Install Suhosin :: How I Can Install Mod_security
Nov 14, 2008problem with install suhosin and ...
how i can install Mod_security
problem with install suhosin and ...
how i can install Mod_security
how to install mod_security, suhosin, Mod_Evasive on server plesk (apache2, php5)?
win I loacate apxs I have empty results
i have try:
wget [url]
tar -zxvf suhosin-0.9.27.tgz
./configure
make
make install
then:
ls –lah /usr/local/lib/php/extensions/no-debug-non-zts-20060613/
mkdir /usr/lib/php/extensions/
cp /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so /usr/lib/php/extensions/
no-debug-non-zts-20060613
vi php.ini
But i havent:
:/usr/lib/php:/usr/local/lib/php:/usr/lib/php/extensions:/usr/lib/php/extensions/no-debug-non-zts-20060613
in my php.ini and i have this:
;include_path = ".:/php/includes"
According to this Guide I installed Suhosin Extension
[url]
After installation each time I add
;;;;;;;;;;;;;;;;;;;;;;;;;
; Paths and Directories ;
;;;;;;;;;;;;;;;;;;;;;;;;;
include_path = ".:/usr/lib/php:/usr/local/lib/php:/usr/lib/php/extensions:/usr/lib/php/extensions/no-debug-non-zts-20020429:" ;
extension_dir = /usr/lib/php/extensions/no-debug-non-zts-20020429/ ; directory in which the loadable extensions (modules) reside
Http fail and php -v don't show that Suhosin installed
How can i check if Suhosin installed and working fine ?
For the last several days on one of our dedicated servers, a AMD 3000+ 2GB RAM 2x80GB HDD 5TB traffic installed with CentOS 5.3 64-bit w/a GNU Linux kernel-2.6.18-128.1.10.el5, we use as a 'backup' to our master, we've been having resolver issues. If we attempt to ping, dig or nslookup ANY hostname, we get "unknown host domainexample.com". We can, however, ping IP addresses, including the external one for the server. (Pinging the server from another, not connected to the network returns 0% packet loss.)
Our package managers can't resolve hostnames, either. For instance, when we try to run yum, we get:
"Could not retrieve reponamehere [url]
[Errno 4] IOError: <urlopen error (-2, 'Name or service not known')>
Error: Cannot find a valid baseurl for repo: reponamehere"
We've already tried disabling several repos and it should be noted that when we use "wget" or "git" or any other package installer, we have the same resolving issues.
Our "/etc/resolv.conf" contains nameservers for the major upstream DC to our provider, which gave us permission to use them. We've tried two sets from them as well as those from our provider and from a DNS service provider. None have worked. (BTW, We have two servers with this provider and the other one is fine; the provider, though this is an unmanaged sever, is attempting to be very helpful and responsive. No problems there.)
We've tried rebooting the server and flushing IPtables as well as stopping it altogether. (Thankfully, we've set our DNS, SQL and httpd servers to run on boot) Nothing seems to resolve the issue (no pun intended).
However, we think this problem may have to do with having installed Suhosin on the server this past weekend since it seems to have started shortly after that but we're not sure. We are getting the following errors in from our httpd logs, though:
[Fri Jun 19 12:52:25 2009] [notice] Graceful restart requested, doing restart
[Fri Jun 19 12:52:25 2009] [error] (9)Bad file descriptor: apr_socket_accept: (client socket)
[Fri Jun 19 12:52:26 2009] [notice] Digest: generating secret for digest authentication ...
[Fri Jun 19 12:52:26 2009] [notice] Digest: done
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib64/php/modules/suhosin.so' - /usr/lib64/php/modules/suhosin.so: undefined symbol: php_rfc1867_callback in Unknown on line 0
[Fri Jun 19 12:52:26 2009] [notice] mod_python: Creating 4 session mutexes based on 256 max processes and 0 max threads.
[Fri Jun 19 12:52:27 2009] [notice] Apache configured -- resuming normal operations
When we ran 'tcpdump', all it returned was the IP address for the server connected on several ports via SSH. Running 'netstat -an' shows the server's IP address, again connected on different ports, and the localhost address connected on a few. No other IP addresses--and we have about 10--are showing as connected.
Anyway, this is all we've been able to figure out. Anyone had this problem and solved it successfully?
i'm using DirectAdmin ,
when i was using Apache , i installed & Compiled Mod_Sec 2 , now i installed LiteSpeed & i want compile mod_sec with LiteSpeed ,
i have install modsecurity by WHM > Manage Plugins > check Name: modsecurity and save .and so without error its complite .
and restart my apache.
but i cant finde it in phpinfo and my Plugins in whm
Trying to install mod_security 2.5 on Red Hat box with Apache 2.0.52 per ModSecurity.org installation instructions.
Getting no errors when running:
./configure --with-apxs=/usr/sbin/apxs
or
make
But, when I run 'make test' I get the following:
# make test
/bin/sh /usr/lib/apr/build/libtool --silent --mode=compile gcc -O2 -g -pipe -m32 -march=i386 -mtune=pentium4 -pthread -O2 -g -Wall -Werror -I/usr/include/pcre -I/usr/include/libxml2 -I/usr/include/apr-0 -DLINUX=2 -D_REENTRANT -D_GNU_SOURCE -pthread -I/usr/include/apr-0 -o msc_test.lo -c msc_test.c
In file included from re.h:36,
from modsecurity.h:46,
from msc_test.c:13:
apache2.h:14:23: http_core.h: No such file or directory
apache2.h:15:26: http_request.h: No such file or directory
apache2.h:16:19: httpd.h: No such file or directory
apache2.h:17:24: ap_release.h: No such file or directory
In file included from re.h:36,
from modsecurity.h:46,
from msc_test.c:13:
apache2.h:60: error: syntax error before '*' token
apache2.h:63: error: syntax error before '*' token
apache2.h:72: error: syntax error before "ap_filter_t"
apache2.h:80: error: syntax error before '*' token
apache2.h:82: error: syntax error before '*' token
apache2.h:89: error: syntax error before '*' token
In file included from msc_test.c:13:
modsecurity.h:48:23: ap_config.h: No such file or directory
modsecurity.h:53:25: http_config.h: No such file or directory
modsecurity.h:54:22: http_log.h: No such file or directory
modsecurity.h:55:27: http_protocol.h: No such file or directory
modsecurity.h:123:19: unixd.h: No such file or directory
In file included from msc_test.c:13:
modsecurity.h:145: error: syntax error before "AP_MODULE_DECLARE_DATA"
modsecurity.h:145: warning: type defaults to `int' in declaration of `security2_module'
modsecurity.h:145: warning: data definition has no type or storage class
modsecurity.h:147: error: syntax error before "module_directives"
modsecurity.h:147: warning: type defaults to `int' in declaration of `module_directives'
modsecurity.h:147: warning: data definition has no type or storage class
modsecurity.h:209: error: syntax error before "request_rec"
modsecurity.h:209: warning: no semicolon at end of struct or union
modsecurity.h:210: warning: type defaults to `int' in declaration of `r'
modsecurity.h:210: warning: data definition has no type or storage class
modsecurity.h:223: error: syntax error before '*' token
modsecurity.h:223: warning: type defaults to `int' in declaration of `if_brigade'
modsecurity.h:223: warning: data definition has no type or storage class
modsecurity.h:229: error: syntax error before '*' token
modsecurity.h:229: warning: type defaults to `int' in declaration of `of_brigade'
modsecurity.h:229: warning: data definition has no type or storage class
modsecurity.h:376: error: syntax error before '}' token
modsecurity.h:496: error: syntax error before "apr_global_mutex_t"
modsecurity.h:496: warning: no semicolon at end of struct or union
modsecurity.h:499: error: syntax error before '}' token
In file included from msc_test.c:15:
pdf_protect.h:18: error: syntax error before '*' token
msc_test.c:39: error: syntax error before "ap_filter_t"
msc_test.c: In function `msr_log':
msc_test.c:56: error: dereferencing pointer to incomplete type
msc_test.c:59: error: dereferencing pointer to incomplete type
msc_test.c:60: error: dereferencing pointer to incomplete type
msc_test.c:60: error: dereferencing pointer to incomplete type
msc_test.c:61: error: dereferencing pointer to incomplete type
msc_test.c:62: error: dereferencing pointer to incomplete type
msc_test.c:67: error: dereferencing pointer to incomplete type
msc_test.c:72: error: dereferencing pointer to incomplete type
msc_test.c: At top level:
msc_test.c:77: error: syntax error before '*' token
msc_test.c:81: error: syntax error before '*' token
msc_test.c:85: error: syntax error before '*' token
msc_test.c:89: error: syntax error before '*' token
msc_test.c: In function `test_tfn':
msc_test.c:156: error: dereferencing pointer to incomplete type
msc_test.c: In function `test_op':
msc_test.c:190: error: dereferencing pointer to incomplete type
msc_test.c:201: error: dereferencing pointer to incomplete type
msc_test.c:208: error: dereferencing pointer to incomplete type
msc_test.c:224: error: dereferencing pointer to incomplete type
msc_test.c: In function `init_msr':
msc_test.c:254: error: `request_rec' undeclared (first use in this function)
msc_test.c:254: error: (Each undeclared identifier is reported only once
msc_test.c:254: error: for each function it appears in.)
msc_test.c:255: error: syntax error before ')' token
msc_test.c:300: error: invalid application of `sizeof' to incomplete type `modsecurity.h'
msc_test.c:300: error: invalid application of `sizeof' to incomplete type `modsecurity.h'
msc_test.c:301: error: dereferencing pointer to incomplete type
msc_test.c:302: error: dereferencing pointer to incomplete type
msc_test.c:303: error: dereferencing pointer to incomplete type
msc_test.c:304: error: dereferencing pointer to incomplete type
msc_test.c:305: error: dereferencing pointer to incomplete type
msc_test.c:306: error: dereferencing pointer to incomplete type
msc_test.c:307: error: dereferencing pointer to incomplete type
msc_test.c:308: error: dereferencing pointer to incomplete type
msc_test.c:309: error: dereferencing pointer to incomplete type
msc_test.c:310: error: dereferencing pointer to incomplete type
msc_test.c:311: error: dereferencing pointer to incomplete type
msc_test.c:312: error: dereferencing pointer to incomplete type
msc_test.c:313: error: dereferencing pointer to incomplete type
msc_test.c:314: error: dereferencing pointer to incomplete type
msc_test.c:315: error: dereferencing pointer to incomplete type
msc_test.c:316: error: dereferencing pointer to incomplete type
msc_test.c:317: error: dereferencing pointer to incomplete type
msc_test.c:318: error: dereferencing pointer to incomplete type
msc_test.c:319: error: dereferencing pointer to incomplete type
msc_test.c:320: error: dereferencing pointer to incomplete type
msc_test.c:321: error: dereferencing pointer to incomplete type
msc_test.c:322: error: dereferencing pointer to incomplete type
msc_test.c:323: error: dereferencing pointer to incomplete type
msc_test.c:324: error: dereferencing pointer to incomplete type
msc_test.c:325: error: dereferencing pointer to incomplete type
msc_test.c: At top level:
modsecurity.h:147: warning: array 'module_directives' assumed to have one element
make: *** [msc_test.lo] Error 1
All of the 'No such file or directory' files are located in /usr/include/httpd/
why I am getting this error?
I have installed mod_security2 with apache2.x with success
but when I try to restart apache I have this wrong Msg:
PHP Code:
httpd restarthttpd: Syntax error on line 34 of /usr/local/apache/conf/httpd.conf: Cannot load /usr/local/apache/modules/mod_security2.so into server: /usr/local/apache/modules/mod_security2.so: undefined symbol: msc_alert
PHP Code:
[root@secure modsecurity-apache_2.1.3]# ls -la /usr/local/apache/modules/mod_security2.so-rwxr-xr-x 1 root root 52541 Nov 6 16:26 /usr/local/apache/modules/mod_security2.so[root@secure modsecurity-apache_2.1.3]#
Cant seem to find anywhere that has a tutorial or instructions on how to install mod security for ubuntu gutsy, has anyone installed it lately and like to share their experience or tell how? Ive google to try find answer about 4 times now in last 2 weeks and still havent found anything.
View 1 Replies View RelatedFor a LAMP server user, is there a general consensus that everyone should pretty much install and run ModSecurity? Is there ever a good reason not too?
View 1 Replies View RelatedMy server ban me sometimes, while I am surfing on one of my websites(mostly Drupal, Joomla, Wordpress). Sometimes it happens with first visit sometimes later. I couldnt find the reason. Sometimes I cannot either create a ssh connection after ban. But ping answered after ban.
Which path/logs should I analize to find it? I tried with grep but couldnt find:
grep -iR 'my.old.ip' /var/log ... /etc/apf ... /usr/local/apache/...
I think mod_security and suhosin cannot block ssh, then iptables, lokkit or apf must be preventer here.
Where are logs of Iptables and APF? Or how can I find the reason?
Is it possible to install Plesk 12 to Debian Jessie with the autoinstall script?
View 7 Replies View RelatedWhat difference between yum install php or manually install php from scrach (build, make and install)?
I know manually install could configure lots of parameters and paths, like --iconv, --mbsting, etc. I don't know anything behind yum install php. If I want to install php everything in the following:
./configure --prefix=/usr/local/webserver/php --with-config-file-path=/usr/local/webserver/php/etc --with-mysql=/usr/local/webserver/mysql --with-mysqli=/usr/local/webserver/mysql/bin/mysql_config --with-iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml --disable-debug --disable-rpath --enable-discard-path --enable-safe-mode --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --with-curlwrappers --enable-mbregex --enable-fastcgi --enable-fpm --enable-force-cgi-redirect --enable-mbstring --with-mcrypt --with-gd --enable-gd-native-ttf --with-openssl --with-sendmail=/usr/sbin/sendmail
to installing linux software and have been beating my head for a couple of days. I just learned that I can use something on my CENTOS 5 - which is the same as RHEL 5 - to install the rpm and all dependencies.
Numeric-24.2-1.i586.rpm is the rpm I want to install, if that matters.
How can I do install it AND any dependencies?
I am trying to install the kernel source.
I have downloaded kernel-2.6.20-1.2948.fc6.src.rpm
I am using fedora 6 64bit.
here are my current kernels:
kernel-headers-2.6.20-1.2948.fc6
kernel-devel-2.6.20-1.2944.fc6
yum-kernel-module-1.0.3-1.fc6
kernel-2.6.20-1.2944.fc6
kernel-devel-2.6.20-1.2948.fc6
kernel-2.6.20-1.2948.fc6
here is what I seen when I installed kernel-2.6.20-1.2948.fc6.src.rpm
rpm -ivh kernel-2.6.20-1.2948.fc6.src.rpm
1:kernel warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
warning: user brewbuilder does not exist - using root
########################################### [100%]
warning: user brewbuilder does not exist - using root
warning: group brewbuilder does not exist - using root
then when I ran:
rpmbuild -bp --target=$(uname -m) /usr/src/redhat/SPECS/kernel-2.6.spec
I seen this error:
+ Arch=x86_64
+ make ARCH=x86_64 nonint_oldconfig
In file included from /usr/include/sys/socket.h:35,
from /usr/include/netinet/in.h:24,
from /usr/include/arpa/inet.h:23,
from scripts/basic/fixdep.c:117:
/usr/include/bits/socket.h:310:24: error: asm/socket.h: No such file or directory
make[1]: *** [scripts/basic/fixdep] Error 1
make: *** [scripts_basic] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.93770 (%prep)
I need to have this installed to get a app installed etc...
suggestions or ideas?
thanks
What is the difference between Suhosin Extension and Suhosin Patch?
View 6 Replies View RelatedSo i have a dedicated server and here are the specs:
AMD64 X2 7750+
8192 MB DDR2 RAM
500 GB 7.200 RPM
2000 GB Traffic p/m
CentOS 5.3
I want to install several VPS's on this server so i have one for shared users, one for reseller users and then the rest can be purchased. Unfortunately i have no idea how to install VPS's. Which is the best visualization software for VPS's? And how do i install and how to get whmcs to create them. Or are they already created?
I am also wondering about control panels and do vps's have to have their own separate control panel or do they all run of the main control panel.
Also what is the rule of thumb on how many vps's per server.
I'm willing to setup a new dedicated server that hosts only one website. before I just used Centos, it was free and worked perfect.
I dont want to spend any money for OS.
Which OS do you use?
Well I ordered a virtuzzo server and I am wondering on how do you install yum. Its a centos
View 7 Replies View RelatedI tried to : yum install gcc
Quote:
root@name [~]# yum install gcc
Traceback (most recent call last):
File "/usr/bin/yum", line 28, in ?
import yummain
File "/usr/share/yum-cli/yummain.py", line 30, in ?
from yum import _
ImportError: cannot import name _
command : rpm -q yum
Quote:
root@name [~]# rpm -q yum
yum-3.2.8-9.el5.centos.2.1
command : rpm -ap | grep yum
Quote:
root@name [~]# rpm -aq | grep yum
yum-3.2.8-9.el5.centos.2.1
yum-fastestmirror-1.1.10-9.el5.centos
yum-metadata-parser-1.1.2-2.el5
command : rpm -e yum-metadata-parser-1.0-8.fc6
Quote:
root@name [~]# rpm -e yum-metadata-parser-1.0-8.fc6
error: package yum-metadata-parser-1.0-8.fc6 is not installed
I've tried to work with yum. but if I "yum install .." enter, then i get this error :
PHP Code:
error: no dbpath has been set
error: cannot open Packages database in /%{_dbpath}
Traceback (most recent call last):
File "/usr/bin/yum", line 30, in ?
yummain.main(sys.argv[1:])
File "/usr/share/yum/yummain.py", line 163, in main
(log, errorlog, filelog, conf, cmds) = parseCmdArgs(args)
File "/usr/share/yum/yummain.py", line 75, in parseCmdArgs
conf=yumconf(configfile=yumconffile)
File "/usr/share/yum/config.py", line 155, in __init__
self.yumvar['releasever'] = self._getsysver()
File "/usr/share/yum/config.py", line 285, in _getsysver
idx = ts.dbMatch('provides', self.distroverpkg)
TypeError: rpmdb open failed
I'm playing around with a test server, install Xen on a Centos 5 box.
[url]
I've tried two methods to create a vm.
virt-install
and
virt-install -x "ip=xxx.xxx.70.212 gateway=xxx.xxx.70.211 subnet=255.255.255.248"
If I do virt-install, it asks me this:
(first screenshot).
I have no idea what to put it. I did try this:
Quote:
IPv4 address: xxx.xxx.70.212__ / 255.255.255.248_
Gateway: xxx.xxx.70.211___________________________
Name Server: _________________________________________
note: only here in my post am I actually putting "xxx" in the IP for privacy reasons only. The 70.212 is the main server IP that I ssh into.
See 2nd screenshot for error. Same thing with various *valid* mirrors I tried.
This is my ifcfg-eth0 info:
DEVICE=eth0
BOOTPROTO=static
IPADDR=xxx.xxx.70.212
NETMASK=255.255.255.248
ONBOOT=yes TYPE=Ethernet
I have bought Dell Optiplex 760 and i would like to in stall Virtual Private Server (VPS) on it.. can anybody please tell me step by step tutorial to install VPS in my computer and have my own webserver?
View 14 Replies View Relatedi want to install custom os in Xen.
what do i do?
i want install Mikrotik , Cenos and ... in it.
also how can i create image from it to use it again?
can i use this image for hypervm?
i intsalled clipshare script, and this is the server requirments:
# Mplayer + Mencoder
# Flv2tool
# Libogg + Libvorbis
# LAME MP3
how yo install it?
i have a domain from namecheap and a virtual private server.
I want to have ns1.domain.com and ns2.domain.com and domain.com for my homepage.
I use lxadmin.How can i do this?
How to install DOM XML on php 5.1.6?
View 5 Replies View Relatedone of my server forgot to install yum, as a result, i am unable to use yum to install packages. The os is centos 5,
View 11 Replies View RelatedI was trying to install CSF/LFD on to my VPS but I'm having problems. Its coming out with the error:
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
Error: iptables command [/sbin/iptables -A LOGDROPIN -j ] failed, at line 213
Rus over at CheapVPS assures me his servers support CFD/APF fully so its not something on his end and I've thought of everything on my end. Has anyone come across this problem before?