Re: mod-security-users Digest, Vol 158, Issue 6

Hello
you can set SecStatusEngine to On./ in .htaccess or httpd.conf (global
config)
please send the result of this command
#httpd -M
thanks

On Fri, Jul 12, 2019 at 4:45 PM <
[email protected]> wrote:

> Send mod-security-users mailing list submissions to
>         [email protected]
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.sourceforge.net/lists/listinfo/mod-security-users
> or, via email, send a message with subject or body 'help' to
>         [email protected]
>
> You can reach the person managing the list at
>         [email protected]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of mod-security-users digest..."
>
>
> Today's Topics:
>
>    1. ModSecurity disabled ? (Edouard Guign?)
>    2. Re: ModSecurity disabled ? (Reindl Harald)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 11 Jul 2019 14:57:26 -0300
> From: Edouard Guign? <[email protected]>
> To: [email protected]
> Subject: [mod-security-users] ModSecurity disabled ?
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
>
> Hello,
>
> I set mod_sec with apache.
>
> When I start apache service, I noticed :
>
> /ModSecurity: Status engine is currently disabled, enable it by set
> SecStatusEngine to On./
>
> What does it mean ?
> Do I have to add? SecStatusEngine directive in httpd.conf ?
> I am using virtual host conf file, as reverse proxy.
>
> Best Regards,
>
> EdG
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> Message: 2
> Date: Thu, 11 Jul 2019 20:23:04 +0200
> From: Reindl Harald <[email protected]>
> To: [email protected]
> Subject: Re: [mod-security-users] ModSecurity disabled ?
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset=utf-8
>
>
>
> Am 11.07.19 um 19:57 schrieb Edouard Guign?:
> > I set mod_sec with apache.
> >
> > When I start apache service, I noticed :
> >
> > /ModSecurity: Status engine is currently disabled, enable it by set
> > SecStatusEngine to On./
> >
> > What does it mean ?
> > Do I have to add? SecStatusEngine directive in httpd.conf ?
> > I am using virtual host conf file, as reverse proxy.
>
> you don't need it and it has *nothing* to do with "modsecurity disabled"
>
>
> https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/introducing-modsecurity-status-reporting/
>
>
>
> ------------------------------
>
>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> mod-security-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>
>
> ------------------------------
>
> End of mod-security-users Digest, Vol 158, Issue 6
> **************************************************
>

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/