Jump to content

Mod Security Issue on BJP Site

From TetraWiki
Revision as of 15:03, 20 February 2013 by Biswajit (talk | contribs) (Created page with "category:BJP '''Mod Security Issue on BJP Site - Still issue is there''' While activating the 00_mod_security.conf it give the following Error httpd: Syntax error...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)


Mod Security Issue on BJP Site - Still issue is there


While activating the 00_mod_security.conf it give the following Error 


httpd: Syntax error on line 212 of /httpdjail/etc/httpd/conf/httpd.conf: Syntax error on line 3 of   /httpdjail/etc/httpd/conf.d/00_mod_security.conf: Cannot load /etc/httpd/modules/mod_security2.so into server:  /etc/httpd/modules/mod_security2.so: undefined symbol: ap_get_server_banner


Solution Came from -- 

http://www.centos.org/modules/newbb/viewtopic.php?topic_id=13208

Done 

yum install mod_perl-devel


mod_security Activated at line number 212 on file /httpdjail/etc/httpd/conf/httpd.conf 

Include /httpdjail/etc/httpd/conf.d/00_mod_security.conf


Output Shows that Mod_Security is Running a 


[Wed Feb 20 13:35:50 2013] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Feb 20 13:35:51 2013] [notice] ModSecurity for Apache/2.7.1 (http://www.modsecurity.org/) configured.
[Wed Feb 20 13:35:51 2013] [notice] ModSecurity: APR compiled version="1.4.6"; loaded version="1.2.7"
[Wed Feb 20 13:35:51 2013] [warn] ModSecurity: Loaded APR do not match with compiled!
[Wed Feb 20 13:35:51 2013] [notice] ModSecurity: PCRE compiled version="6.6 "; loaded version="6.6 06-Feb-2006"
[Wed Feb 20 13:35:51 2013] [notice] ModSecurity: LUA compiled version="Lua 5.1"
[Wed Feb 20 13:35:51 2013] [notice] ModSecurity: LIBXML compiled version="2.7.6"
[Wed Feb 20 13:35:51 2013] [notice] Original server signature: Apache
[Wed Feb 20 13:35:51 2013] [notice] Digest: generating secret for digest authentication ...
[Wed Feb 20 13:35:51 2013] [notice] Digest: done
[Wed Feb 20 13:35:51 2013] [notice] mod_chroot: changed root to /httpdjail.
[Wed Feb 20 13:35:51 2013] [warn] pid file /var/run/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Wed Feb 20 13:35:52 2013] [notice] Apache configured -- resuming normal operations

Version of Httpd on BJP Server

httpd -v

Server version: Apache/2.2.3 Server built: Jan 10 2013 08:19:28


Still the Issue

  1. When activated the site is not accessible at all.
  2. No logs are generated or traceable
Retrieved from "https://wiki.tetrain.com/index.php?title=Mod_Security_Issue_on_BJP_Site&oldid=1265"