Congratulations

Or from the class="wiki external" href="http://www.modsecurity.org" rel="external">official websitemg border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> ss="wikicache" target="_blank" href="tiki-view_cache.php?url=http%3A%2F%2Fwww.modsecurity.org">(cache).+

We also make RPMs available for Linux systems to make this really easy to install!- <div class="titlebar">Installing mod_securityr /> />

Follow the instructions on the mod_security" href="Setting+up+mod_security" class="wiki ">Setting up mod_security page.+ <p>Just install our YUM repo:- <div class="titlebar">Where to get the rules? /> />

title="ModSecurity" href="ModSecurity" class="wiki ">ModSecurity is an Intrusion Prevention system, and uses rules, or signatures, to help protect your system from attack or spam. We publish the largest collection of rules and blacklists for mod_security on the Internet<a href="tiki-editpage.php?page=mod_security+on+the+Internet" title="Create page: mod_security+on+the+Internet" class="wiki wikinew">?. Mod_security works on any platform, including Solaris, Linux, BSD, MacOS and Windows based servers. Right now, <a title="mod_security, downloads, rules, how-tos and everything else about mod_security" href="mod_security" class="wiki ">mod_security only works with Apache 2.x or Apache 1.x, if you are running IIS or some other web server you're out of luck for now.+ <p>wget -q -O - xternal" href="http://www.atomicorp.com/installers/atomic">http://www.atomicorp.com/installers/atomicg border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> |sh-

As we said before, to really use ything else about mod_security" href="mod_security" class="wiki ">mod_security you need to feed it some signatures, just like an anti-virus product. And, you can download them all from our mod_security rules webpage.+

Or over SSL:- <div class="titlebar">How to configure, setup and install mod_security and our rules</div><br /><br />

<strong>For Apache 2.xtrong>+ <p>wget -q -O - class="wiki external" href="https://www.atomicorp.com/installers/atomic">https://www.atomicorp.com/installers/atomic<img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> |sh-

e class="codelisting" dir="ltr" style="overflow:auto;">LoadModule security_module /usr/lib/httpd/modules/mod_security.so+

Then run this command as root:-

Then, add the rules to your apache config file. To do this, we recommend you create an external configuration file to apache, via the "include" directive that will contain your mod_security rules, and seperately your mod_security configuration directives. To do that, look inside httpd.conf, or your equivalent, to see if you have this line:+

yum install modsecurity-

re class="codelisting" dir="ltr" style="overflow:auto;">Include conf.d/*.conf+

And you're set to configure modsecurity and install our rules.- <p>This line, if you have it, tells apache to load all the .conf files in the conf.d directory. This lets you add many external configuration files to apache in this directory. If you do have it, create the file mod_security.conf in that directory, in this case, its a subdirectory off the directory the httpd.conf file in in. On Redhat 9, that directory is:
>+ <div class="titlebar">Installing mod_securitydiv>-

re class="codelisting" dir="ltr" style="overflow:auto;">/etc/httpd/pre>+

Follow the instructions on the the class="wiki external" href="http://www.atomicorp.com/wiki/index.php/Atomic_ModSecurity_Rules" rel="external">Atomicorp/Gotroot Wiki Rules pager="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> ikicache" target="_blank" href="tiki-view_cache.php?url=http%3A%2F%2Fwww.atomicorp.com%2Fwiki%2Findex.php%2FAtomic_ModSecurity_Rules">(cache)>.- <p>So the include directory would be:<br />>+ <div class="titlebar">Where to get the rules?div>-

<pre class="codelisting" dir="ltr" style="overflow:auto;">/etc/httpd/conf.d

ass="codelisting" dir="ltr" style="overflow:auto;">Include /etc/modsecurity/mod_security_rules.conf />Include /etc/modsecurity/blacklist.conf

ass="codelisting" dir="ltr" style="overflow:auto;">/etc/httpd/conf.d/modsecurity.confre> />
r />
Which will contain all your local mod_security config settings, and in that file, make sure you add this line:<br />


ss="codelisting" dir="ltr" style="overflow:auto;">Include /etc/modsecurity/mod_security_rules.conf
 />


And if you want to add more rules, such as the comment spam blacklist, add in another line like this:+ 
<a title="ModSecurity" href="ModSecurity" class="wiki ">ModSecuritya> is an Intrusion Prevention system, and uses rules, or signatures, to help protect your system from attack or spam.  We publish the largest collection of rules and blacklists for mod_security on the Internet href="tiki-editpage.php?page=mod_security+on+the+Internet" title="Create page: mod_security+on+the+Internet" class="wiki wikinew">?a>.  Mod_security works on any platform, including Solaris, Linux, BSD, MacOS and Windows based servers.  Right now, tle="mod_security, downloads, rules, how-tos and everything else about mod_security" href="mod_security" class="wiki ">mod_security only works with Apache 2.x or Apache 1.x, if you are running IIS or some other web server you're out of luck for now.- 
re class="codelisting" dir="ltr" style="overflow:auto;">Include /etc/modsecurity/blacklist.confpre>+ 
As we said before, to really use ="mod_security, downloads, rules, how-tos and everything else about mod_security" href="mod_security" class="wiki ">mod_security you need to feed it some signatures, just like an anti-virus product.  And, you can download them all from our "The Internets original, oldest and largest source of web application firewall signatures, over 15,000 signatures and counting!" href="mod_security+rules" class="wiki ">mod_security rules webpage or you can use our automated rule downloader!  It will also keep your rules to date automatically:- 
Then use those files, such as /etc/modsecurity/mod_security_rules.conf, to store all your rules or signatures (and feel free to overwrite it with our  class="wiki"  href="http://www.gotroot.com/downloads/ftp/mod_security/rules.conf" rel="">signature file</a> gotroot.com%2Fdownloads%2Fftp%2Fmod_security%2Frules.conf">(cache)). Also, feel free to add in your own files for your own local rulesets.+ 
 class="wiki external"  href="http://www.atomicorp.com/installers/rule-updater.sh" rel="external">Automatic Rule Updater<img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> atomicorp.com%2Finstallers%2Frule-updater.sh">(cache)- 
Last, but not least, ="The Internets original, oldest and largest source of web application firewall signatures, over 15,000 signatures and counting!" href="mod_security+rules" class="wiki ">trong>Download the rulesrong></a> and install them into your /etc/modsecurity/ directory. Then restart apache, if you don't get any errors, hurray! the rules loaded. If you do get any errors, check your config files to make sure you have the syntax right, and try commenting out the Include lines to see if the problem is with your configuration, or with the rules. If its with the rules, please try commenting that signature out in your signature file(s) and then report the specific error (cut and paste works best) in forum.php?forumId=35" rel="">this forum and we will fix it ASAP. We usually turn error reports around within a day, sometimes sooner if its during the week and we're all in town.+ 
<a class="wiki external"  href="http://www.atomicorp.com/installers/asl-updater.conf" rel="external">Automatic Rule Updater Config filea><img border="0" class="externallink" src="img/icons/external_link.gif" alt=" (external link)" /> cache" target="_blank" href="tiki-view_cache.php?url=http%3A%2F%2Fwww.atomicorp.com%2Finstallers%2Fasl-updater.conf">(cache)a>]]>
            Tue, 07 Apr 2009 18:00:37 +0100