search

owasp-modsecurity / ModSecurity-apache

ModSecurity v3 Apache Connector
Apache License 2.0
87 stars 51 forks source link

General Apache Startup Error #57

Open spacerunner5 opened 5 years ago

spacerunner5 commented 5 years ago

I finally managed to get libmodsecurity and modsecurity-apache compiled and installed, both from upstream latest versions.

However, it seems none of the commands are recognized although the apache module is loaded:

NEXUSIV /etc/apache2/modules.d # /etc/init.d/apache2 start
 * apache2 has detected an error in your setup:
AH00526: Syntax error on line 7 of /etc/apache2/modules.d/79_mod_security.conf:
Invalid command 'SecDataDir', perhaps misspelled or defined by a module not included in the server configuration
 * ERROR: apache2 failed to start
NEXUSIV /etc/apache2/modules.d #

Now my questions are:

zimmerle commented 5 years ago

Hi @ste7677,

The apache connector is not yet recommended to be placed in production. One of the reasons is the fact that configuration demands to be changed to have it working. Another point is stability: possibility of the rules being executed in different timing of 2.x.

For an advanced user, however, it is possible to provide us valuable feedback on the concept.