Jump to content
Main menu
Main menu
move to sidebar
hide
Navigation
Main page
Recent changes
Random page
Help about MediaWiki
TetraWiki
Search
Search
Appearance
Create account
Log in
Personal tools
Create account
Log in
Pages for logged out editors
learn more
Contributions
Talk
Editing
Mod Security Issue on BJP Site
(section)
Page
Discussion
English
Read
Edit
View history
Tools
Tools
move to sidebar
hide
Actions
Read
Edit
View history
General
What links here
Related changes
Special pages
Page information
Appearance
move to sidebar
hide
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
== Final Fix and Solution == So we have disabled the mod_security2.so and enabled mod_security.so in /etc/httpd/conf.d/00_mod_security.conf file as shown below . # ASL mod_security Template: /var/asl/data/templates/template-00_mod_security.conf # '''#LoadModule security2_module modules/mod_security2.so''' '''LoadModule security2_module modules/mod_security.so''' LoadModule unique_id_module modules/mod_unique_id.so # <IfModule mod_security2.c> # Basic configuration goes in here Include modsecurity.d/tortix_waf.conf # Rule management is handled by ASL Include modsecurity.d/00*exclude.conf Include modsecurity.d/*asl*.conf Include modsecurity.d/99*exclude.conf </IfModule> So Now httpd is loaded with mod_security ( As shown Below ) '''[[and Sites are also working]]''' [Thu Feb 21 04:16:35 2013] [notice] core dump file size limit raised to 18446744073709551615 bytes [Thu Feb 21 04:16:35 2013] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Thu Feb 21 04:16:35 2013] [notice] ModSecurity for Apache/2.6.6 (http://www.modsecurity.org/) configured. [Thu Feb 21 04:16:35 2013] [notice] ModSecurity: APR compiled version="1.2.7"; loaded version="1.2.7" [Thu Feb 21 04:16:35 2013] [notice] ModSecurity: PCRE compiled version="6.6"; loaded version="6.6 06-Feb-2006" [Thu Feb 21 04:16:35 2013] [notice] ModSecurity: LIBXML compiled version="2.6.26" [Thu Feb 21 04:16:35 2013] [notice] Original server signature: Apache [Thu Feb 21 04:16:36 2013] [notice] Digest: generating secret for digest authentication ... [Thu Feb 21 04:16:36 2013] [notice] Digest: done [Thu Feb 21 04:16:37 2013] [notice] Apache/2.2.22 (Unix) DAV/2 Apache mod_perl/2.0.4 Perl/v5.8.8 configured -- resuming normal operations So as conclusion , new module mod_security2.so best works with Apache 2.7 where we are still at apache 2.2.22 so it can suite us the best . Thanks Biswajit Banerjee
Summary:
Please note that all contributions to TetraWiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
TetraWiki:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)