mod_security best rules

[webstyler]

Hello

after mod_security installation throught easyapache the rules configuration is empty

so, what think is good rules to download and set for hosting server ?

On other server a sysadmin have set in WHM > modesecurity config :

<IfModule mod_security2.c>
Include /usr/local/apache/conf/rul_modsec/*.conf
</IfModule>

any suggest about this or other rules project ?

Thanks

 

[ModServ]

Go to Welcome : Got Root may it helps you.

 

[webstyler]

Hello

We have installed rules

File modsec2.user.conf is ok:

Include /usr/local/apache/modsecurity.d/*asl*.conf
Include /usr/local/apache/modsecurity.d/exclude.conf

BUT there is nothing filtered on more than 10 days.. impossible

How we can make simple test ?

We have already restart apache, all works fine except mod_security

any suggest ?

Thanks

 

[ModServ]

Hello,

Check the log:

tail -fv /usr/local/apache/logs/modsec_audit.log

 

[webstyler]

uhm..

only 1 row and with
.. "GET /robots.txt HTTP/1.1" 500 67 ..

nothing other :/

 

[webstyler]

we have check the mysql table of modsec and is empty

 

[Infopro]

we have check the mysql table of modsec and is empty

Assuming there is some sort of configuration issue with your added rulesets, try this to see if we can get you going at least.

In WHM, very bottom of left menu find Mod Security and click.
Top of the page that opens, there should be a button here titled Edit Config, click it.
Next page you should see some links at top. Is the box below empty? At top of page click Default Configuration and automagically fill the box.

Now Click Save Configuration. Restart Apache for good measure.

 

[webstyler]

Assuming there is some sort of configuration issue with your added rulesets, try this to see if we can get you going at least.

In WHM, very bottom of left menu find Mod Security and click.
Top of the page that opens, there should be a button here titled Edit Config, click it.
Next page you should see some links at top. Is the box below empty? At top of page click Default Configuration and automagically fill the box.

Now Click Save Configuration. Restart Apache for good measure.

WHM Config have value of modsec2.user :

Include /usr/local/apache/modsecurity.d/*asl*.conf
Include /usr/local/apache/modsecurity.d/exclude.conf

 

[Infopro]

WHM Config have value of modsec2.user :

Include /usr/local/apache/modsecurity.d/*asl*.conf
Include /usr/local/apache/modsecurity.d/exclude.conf

Yes I know, you mention it earlier on in the thread.

Did you populate the the box as I described above?