, COUNTRY_NAME, COUNTRY_CONTINENT,

REGION, CITY, POSTAL_CODE, LATITUDE, LONGITUDE, DMA_CODE, AREA_CODE


+ LibCURL: SecRemoteRules directive and external resources download.


+ YAJL: JSON support for logging and the ability to parser JSON data.


+ LMDB: Support for the lmdb as a collection backend.


+ SSDEEP: @fuzzyHash operator


+ LUA: Lua script execution from @inpectFile or exec action.



Br.,

Felipe “Zimmerle” Costa

Security Researcher, Lead Developer ModSecurity.



Trustwave | SMART SECURITY ON DEMAND

www.trustwave.com<http://www.trustwave.com/>



________________________________
From: Ed Greenberg <ED...@ha...>
Sent: Friday, December 15, 2017 11:02:51 AM
To: mod...@li...
Subject: [mod-security-users] BUilding 3.0.0

Thank you to the developers for all your work on Mod Security and congratulations on 3.0.0.

When running configure, I see this:

 Optional dependencies
   + GeoIP                                         ....not found
   + LibCURL                                       ....found v7.29.0
      -lcurl  ,  -DWITH_CURL
   + YAJL                                          ....not found
   + LMDB                                          ....not found
   + LibXML2                                       ....found v2.9.1
      -lxml2 -lz -lm -ldl, -I/usr/include/libxml2 -DWITH_LIBXML2
   + SSDEEP                                        ....not found
   + LUA                                           ....not found

Which of these missing optional depedencies would be worth adding to production Centos/Apache servers?

Thanks,


--

Ed Greenberg  |  Web Developer and LInux System Administrator
________________________________
HAPPY Software, Inc. l  Work HAPPY-er!
t. 888-484-2779  l  f. 518-584-5388

This message and any of its attachments are intended only for the use of the designated recipient, or the recipient’s designee, and may contain information that is confidential or privileged. If you are not the intended recipient, please immediately notify HAPPY Software, Inc., delete all copies of the message and any attachments and do not disseminate or make any use of their contents.