Thread: [mod-security-users] Fwd: basics

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Note: forwarded message attached.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
JiJo Robert escreveu:
> 
> I have
> installed mod_security with apached 2.x I have added
> the follwoing line in httpd.conf file. 
> 
> "LoadModule security_module   
> modules/mod_security/mod_security.so" to httpd.conf
> file.
> 
> How can I test with a sample application? Should the
> sample application be in Apache webapps directory?

Hi,

for Apache 2.0:

make syslink.

root@Amenhotep:/# ls -lah /etc/apache2/mods-enabled/ | grep security
lrwxrwxrwx 1 root root   45 2006-10-05 09:50 mod-security.load ->
/etc/apache2/mods-available/mod-security.load

Include on apache2.conf

root@Amenhotep:/# grep mod_security /etc/apache2/apache2.conf
# Incluindo configuracoes do mod_security
Include /etc/apache2/mod_security.conf

and get a mod_security.conf ( example )

http://pastebin.com/802571

Restart apache, check logs on /var/log/apache2/ ( tail -f
/var/log/apache2/audit_log )

So, make a test : http://URL/?a=/bin/sh and check the logs.

CheerS

Hi,

When I can start apache-monitor ( on apache 1.3.33 and apache2 ) i
receive the following error:

./apache-monitor /etc/apache/apache-tools/apache.rrd
http://$(hostname)/status
Odd number of elements in hash assignment at ./apache-monitor line 64.
Failed to parse stored data at ./apache-monitor line 66.

At apache.conf

<IfModule mod_status.c>
  ExtendedStatus On
<Location /status>
    SetHandler status
    Order deny,allow
    Deny from all
    Allow from 127.0.0.1
</Location>

</IfModule>

Thaks for any ideas.

I am running modsecurity on windows box. Can some one
help me to set up this?

Thanks
Jijo

--- Flavio Torres <fla...@li...>
wrote:

> JiJo Robert escreveu:
> > 
> > I have
> > installed mod_security with apached 2.x I have
> added
> > the follwoing line in httpd.conf file. 
> > 
> > "LoadModule security_module   
> > modules/mod_security/mod_security.so" to
> httpd.conf
> > file.
> > 
> > How can I test with a sample application? Should
> the
> > sample application be in Apache webapps directory?
> 
> 
> Hi,
> 
> for Apache 2.0:
> 
> make syslink.
> 
> root@Amenhotep:/# ls -lah /etc/apache2/mods-enabled/
> | grep security
> lrwxrwxrwx 1 root root   45 2006-10-05 09:50
> mod-security.load ->
> /etc/apache2/mods-available/mod-security.load
> 
> 
> Include on apache2.conf
> 
> root@Amenhotep:/# grep mod_security
> /etc/apache2/apache2.conf
> # Incluindo configuracoes do mod_security
> Include /etc/apache2/mod_security.conf
> 
> and get a mod_security.conf ( example )
> 
> http://pastebin.com/802571
> 
> Restart apache, check logs on /var/log/apache2/ (
> tail -f
> /var/log/apache2/audit_log )
> 
> So, make a test : http://URL/?a=/bin/sh and check
> the logs.
> 
> CheerS
> 
> 
>
-------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get
> the chance to share your
> opinions on IT & business topics through brief
> surveys -- and earn cash
>
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
>
https://lists.sourceforge.net/lists/listinfo/mod-security-users
> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

JiJo Robert escreveu:
> I am running modsecurity on windows box. Can some one help me to
> set up this?
>
> Thanks Jijo

Make one link (from: your/directory/mod-security.load ------ to:
apache2/mods-available/mod-security.load) at your apache (windows)
directory.

Enjoy.

- --

[]'s

Flavio Torres - Administrador de Sistemas
____________________________________________________________________
PGP/GPG: KeyID 0x7720DBDE
http://www.digitalinfo.com.br/gpg/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)

iD8DBQFFKmVINRQApncg294RAkgwAJ0ZRfEc0NS8NdzCY93FGJyWFuhgigCg0fqY
2XscQNSAVaG+JXYMZyOVLlE=
=HS9V
-----END PGP SIGNATURE-----