Issue with ModSecurity and my proxy

service maintenanceinfotel <[email protected]>
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <2BC329C82377DB4AA4663F07C2D0C7FC188C335F@PRGEMEU1B03MX1.applications.services.axa-tech.intraxa>
Hello Community,

Here's my problem :

The server where I have to install ModSecurity must pass by a proxy server to join internet

Therefore, I configure this on my debian :

export http_proxy=http://myproxy.com:8080
export https_proxy=http://myproxy.com:8080

Then, ModSecurity has to download the https://dashboard.modsecurity.org/rules/download/plain

Here's what happen on my WAF server when I reload apache2 :

[cid:[email protected]]

We have a TCP RETRANSMISSION

But when I try to wget on this link, it works :

[cid:[email protected]]

It takes into account my export http_proxy from before

And If I try this wget on my proxy server, of course it works :

[cid:[email protected]]

My proxy doesn't block the link

When I reload apache and tshark the 443 on my proxy, I don't see anything : no accept, no reject etc...

There's nothing between my proxy and my WAF

My theory is that ModSecurity does not take into account the proxy rules I've set on my debian OS

So, If you don't see any other source about my problem, my main question is :

How to force ModSecurity to pass by my proxy to download and synchronize the rules ?

Thank you for your help

Regards,

BC

Ce message est confidentiel. Son contenu ne represente en aucun cas un 
engagement de la part de la Mutuelle Saint-Christophe assurances sous reserve de 
tout accord conclu par ecrit entre vous et la Mutuelle Saint-Christophe assurances.
Toute publication, utilisation ou diffusion, meme partielle, doit etre 
autorisee prealablement. Si vous n'etes pas destinataire de ce message, 
merci d'en avertir immediatement l'expediteur. 

This message is confidential. Its contents do not constitute a 
commitment by Mutuelle Saint-Christophe assurances except where provided for in 
a written agreement between you and Mutuelle Saint-Christophe assurances. Any 
unauthorised disclosure, use or dissemination, either whole or partial, is 
prohibited. If you are not the intended recipient of the message, please 
notify the sender immediately.

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/
image002.jpg (image/jpeg, 29.9 KB) - not displayed
image001.jpg (image/jpeg, 39.4 KB) - not displayed
image003.jpg (image/jpeg, 17.4 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.