I recently recompiled apache/php and kept the base of the previous configuration and added modsecurity. Compilation completed successfully and the new apache and php are running fine.
Unfortunately, modsecurity is nowhere to be found. There are a bunch of new config files in the httpd/conf directory but the Apache server signature doesn't mention that modsecurity is loaded. I also tried a few common attacks (like proxy redirection) but the modsecurity logs remain empty.
Server Version: Apache/2.2.8 (Unix) mod_ssl/2.2.8 OpenSSL/0.9.7a mod_bwlimited/1.4
Any help would be appreciated.



LinkBack URL
About LinkBacks
Reply With Quote





