Re: This version of ModSecurity was not compiled with GeoIP or MaxMind support

Yes, that would be the OWASP ModSecurity Core Rule Set. Using the latest version I pulled from Github, so it would be 3.2.0.  I was not aware that it had to be compiled. I simply ran the following:

git clone https://github.com/SpiderLabs/owasp-modsecurity-crs.git && \
cd owasp-modsecurity-crs/ && \
/bin/cp -R rules/ /usr/local/nginx/conf/ && \
/bin/cp /opt/owasp-modsecurity-crs/crs-setup.conf.example /usr/local/nginx/conf/crs-setup.conf



From: Eero Volotinen <[email protected]>
Sent: Monday, December 30, 2019 11:24 AM
To: [email protected]
Cc: Dino Edwards <[email protected]>
Subject: Re: [mod-security-users] This version of ModSecurity was not compiled with GeoIP or MaxMind support

Hi,

OWASP ruleset? You mean crs ruleset? what version? that repository also compiles packages from source.

Eero

On Mon, Dec 30, 2019 at 6:03 PM Dino Edwards via mod-security-users <[email protected]<mailto:[email protected]>> wrote:
I’m using the OWASP ruleset.

I haven’t tried that repository. Just trying to build from source.

From: Eero Volotinen <[email protected]<mailto:[email protected]>>
Sent: Monday, December 30, 2019 5:52 AM
To: Dino Edwards <[email protected]<mailto:[email protected]>>
Subject: Re: [mod-security-users] This version of ModSecurity was not compiled with GeoIP or MaxMind support

Please at least provide rulesets that your are using.

Have you tested this repository:  https://github.com/phusion/nginx-modsecurity-ubuntu#building-the-package

Eero

On Mon, Dec 30, 2019 at 12:30 PM Dino Edwards via mod-security-users <[email protected]<mailto:[email protected]>> wrote:
Hi Eero

Here’s the relevant command lines.

Compile Modsecurity (I have tried with ./configure –enable-standalone-module  AND/OR ./configure –with-geoip=yes AND/OR ./configure –with-maxmind=yes)

sh build.sh && \
/usr/bin/git submodule init && \
/usr/bin/git submodule update && \
./configure && \
make && \
make install

Compile Nginx ( have tried with ./configure --with-http_geoip_module  AND  ./configure --with-http_geoip_module=dynamic)

./configure --user=www-data --group=www-data --with-pcre-jit --with-debug --with-http_ssl_module --with-http_realip_module --add-module=/opt/headers-more-nginx-module-master --add-module=/opt/ModSecurity-nginx --prefix=/usr/local/nginx --conf-path=/usr/local/nginx/conf/nginx.conf && \
make && \
make install

Thanks!


From: Eero Volotinen <[email protected]<mailto:[email protected]>>
Sent: Sunday, December 29, 2019 7:05 AM
To: [email protected]<mailto:[email protected]>
Cc: Dino Edwards <[email protected]<mailto:[email protected]>>
Subject: Re: [mod-security-users] This version of ModSecurity was not compiled with GeoIP or MaxMind support

please provide full commandline for compilation of software.

Eero

On Sun 29. Dec 2019 at 12.28, Dino Edwards via mod-security-users <[email protected]<mailto:[email protected]>> wrote:
HI,

I’m having a problem with libmodsecurity (Modsecurity 3.0.3-114) or Nginx or both, I can’t tell which. Everytime I try to start Nginx on Ubuntu 18.04, it throws the following error:

nginx: [emerg] "modsecurity_rules_file" directive Rules error. File: /usr/local/nginx/conf/modsecurity/../rules/REQUEST-910-IP-REPUTATION.conf. Line: 73. Column: 22. This version of ModSecurity was not compiled with GeoIP or MaxMind support.

I originally installed GeoIP which didn’t work and then I installed MaxMind which didn’t work either.

When I compile libmodsecurity it looks like it finds GeoIP/MaxMind:

Optional dependencies
   + GeoIP/MaxMind                                 ....found
      * (MaxMind) v1.4.2
         -lmaxminddb  , -DWITH_MAXMIND -I/usr/include/x86_64-linux-gnu
      * (GeoIP) v1.6.12
         -lGeoIP  , -I/usr/include/

I tried compiling with –with-maxind=yes and with –with-geoip=yes flags still same problem.

I compile nginx with either the –with-http_geoip_module OR –with-http_geoip_module=dynamic flags same error.

I’m not sure where to go from there. The only way I can get Nginx to start without throwing that error is to remove the REQUEST-910-IP-REPUTATION.conf rule.

I would appreciate some help.

Thanks!
_______________________________________________
mod-security-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/
_______________________________________________
mod-security-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/
_______________________________________________
mod-security-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/