Mod_security && Apache 2.x After Install
Nov 6, 2007
I have installed mod_security2 with apache2.x with success
but when I try to restart apache I have this wrong Msg:
PHP Code:
httpd restarthttpd: Syntax error on line 34 of /usr/local/apache/conf/httpd.conf: Cannot load /usr/local/apache/modules/mod_security2.so into server: /usr/local/apache/modules/mod_security2.so: undefined symbol: msc_alert
PHP Code:
[root@secure modsecurity-apache_2.1.3]# ls -la /usr/local/apache/modules/mod_security2.so-rwxr-xr-x 1 root root 52541 Nov 6 16:26 /usr/local/apache/modules/mod_security2.so[root@secure modsecurity-apache_2.1.3]#
View 5 Replies
ADVERTISEMENT
Nov 14, 2008
problem with install suhosin and ...
how i can install Mod_security
View 7 Replies
View Related
Jul 6, 2009
i'm using DirectAdmin ,
when i was using Apache , i installed & Compiled Mod_Sec 2 , now i installed LiteSpeed & i want compile mod_sec with LiteSpeed ,
View 6 Replies
View Related
Apr 17, 2009
i have install modsecurity by WHM > Manage Plugins > check Name: modsecurity and save .and so without error its complite .
and restart my apache.
but i cant finde it in phpinfo and my Plugins in whm
View 3 Replies
View Related
Feb 29, 2008
Trying to install mod_security 2.5 on Red Hat box with Apache 2.0.52 per ModSecurity.org installation instructions.
Getting no errors when running:
./configure --with-apxs=/usr/sbin/apxs
or
make
But, when I run 'make test' I get the following:
# make test
/bin/sh /usr/lib/apr/build/libtool --silent --mode=compile gcc -O2 -g -pipe -m32 -march=i386 -mtune=pentium4 -pthread -O2 -g -Wall -Werror -I/usr/include/pcre -I/usr/include/libxml2 -I/usr/include/apr-0 -DLINUX=2 -D_REENTRANT -D_GNU_SOURCE -pthread -I/usr/include/apr-0 -o msc_test.lo -c msc_test.c
In file included from re.h:36,
from modsecurity.h:46,
from msc_test.c:13:
apache2.h:14:23: http_core.h: No such file or directory
apache2.h:15:26: http_request.h: No such file or directory
apache2.h:16:19: httpd.h: No such file or directory
apache2.h:17:24: ap_release.h: No such file or directory
In file included from re.h:36,
from modsecurity.h:46,
from msc_test.c:13:
apache2.h:60: error: syntax error before '*' token
apache2.h:63: error: syntax error before '*' token
apache2.h:72: error: syntax error before "ap_filter_t"
apache2.h:80: error: syntax error before '*' token
apache2.h:82: error: syntax error before '*' token
apache2.h:89: error: syntax error before '*' token
In file included from msc_test.c:13:
modsecurity.h:48:23: ap_config.h: No such file or directory
modsecurity.h:53:25: http_config.h: No such file or directory
modsecurity.h:54:22: http_log.h: No such file or directory
modsecurity.h:55:27: http_protocol.h: No such file or directory
modsecurity.h:123:19: unixd.h: No such file or directory
In file included from msc_test.c:13:
modsecurity.h:145: error: syntax error before "AP_MODULE_DECLARE_DATA"
modsecurity.h:145: warning: type defaults to `int' in declaration of `security2_module'
modsecurity.h:145: warning: data definition has no type or storage class
modsecurity.h:147: error: syntax error before "module_directives"
modsecurity.h:147: warning: type defaults to `int' in declaration of `module_directives'
modsecurity.h:147: warning: data definition has no type or storage class
modsecurity.h:209: error: syntax error before "request_rec"
modsecurity.h:209: warning: no semicolon at end of struct or union
modsecurity.h:210: warning: type defaults to `int' in declaration of `r'
modsecurity.h:210: warning: data definition has no type or storage class
modsecurity.h:223: error: syntax error before '*' token
modsecurity.h:223: warning: type defaults to `int' in declaration of `if_brigade'
modsecurity.h:223: warning: data definition has no type or storage class
modsecurity.h:229: error: syntax error before '*' token
modsecurity.h:229: warning: type defaults to `int' in declaration of `of_brigade'
modsecurity.h:229: warning: data definition has no type or storage class
modsecurity.h:376: error: syntax error before '}' token
modsecurity.h:496: error: syntax error before "apr_global_mutex_t"
modsecurity.h:496: warning: no semicolon at end of struct or union
modsecurity.h:499: error: syntax error before '}' token
In file included from msc_test.c:15:
pdf_protect.h:18: error: syntax error before '*' token
msc_test.c:39: error: syntax error before "ap_filter_t"
msc_test.c: In function `msr_log':
msc_test.c:56: error: dereferencing pointer to incomplete type
msc_test.c:59: error: dereferencing pointer to incomplete type
msc_test.c:60: error: dereferencing pointer to incomplete type
msc_test.c:60: error: dereferencing pointer to incomplete type
msc_test.c:61: error: dereferencing pointer to incomplete type
msc_test.c:62: error: dereferencing pointer to incomplete type
msc_test.c:67: error: dereferencing pointer to incomplete type
msc_test.c:72: error: dereferencing pointer to incomplete type
msc_test.c: At top level:
msc_test.c:77: error: syntax error before '*' token
msc_test.c:81: error: syntax error before '*' token
msc_test.c:85: error: syntax error before '*' token
msc_test.c:89: error: syntax error before '*' token
msc_test.c: In function `test_tfn':
msc_test.c:156: error: dereferencing pointer to incomplete type
msc_test.c: In function `test_op':
msc_test.c:190: error: dereferencing pointer to incomplete type
msc_test.c:201: error: dereferencing pointer to incomplete type
msc_test.c:208: error: dereferencing pointer to incomplete type
msc_test.c:224: error: dereferencing pointer to incomplete type
msc_test.c: In function `init_msr':
msc_test.c:254: error: `request_rec' undeclared (first use in this function)
msc_test.c:254: error: (Each undeclared identifier is reported only once
msc_test.c:254: error: for each function it appears in.)
msc_test.c:255: error: syntax error before ')' token
msc_test.c:300: error: invalid application of `sizeof' to incomplete type `modsecurity.h'
msc_test.c:300: error: invalid application of `sizeof' to incomplete type `modsecurity.h'
msc_test.c:301: error: dereferencing pointer to incomplete type
msc_test.c:302: error: dereferencing pointer to incomplete type
msc_test.c:303: error: dereferencing pointer to incomplete type
msc_test.c:304: error: dereferencing pointer to incomplete type
msc_test.c:305: error: dereferencing pointer to incomplete type
msc_test.c:306: error: dereferencing pointer to incomplete type
msc_test.c:307: error: dereferencing pointer to incomplete type
msc_test.c:308: error: dereferencing pointer to incomplete type
msc_test.c:309: error: dereferencing pointer to incomplete type
msc_test.c:310: error: dereferencing pointer to incomplete type
msc_test.c:311: error: dereferencing pointer to incomplete type
msc_test.c:312: error: dereferencing pointer to incomplete type
msc_test.c:313: error: dereferencing pointer to incomplete type
msc_test.c:314: error: dereferencing pointer to incomplete type
msc_test.c:315: error: dereferencing pointer to incomplete type
msc_test.c:316: error: dereferencing pointer to incomplete type
msc_test.c:317: error: dereferencing pointer to incomplete type
msc_test.c:318: error: dereferencing pointer to incomplete type
msc_test.c:319: error: dereferencing pointer to incomplete type
msc_test.c:320: error: dereferencing pointer to incomplete type
msc_test.c:321: error: dereferencing pointer to incomplete type
msc_test.c:322: error: dereferencing pointer to incomplete type
msc_test.c:323: error: dereferencing pointer to incomplete type
msc_test.c:324: error: dereferencing pointer to incomplete type
msc_test.c:325: error: dereferencing pointer to incomplete type
msc_test.c: At top level:
modsecurity.h:147: warning: array 'module_directives' assumed to have one element
make: *** [msc_test.lo] Error 1
All of the 'No such file or directory' files are located in /usr/include/httpd/
why I am getting this error?
View 3 Replies
View Related
Jan 14, 2008
Cant seem to find anywhere that has a tutorial or instructions on how to install mod security for ubuntu gutsy, has anyone installed it lately and like to share their experience or tell how? Ive google to try find answer about 4 times now in last 2 weeks and still havent found anything.
View 1 Replies
View Related
Jan 23, 2008
For a LAMP server user, is there a general consensus that everyone should pretty much install and run ModSecurity? Is there ever a good reason not too?
View 1 Replies
View Related
Jul 26, 2007
how to install mod_security, suhosin, Mod_Evasive on server plesk (apache2, php5)?
win I loacate apxs I have empty results
View 4 Replies
View Related
Sep 18, 2007
Well I have done the configtest and syntax is ok...
View 6 Replies
View Related
Apr 16, 2009
i need to install Deflate and Cache mods how can I manually add them to my httpd.conf file
RedHat Apache/2.2.11
View 1 Replies
View Related
Sep 15, 2007
I have a VPS with cPanel/WHM version 11,and since 2 days ago for now apaent reason I cant access the WHM/cPanel interface.I contacted my webhost and they suggested to reinstall the Apache.Could someone tell me the command to do so via SSH?
View 9 Replies
View Related
Jan 19, 2013
I have installed Apache 2.2.23 on RHEL 64 bit, but missed to enable ssl at time of ./config. Now i have enable SSL, how to install mod_ssl now?
View 8 Replies
View Related
Jan 4, 2008
how to install an SSL certificate on this server but really haven't a clue. I searched all over the internet and the ensim site with no luck. give me a little direction in my journey from hell.
View 10 Replies
View Related
Mar 2, 2015
I have been running into the following fatal error issue while compiling apache2.4 version on Solaris. Config command ran successfully, however the make command fails with recording name conflict error for libapr-1.so.
ld: fatal: recording name conflict: file '/soft/oracle/product/apache24/httpd-2.4.12/srclib/apr/lib/libapr-1.so' and file '/soft/oracle/product/apache24/httpd-2.4.12/srclib/apr/.libs/libapr-1.so' provide identical dependency names: libapr-1.so.0 (possible multiple inclusion of the same file)
ld: fatal: file processing errors. No output written to .libs/httpd
*** Error code 2
make: Fatal error: Command failed for target `httpd'
Current working directory /soft/oracle/product/apache24/httpd-2.4.12
*** Error code 1
The following command caused the error:
otarget=`echo all-recursive|sed s/-recursive//`;
list=' srclib os server modules support';
for i in $list; do
[code]....
View 3 Replies
View Related
Apr 25, 2013
I've just created a "droplet" (a VPS) from DigitalOcean with the latest version of Ubuntu Server and I have SSH access. While creating the droplet I needed to enter a hostname (a domain), which is registered at Godaddy, but I haven't touched its configuration yet.
I've installed the Webmin control panel through SSH and at the end of the installation I was told to access it through mydomain.com:10000. However, as expected, that didn't resolve in my browser (since probably the domain is not properly configured). I've tried with [the droplet's IP]:10000, but this didn't work either, the following message was displayed:
This web server is running in SSL mode. Try the URL mydomain.com:10000/ instead.
View 3 Replies
View Related
Apr 6, 2015
I'm about to install mod-pagespeed on my webserver. i followed a tutorial but then i got an error message.
View 4 Replies
View Related
Dec 6, 2013
I need to speed up my website to be faster because of search engines.
Now, how to install G-zip compression on my VPS.
CentOS
View 7 Replies
View Related
Nov 25, 2014
I am trying to deploy siteminder web agent on apache web server.They have a pre-req which says that while installing apache server, "install as a service, available for all users" "When an Apache-based web server is installed using a single user account, the Agent configuration cannot detect the Apache-based web server installation."
I don't see any msi installer anymore for apache web server, which had this option to select while installing.Now all i see is a zip file and i just have to unzip as part of installation. With this when I install httpd as a service, it is not detected by siteminder agent.So how can I set this "install as a service, available for all users" after installing from zip file?
View 1 Replies
View Related
Jan 14, 2007
Is there a way to tar a compiled apache/php installation and move it to another identical server?
If on the first server I specify all the configure options for both apache and php to point to /usr/local/apache2 for example, and then tar apache2 dir and untar it on another server will everything work just like it should? Or do I need to compile apache/php from scratch on the second server.
It would be nice to just be able push the apache/php tar file on to the new provisioned server and be ready to go.
Has anyone done this before, what is the best way to do this and are there any issues to look for.
View 3 Replies
View Related
May 18, 2015
I am unable to locate the MSI install package for 2.4.12.
View 2 Replies
View Related
Feb 11, 2013
I can't get MAMP to work. I sadly uninstalled and AppZapped MAMP and reinstalled it. Now I can't get WordPress to install. I can make a DB on PHP MyAdmin but I get "not found" when I try the WordPress install. I can't get the PHP info? line to work either. How do you troubleshoot MAMP?Â
View 4 Replies
View Related
Jan 8, 2013
installing an apache server in Linux centos and run it on any port between 2110 to 2250. I dont have much idea about the installation.
I have logged in to SU and install apache by " yum install httpd"
now how to I host on port betwwen 2110 to 2050 forwarded ports.
View 2 Replies
View Related
Jul 19, 2015
Is it possible to install Plesk 12 to Debian Jessie with the autoinstall script?
View 7 Replies
View Related
Apr 21, 2008
I have been using mod_security 1.9.x since it first release on apache 1.3 and apache 2.0.x, rules are great and they work perfect with no issues at all with any php-mysql website. Do you recommend using mod_security 2.0 or 2.5 ? (I do know that 2.5 does not work with apache 1.3).
View 2 Replies
View Related
Apr 19, 2008
using mod_security, but I believe that I have it installed correctly with some rules that should be generating entries in the security audit log. No matter what I do, I can't seem to get mod_security to generate any sort of log entries.
I am using version 2.1.7. I compiled it with no problems. In my httpd.conf file, I have the following relevant lines:
LoadFile /usr/lib/libxml2.so
LoadModule security2_module modules/mod_security2.so
Include conf/modsecurity/*.conf
I don't think there are any problems here, as I know it is running directives from the configuration file I edited. This is the file I'm working with:
modsecurity_crs_10_config.conf
Here are the relevant lines from the config file:
SecRuleEngine On
SecRequestBodyAccess On
SecResponseBodyAccess On
SecResponseBodyMimeType (null) text/html text/plain text/xml
SecResponseBodyLimit 524288
SecDefaultAction "phase:2,auditlog,log,pass,status:500"
SecAuditEngine On
SecAuditLogType Serial
SecAuditLog logs/modsec_audit.log
SecAuditLogParts "ABIFHZ"
SecRequestBodyInMemoryLimit 131072
SecDebugLog logs/modsec_debug.log
SecDebugLogLevel 3
I know that the config file is being read because when I start apache, the log files (modsec_audit.log and modsec_debug.log) are created. The problem is that the files are empty and remain empty no matter what I do. I have even tried setting permissions on the files to 777.
Here are a couple of rules I created in an attempt to generate log entries:
SecRule REQUEST_BODY "viagra"
SecRule REMOTE_ADDR "^1.1.3.4$" auditlog,phase:1,allow
I put these in the same config file mentioned above. As far as I understand, the first rule should examine the request body (which would include data in POST requests) for the word, "viagra". Since my default action is phase:2,auditlog,log,pass,status:500, such requests should end up in the audit log. However, when I use a form on my site to post the word "viagra", nothing is generated in the log file.
The second rule, as far as I understand, should generate a log entry any time the IP address 1.2.3.4 is sent in the request headers. Instead of 1.2.3.4, of course, I have put in my real IP address. However, when I visit my server and browse pages, nothing is logged. I assume that my requests should generate log entries since I match the IP address.
View 3 Replies
View Related