logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Third-party Modules View previous topic :: View next topic
Reply to topic   Topic: Mod_security 2.9.7 VS17 available
Author
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3059
Location: Hilversum, NL, EU

PostPosted: Tue 08 Nov '22 13:17    Post subject: Mod_security 2.9.7 VS17 available Reply with quote

09 Januari 2023 Updated to 2.9.7, see below

Only for VS17.

But it runs with VS16. VS16and VS17 are compatible.

2.9.6 has now official the fix for mlogc included.

Build with LUA 5.3.6(VS16 5.2.4) libxml2-2.10.3(VS16 2.9.12) pcre-8.45 yajl-2.1.0 curl-7.86.0(VS16 7.80.0)

Changes in 2.9.6 see: https://github.com/SpiderLabs/ModSecurity/releases

Documentation at https://github.com/SpiderLabs/ModSecurity/wiki


Do not forget to copy yajl.dll to the apache /bin folder !


Last edited by Steffen on Mon 09 Jan '23 14:57; edited 3 times in total
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3059
Location: Hilversum, NL, EU

PostPosted: Mon 09 Jan '23 14:49    Post subject: Reply with quote

Updated to VS17 2.9.7 (VS16 compatible)

Changes in 2.9.7 see: https://github.com/SpiderLabs/ModSecurity/releases

Most noticeable change it that it is now build with PCRE2-10.40.
Back to top
Unity



Joined: 01 Mar 2023
Posts: 2
Location: France, Toulouse

PostPosted: Wed 08 Mar '23 12:52    Post subject: Reply with quote

Hi everyone,
Does anyone here use modsec with a non english OS ?
With a french OS, the default system user is named système. The problem is that the module is using the "accountname-ip" for the DBM file. The module doesn't work because the user name contains an "è" :

Message: collection_store: Failed to access DBM file "C:/Program Files/Internet/tmp/Syst\xe8me-ip": Invalid argument

Of course, i can use another account on my system, but i can't do that elsewhere.
Is there a way to use the computer name or something else for this file ?

Thank you Smile
Back to top
nono303



Joined: 20 Dec 2016
Posts: 198
Location: Lille, FR, EU

PostPosted: Thu 09 Mar '23 16:14    Post subject: Reply with quote

Hi @Unity
Same French accent problem for me…
Either you change the user executing httpd or you patch 'char* userinfo' value with what you want in https://github.com/SpiderLabs/ModSecurity/blob/v2/master/apache2/persist_dbm.c#L111
Back to top
nono303



Joined: 20 Dec 2016
Posts: 198
Location: Lille, FR, EU

PostPosted: Thu 09 Mar '23 18:11    Post subject: Reply with quote

…Dealing with the DBM file, does somebody @here know how to have a dashboard of blocked IP (with entry time, counter & expire…)?
I didn’t find an existing way to have this dashboard as a hook on mod_status (like it is with mod_fcgid or mod_md for exemple)
The not good thought solution is to read the file with dbmopen (php, perl, python,java...) and produce a dirty html table page.
Any idea or existing solution will be welcome!
Back to top
admin
Site Admin


Joined: 15 Oct 2005
Posts: 680

PostPosted: Thu 09 Mar '23 18:27    Post subject: Reply with quote

@momo303 Is your DBM question related to mod_security ?
Back to top
nono303



Joined: 20 Dec 2016
Posts: 198
Location: Lille, FR, EU

PostPosted: Thu 09 Mar '23 18:52    Post subject: Reply with quote

Yes @admin,
the xxx-ip.pag file created by mod_security2 in SecDataDir configured path
Back to top
Unity



Joined: 01 Mar 2023
Posts: 2
Location: France, Toulouse

PostPosted: Fri 10 Mar '23 18:02    Post subject: Reply with quote

Hi @nono303, no easy way out then.
Thank you.
Back to top


Reply to topic   Topic: Mod_security 2.9.7 VS17 available View previous topic :: View next topic
Post new topic   Forum Index -> Third-party Modules