DevOps NY

Tag: modsecurity

  • Installing mod_security

    sudo aptitude install libapache2-modsecurity

    sudo mkdir /etc/apache2/modsecurity

    sudo vi /etc/apache2/conf.d/modsecurity.conf

    ## /etc/init.d/apache2/conf.d/modsecurity.conf
    Include modsecurity/*.conf

    cd /etc/apache2/modsecurity/

    sudo cp -R /usr/share/modsecurity-crs/base_rules/* .

    sudo vi /etc/apache2/modsecurity/modsecurity_crs_20_protocol_violations.conf

    Replace this line:

    SecRule REQBODY_ERROR “!@eq 0” \


    with this one:

    SecRule REQBODY_PROCESSOR_ERROR “!@eq 0” \ ​

    sudo service apache2 restart

    cat /var/log/apache2/error.log | grep modsecurity