Re: Help (Mistake with Mod_security blocking list)

Hello

 In following tutorial,  you wrote "access to a specific URI on the server is blocked. We want to respond to such a request with HTTP status 403."
when you try out with blockade,

 $> curl http://localhost/phpmyadmin

It didn't block (since no such HTTP status 403), rather the access is allowed to the URI.

https://www.netnea.com/cms/apache-tutorial-6_embedding-modsecurity<https://www.netnea.com/cms/apache-tutorial-6_embedding-modsecurity/>

Embedding ModSecurity – Welcome to netnea<https://www.netnea.com/cms/apache-tutorial-6_embedding-modsecurity/>
What are we doing? We are compiling the ModSecurity module, embedding it in the Apache web server, creating a base configuration and dealing with false positives for the first time.. Why are we doing this?
www.netnea.com

Please correct me if I am wrong.
Regards



________________________________
From: Ted Talaiti <[email protected]>
Sent: Thursday, April 25, 2019 3:20 PM
To: [email protected]
Subject: Re: [mod-security-users] Help (migrate Mod_security with CRS)

Hi thanks for your reply.
But there is no information of exporting /importing modsecurity /CRS from server /linux to another.
Please shed some light.
Thanks a lot.
________________________________
From: Christian Folini <[email protected]>
Sent: Thursday, April 25, 2019 12:56:25 PM
To: [email protected]
Subject: Re: [mod-security-users] Help (migrate Mod_security with CRS)

Hi Ted,

I suggest you take a peek at the detailed tutorials at
https://netnea.com/apache-tutorials

They are meant to cover your use case.

Best,

Christian


On Thu, Apr 25, 2019 at 12:38:18PM +0000, Ted Talaiti wrote:
> Hello
>
>   I need to implement Mod_security with CRS in apache server of linux in aws from scratch, and then test it.
> Is there any detailed descriptions of steps of Mod_security installation and configurations (in apache) available, please ?
>
> Can we move a well configured Mod_security with CRS from a server in aws to another server in different cloud?
>
> Thanks a lot for your attention.
> Sincerely
>


> _______________________________________________
> mod-security-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/



_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/