The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

mod_security and google safe browsing

Discussion in 'EasyApache' started by dzamanakos, Nov 4, 2015.

  1. dzamanakos

    dzamanakos Active Member

    Joined:
    Feb 15, 2014
    Messages:
    26
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi, i've read about SecGsbLookupDb and mod_security and see that :
    Note : Deprecated in 2.7.0 after Google dev team decided to not allow the database download anymore. After registering and obtaining a Safe Browsing API key, you can automatically download the GSB using a tool like wget (where KEY is your own API key):
    wget sb.google.com/safebrowsing/update?client=api&apikey=KEY&version=goog-malware-hash:1:-1

    i've read some articles in the internet (not mod_security specific), made an api key but cant find a way to download the database to my server. The url's mentioned in the posts return 404 error when wget url.

    Is there anyone that found a way to download it?

    Thank you,
     
    #1 dzamanakos, Nov 4, 2015
    Last edited by a moderator: Nov 11, 2015
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    35,574
    Likes Received:
    1,127
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello :)

    Did you register with Google and obtain a safe browsing API key?

    Thank you.
     
    #2 cPanelMichael, Nov 11, 2015
  3. dzamanakos

    dzamanakos Active Member

    Joined:
    Feb 15, 2014
    Messages:
    26
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Yes i got an api key, but cant find a url that i can download a dat or something file with a wget... All the url's that i found in forums return an error and no data file is downloaded.
    Thank you,
     
    #3 dzamanakos, Nov 12, 2015
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,417
    Likes Received:
    285
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    #4 Infopro, Nov 12, 2015
  5. dzamanakos

    dzamanakos Active Member

    Joined:
    Feb 15, 2014
    Messages:
    26
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I've read about it, but i can understand that you can no longer download the database with a cron and do local queries..
    Just query for a single or multiple url's to google and get the results.
    In the cpanel's mod security configuration it needs a local path to my server.
    I didnt find a recent working guide in google or forums.. Posted here if anyone was able to make it working recently..
    Thank you again..
     
    #5 dzamanakos, Nov 12, 2015
  6. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,417
    Likes Received:
    285
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    You're trying to add this URL as a Vendor?

    I don't think that's possible.
     
    #6 Infopro, Nov 12, 2015
  7. dzamanakos

    dzamanakos Active Member

    Joined:
    Feb 15, 2014
    Messages:
    26
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I see that in mod_security configuration there is an entry :
    Google Safe Browsing Database SecGsbLookupDb
    Specify a path for the Google Safe Browsing Database.

    That needs a local path of a database file.
    I've read that google no longer supports downloading their database and in mod_security they refer to a url that isnt working anymore. There are some old guides in the internet that trying to overide this, but the solutions dont work. I just wondered if someone has a way of make it work, either by local database file, or remote connections..
    Thank you again..
     
    #7 dzamanakos, Nov 12, 2015
  8. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,417
    Likes Received:
    285
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    My mistake, thanks for the additional details.
     
    #8 Infopro, Nov 12, 2015
  9. JonTheWong

    JonTheWong Active Member

    Joined:
    Oct 8, 2013
    Messages:
    38
    Likes Received:
    2
    Trophy Points:
    8
    Location:
    Montreal, Quebec
    cPanel Access Level:
    Root Administrator
    Twitter:
    Any update on this?
     
    #9 JonTheWong, Jan 9, 2016
  10. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    35,574
    Likes Received:
    1,127
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello :)

    You will need to consult with Google if you have obtained an API key and there's no valid download location. The feature was deprecated in Mod_Security after Google began forcing the use of an API key to download the file.

    Thank you.
     
    #10 cPanelMichael, Jan 11, 2016
(You must log in or sign up to post here.)
Loading...
Similar Threads - mod_security google safe
  1. Jasleen

    Mod_Security with CRS

    Jasleen, May 30, 2017, in forum: Security
    Replies:
    9
    Views:
    98
    fuzzylogic
    May 31, 2017
  2. Nirjonadda

    Mod_Security Vendors

    Nirjonadda, Apr 16, 2017, in forum: Security
    Replies:
    3
    Views:
    174
    Nirjonadda
    Apr 17, 2017
  3. stevenvsi

    Unable to disable mod_security per domain in user interface

    stevenvsi, Apr 11, 2017, in forum: Security
    Replies:
    9
    Views:
    247
    cPanelMichael
    Apr 11, 2017
  4. caisc

    Mod_Security rule to mitigate constant GET and POST request attack

    caisc, Feb 25, 2017, in forum: Security
    Replies:
    6
    Views:
    260
    quizknows
    Mar 7, 2017
  5. caisc

    Mod_security rules to prevent spam registrations and comments on wordpress sites

    caisc, Feb 7, 2017, in forum: Security
    Replies:
    12
    Views:
    422
    caisc
    Feb 10, 2017

Share This Page