[ModSecurity] httpd will not start

[Kloxo-DR]

Hello Mustafa,

I had installed ModSecurity earlier and httpd failed to restart because the Ruleset were not defined.

It took a while to find where the problem was.

Is it possible to have a default installation of ModSecurity in such a manner that httpd will certainly start?

The default installation should have a minimum ruleset such that it could be used properly.

[MRatWork]

mod_security is useless when using nginx-proxy/hiawatha-proxy and make trouble if don't understand how proxy work.

[Kloxo-DR]

Hi,

Thanks. The question relates to apache. People who uses apache may want to use modsecurity.

Here are the Ruleset:

https://github.com/SpiderLabs/owasp-modsecurity-crs

[MRatWork]

nginx-proxy/hiawatha-proxy mean nginx/hiawatha in from and apache in backend. Mod_security only relevance for pure apache.

[Kloxo-DR]

Hi,

I am not using nginx.

I am not using hiawatha.

Can one use Modsecurity with Kloxo-MR?

Can there be a default installation woking properly?

[MRatWork]

In my opinion, using hiawatha-proxy doesn't need mod_security because useless.

[Kloxo-DR]

Hi,

I am not using hiawatha-proxy.

Can one use Modsecurity with Kloxo-MR?

[MRatWork]

Better using hiawatha-proxy/nginx-proxy instead pure apache (httpd).

[Kloxo-DR]

Hello Mustafa,

No, I do not want to use hiawatha-proxy/nginx-proxy.

Your answers  are useless and you are waisting your time with those answer.

[MRatWork]

Kloxo-MR not prepare to optimize mod_security. User find out their needed by themself.

Not every user needed will be serve by KLoxo-MR. That it.

[Kloxo-DR]

Hi,

Well, thats a very accurate answer! Thanks.