Re: This version of ModSecurity was not compiled with GeoIP or MaxMind support
Eero Volotinen <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <CABzZrXeduTdnLrCiCe6hh=PdU+0xfVFfR6npqwFxAGxHrvRCXA@mail.gmail.com> |
Hi, OWASP ruleset? You mean crs ruleset? what version? that repository also compiles packages from source. Eero On Mon, Dec 30, 2019 at 6:03 PM Dino Edwards via mod-security-users < [email protected]> wrote: > I’m using the OWASP ruleset. > > > > I haven’t tried that repository. Just trying to build from source. > > > > *From:* Eero Volotinen <[email protected]> > *Sent:* Monday, December 30, 2019 5:52 AM > *To:* Dino Edwards <[email protected]> > *Subject:* Re: [mod-security-users] This version of ModSecurity was not > compiled with GeoIP or MaxMind support > > > > Please at least provide rulesets that your are using. > > > > Have you tested this repository: > https://github.com/phusion/nginx-modsecurity-ubuntu#building-the-package > > > > Eero > > > > On Mon, Dec 30, 2019 at 12:30 PM Dino Edwards via mod-security-users < > [email protected]> wrote: > > Hi Eero > > > > Here’s the relevant command lines. > > > > Compile Modsecurity (I have tried with ./configure > –enable-standalone-module AND/OR ./configure –with-geoip=yes AND/OR > ./configure –with-maxmind=yes) > > > > sh build.sh && \ > > /usr/bin/git submodule init && \ > > /usr/bin/git submodule update && \ > > ./configure && \ > > make && \ > > make install > > > > Compile Nginx ( have tried with ./configure --with-http_geoip_module AND > ./configure --with-http_geoip_module=dynamic) > > > > ./configure --user=www-data --group=www-data --with-pcre-jit --with-debug > --with-http_ssl_module --with-http_realip_module > --add-module=/opt/headers-more-nginx-module-master > --add-module=/opt/ModSecurity-nginx --prefix=/usr/local/nginx > --conf-path=/usr/local/nginx/conf/nginx.conf && \ > > make && \ > > make install > > > > Thanks! > > > > > > *From:* Eero Volotinen <[email protected]> > *Sent:* Sunday, December 29, 2019 7:05 AM > *To:* [email protected] > *Cc:* Dino Edwards <[email protected]> > *Subject:* Re: [mod-security-users] This version of ModSecurity was not > compiled with GeoIP or MaxMind support > > > > please provide full commandline for compilation of software. > > > > Eero > > > > On Sun 29. Dec 2019 at 12.28, Dino Edwards via mod-security-users < > [email protected]> wrote: > > HI, > > > > I’m having a problem with libmodsecurity (Modsecurity 3.0.3-114) or Nginx > or both, I can’t tell which. Everytime I try to start Nginx on Ubuntu > 18.04, it throws the following error: > > > > nginx: [emerg] "modsecurity_rules_file" directive Rules error. File: > /usr/local/nginx/conf/modsecurity/../rules/REQUEST-910-IP-REPUTATION.conf. > Line: 73. Column: 22. This version of ModSecurity was not compiled with > GeoIP or MaxMind support. > > > > I originally installed GeoIP which didn’t work and then I installed > MaxMind which didn’t work either. > > > > When I compile libmodsecurity it looks like it finds GeoIP/MaxMind: > > > > Optional dependencies > > + GeoIP/MaxMind ....found > > * (MaxMind) v1.4.2 > > -lmaxminddb , -DWITH_MAXMIND -I/usr/include/x86_64-linux-gnu > > * (GeoIP) v1.6.12 > > -lGeoIP , -I/usr/include/ > > > > I tried compiling with –with-maxind=yes and with –with-geoip=yes flags > still same problem. > > > > I compile nginx with either the –with-http_geoip_module OR > –with-http_geoip_module=dynamic flags same error. > > > > I’m not sure where to go from there. The only way I can get Nginx to start > without throwing that error is to remove the REQUEST-910-IP-REPUTATION.conf > rule. > > > > I would appreciate some help. > > > > Thanks! > > _______________________________________________ > mod-security-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > > _______________________________________________ > mod-security-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > > _______________________________________________ > mod-security-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/