Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5193 > unrolled thread
| Started by | "lannoun@runbox.com" <lannoun@runbox.com> |
|---|---|
| First post | 2017-03-20 20:00 +0100 |
| Last post | 2017-03-21 08:20 +0100 |
| Articles | 5 — 5 participants |
Back to article view | Back to linux.debian.security
ModSecurity Debian 8 "lannoun@runbox.com" <lannoun@runbox.com> - 2017-03-20 20:00 +0100
Re: ModSecurity Debian 8 Krzysztof Kokot <kokot300@gmail.com> - 2017-03-20 23:10 +0100
Re: ModSecurity Debian 8 Richard Waterbeek <richardwbb@versatel.nl> - 2017-03-22 00:00 +0100
Re: ModSecurity Debian 8 Alberto Gonzalez Iniesta <agi@inittab.org> - 2017-03-21 07:50 +0100
Re: ModSecurity Debian 8 Casper Madsen <maveas@gmail.com> - 2017-03-21 08:20 +0100
| From | "lannoun@runbox.com" <lannoun@runbox.com> |
|---|---|
| Date | 2017-03-20 20:00 +0100 |
| Subject | ModSecurity Debian 8 |
| Message-ID | <tnaH7-qZ-1@gated-at.bofh.it> |
Hi, I have spent about 2 days trying to understand how to setup mod-security on my web server. I choose to rely on packages in the official repo, so if possible I will not compile packages. Is correct to say that I can't have mod-security in nginx? Is mod-security only available in apache2? Then I'm looking for some instruction about installing. There are a lot of outdated material and is difficult to learn the right stuff. Here is what I have typed: apt-get install libcurl3-gnutls liblua5.1-0 libxml2 apt-get install libapache2-mod-security2 apt-get install modsecuriy-crs sudo mv /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf sudo nano /etc/modsecurity/modsecurity.conf I have turned on the option SecRuleEngine git clone https://github.com/SpiderLabs/owasp-modsecurity-crs.git Now... my questions are: 1) Where I have to put the rules 2) Which other config files I have to edit 3) How I enable modsecurity on my website 4) Do you have sample config file to share? Thanks a lot for your help. Anders. LA.
[toc] | [next] | [standalone]
| From | Krzysztof Kokot <kokot300@gmail.com> |
|---|---|
| Date | 2017-03-20 23:10 +0100 |
| Message-ID | <tndEZ-2F7-1@gated-at.bofh.it> |
| In reply to | #5193 |
[Multipart message — attachments visible in raw view] — view raw
Hi, I can't help you a lot, in fact the only thing I can do is recommend you this article: https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu. It works for me. Cheers, Krzysztof Kokot 20 mar 2017 19:53 "lannoun@runbox.com" <lannoun@runbox.com> napisał(a): Hi, I have spent about 2 days trying to understand how to setup mod-security on my web server. I choose to rely on packages in the official repo, so if possible I will not compile packages. Is correct to say that I can't have mod-security in nginx? Is mod-security only available in apache2? Then I'm looking for some instruction about installing. There are a lot of outdated material and is difficult to learn the right stuff. Here is what I have typed: apt-get install libcurl3-gnutls liblua5.1-0 libxml2 apt-get install libapache2-mod-security2 apt-get install modsecuriy-crs sudo mv /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf sudo nano /etc/modsecurity/modsecurity.conf I have turned on the option SecRuleEngine git clone https://github.com/SpiderLabs/owasp-modsecurity-crs.git Now... my questions are: 1) Where I have to put the rules 2) Which other config files I have to edit 3) How I enable modsecurity on my website 4) Do you have sample config file to share? Thanks a lot for your help. Anders. LA.
[toc] | [prev] | [next] | [standalone]
| From | Richard Waterbeek <richardwbb@versatel.nl> |
|---|---|
| Date | 2017-03-22 00:00 +0100 |
| Message-ID | <tnAUV-1rR-11@gated-at.bofh.it> |
| In reply to | #5194 |
[Multipart message — attachments visible in raw view] — view raw
Mod-security, [opinioned] "Blocks certain words that are normal. Decision to depend on it, depends on what your Apache server, serves. I run a forum that sometimes has over ten spambots at once. Running without that piece of art" However, few, but not so few, 'no likey-likey' Mod security, and I regret remembering their bias. Sorry, I can't tell much more then that. Responses to this post I deem 'friendly' [my post that is, not so friendly responses, I have a thick skin], might trigger my mind. [or won't] [/opinoned] -- Richard W. The Netherlands Krzysztof Kokot schreef op ma 20-03-2017 om 23:03 [+0100]: > Hi, > > > I can't help you a lot, in fact the only thing I can do is recommend > you this > article: https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu. It works for me. > > > Cheers, > Krzysztof Kokot > > > 20 mar 2017 19:53 "lannoun@runbox.com" <lannoun@runbox.com> > napisał(a): > > Hi, > I have spent about 2 days trying to understand how to setup > mod-security on my web server. > > I choose to rely on packages in the official repo, so if > possible I will not compile packages. > > Is correct to say that I can't have mod-security in nginx? > Is mod-security only available in apache2? > > Then I'm looking for some instruction about installing. There > are a lot of outdated material and is difficult to learn the > right stuff. > > > Here is what I have typed: > > > apt-get install libcurl3-gnutls liblua5.1-0 libxml2 > apt-get install libapache2-mod-security2 > apt-get install modsecuriy-crs > sudo > mv /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf > sudo nano /etc/modsecurity/modsecurity.conf > > > I have turned on the option SecRuleEngine > > git clone > https://github.com/SpiderLabs/owasp-modsecurity-crs.git > > > Now... my questions are: > > 1) Where I have to put the rules > 2) Which other config files I have to edit > 3) How I enable modsecurity on my website > 4) Do you have sample config file to share? > > > Thanks a lot for your help. > > Anders. LA. > > > >
[toc] | [prev] | [next] | [standalone]
| From | Alberto Gonzalez Iniesta <agi@inittab.org> |
|---|---|
| Date | 2017-03-21 07:50 +0100 |
| Message-ID | <tnlMd-82W-1@gated-at.bofh.it> |
| In reply to | #5193 |
On Mon, Mar 20, 2017 at 07:52:56PM +0100, lannoun@runbox.com wrote: > Hi, > I have spent about 2 days trying to understand how to setup mod-security on > my web server. > > I choose to rely on packages in the official repo, so if possible I will > not compile packages. > > Is correct to say that I can't have mod-security in nginx? > Is mod-security only available in apache2? > > Then I'm looking for some instruction about installing. There are a lot of > outdated material and is difficult to learn the right stuff. > > > Here is what I have typed: > > > apt-get install libcurl3-gnutls liblua5.1-0 libxml2 > apt-get install libapache2-mod-security2 > apt-get install modsecuriy-crs > sudo mv /etc/modsecurity/modsecurity.conf-recommended > /etc/modsecurity/modsecurity.conf > sudo nano /etc/modsecurity/modsecurity.conf > > > I have turned on the option SecRuleEngine > > git clone https://github.com/SpiderLabs/owasp-modsecurity-crs.git > > > Now... my questions are: > > 1) Where I have to put the rules > 2) Which other config files I have to edit > 3) How I enable modsecurity on my website > 4) Do you have sample config file to share? > Hi there, Debian's modsecurity packages will only work with Apache. In order to get modsecurity to work with nginx you'll have to re-compile nginx and modsecurity. This may help you: https://www.howtoforge.com/tutorial/install-nginx-with-mod_security-on-ubuntu-15-04/ Regards, Alberto -- Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico mailto/sip: agi@inittab.org | en GNU/Linux y software libre Encrypted mail preferred | http://inittab.com Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D 4BF2 009B 3375 6B9A AA55
[toc] | [prev] | [next] | [standalone]
| From | Casper Madsen <maveas@gmail.com> |
|---|---|
| Date | 2017-03-21 08:20 +0100 |
| Message-ID | <tnmfg-8tT-13@gated-at.bofh.it> |
| In reply to | #5193 |
Hi Anders. If you are using nginx take a look at naxsi. Best regards Casper > Den 20. mar. 2017 kl. 19.52 skrev "lannoun@runbox.com" <lannoun@runbox.com>: > > Hi, > I have spent about 2 days trying to understand how to setup mod-security on my web server. > > I choose to rely on packages in the official repo, so if possible I will not compile packages. > > Is correct to say that I can't have mod-security in nginx? > Is mod-security only available in apache2? > > Then I'm looking for some instruction about installing. There are a lot of outdated material and is difficult to learn the right stuff. > > > Here is what I have typed: > > > apt-get install libcurl3-gnutls liblua5.1-0 libxml2 > apt-get install libapache2-mod-security2 > apt-get install modsecuriy-crs > sudo mv /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf > sudo nano /etc/modsecurity/modsecurity.conf > > > I have turned on the option SecRuleEngine > > git clone https://github.com/SpiderLabs/owasp-modsecurity-crs.git > > > Now... my questions are: > > 1) Where I have to put the rules > 2) Which other config files I have to edit > 3) How I enable modsecurity on my website > 4) Do you have sample config file to share? > > > Thanks a lot for your help. > > Anders. LA. >
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web