mod_security won't upgrade

jfreak53

Well-Known Member
Feb 29, 2008
58
0
56
I have re-compiled with easyapache twice now and for some reason mod_security is still at 1.9.5. Any thoughts as to why and how I can fix this?

Apache version:
Server version: Apache/2.2.23 (Unix)
Server built: Oct 13 2012 19:33:23
Cpanel::Easy::Apache v3.14.13 rev9999
mod_security locate:
locate mod_security.c
/home/cpeasyapache/src/modsecurity-apache_1.9.5/apache1/mod_security.c
/home/cpeasyapache/src/modsecurity-apache_1.9.5/apache2/mod_security.c
/usr/local/apache/conf/mod_security.conf
/usr/local/apache/conf_pre_ea3/mod_security.conf
 

Infopro

Well-Known Member
May 20, 2003
17,090
519
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
locate mod_security.c as you've posted it, gives you one thing:
locate mod_security.c
/home/cpeasyapache/src/modsecurity-apache_1.9.5/apache1/mod_security.c
/home/cpeasyapache/src/modsecurity-apache_1.9.5/apache2/mod_security.c
locate mod_security2.c gives you something else:
locate mod_security2.c
/home/cpeasyapache/src/modsecurity-apache_2.5.13/apache2/mod_security2.c
/home/cpeasyapache/src/modsecurity-apache_2.6.7/apache2/mod_security2.c
Neither shows me as it does for you, this:
/usr/local/apache/conf/mod_security.conf
/usr/local/apache/conf_pre_ea3/mod_security.conf
 

jfreak53

Well-Known Member
Feb 29, 2008
58
0
56
Ok, I missed that one ha ha, everytime I found something on Google saying how to find your version it never had the 2 there just the regular ha ha.

Ok that's fine, so my most recent version I run this:
grep -i release /home/cpeasyapache/src/modsecurity-apache_2.6.8/apache2/mod_security2.c
I get nothing back.

So that's fine it's there. But for some reason when I add the following to modsec2.user.conf:
SecFilterScanOutput On
SecFilterSelective OUTPUT "text"
I get the following error when restarting apache:
Syntax error on line 1087 of /usr/local/apache/conf/modsec2.user.conf:
Invalid command 'SecFilterScanOutput', perhaps misspelled or defined by a module not included in the server configuration
So I have version 2 but it won't accept those two that are supposedly for 2. That's why I thought I didn't have version 2.

Thanks.
 

jfreak53

Well-Known Member
Feb 29, 2008
58
0
56
Yeah but that's not my problem, I have 2.x it just won't accept those commands. So 2.x is bad. Also mod_sed is not available in EasyApache.
 

jfreak53

Well-Known Member
Feb 29, 2008
58
0
56
Any ideas why it's not accepting these commands even though those are version 2 commands?