Issue with ModSecurity and my proxy
service maintenanceinfotel <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <2BC329C82377DB4AA4663F07C2D0C7FC188C335F@PRGEMEU1B03MX1.applications.services.axa-tech.intraxa> |
Hello Community, Here's my problem : The server where I have to install ModSecurity must pass by a proxy server to join internet Therefore, I configure this on my debian : export http_proxy=http://myproxy.com:8080 export https_proxy=http://myproxy.com:8080 Then, ModSecurity has to download the https://dashboard.modsecurity.org/rules/download/plain Here's what happen on my WAF server when I reload apache2 : [cid:[email protected]] We have a TCP RETRANSMISSION But when I try to wget on this link, it works : [cid:[email protected]] It takes into account my export http_proxy from before And If I try this wget on my proxy server, of course it works : [cid:[email protected]] My proxy doesn't block the link When I reload apache and tshark the 443 on my proxy, I don't see anything : no accept, no reject etc... There's nothing between my proxy and my WAF My theory is that ModSecurity does not take into account the proxy rules I've set on my debian OS So, If you don't see any other source about my problem, my main question is : How to force ModSecurity to pass by my proxy to download and synchronize the rules ? Thank you for your help Regards, BC Ce message est confidentiel. Son contenu ne represente en aucun cas un engagement de la part de la Mutuelle Saint-Christophe assurances sous reserve de tout accord conclu par ecrit entre vous et la Mutuelle Saint-Christophe assurances. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee prealablement. Si vous n'etes pas destinataire de ce message, merci d'en avertir immediatement l'expediteur. This message is confidential. Its contents do not constitute a commitment by Mutuelle Saint-Christophe assurances except where provided for in a written agreement between you and Mutuelle Saint-Christophe assurances. Any unauthorised disclosure, use or dissemination, either whole or partial, is prohibited. If you are not the intended recipient of the message, please notify the sender immediately. _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/
image002.jpg
(image/jpeg, 29.9 KB) - not displayed
image001.jpg
(image/jpeg, 39.4 KB) - not displayed
image003.jpg
(image/jpeg, 17.4 KB) - not displayed