Re: alternatives for waf-fle
Hans Mayer via mod-security-users <[email protected]> Fri, 9 Feb 2024 12:08:33 +0100
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--===============2711974301483527062==
Content-Type: multipart/alternative;
boundary="------------enPyk4OqBaCuL5cnf3SylcHa"
Content-Language: de-DE, en-GB
This is a multi-part message in MIME format.
--------------enPyk4OqBaCuL5cnf3SylcHa
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Hi Ervin,
I am not sure if I want to go with an old PHP version. I am not the one
who uses always the latest version but during my 40 years working
experience with UNIX I realized that there is a point where old versions
are hard to maintain and brings more incompatibility than advantages.
In the meantime it seems that's not only the PHP version is the issue.
It is also the Apache mode which is now FPM/FastCGI and was obviously
not the case before. I will investigate a little bit how to switch this
Apache mode but in general it's time for an other solution than "waf-fle".
"mod-sec" is a great tool and I don't want to loose it, just because
there is no easy tool to view the logs.
Kind regards
Hans
--
On 08.02.24 21:27, Ervin Hegedüs wrote:
> Hi Hans,
>
> On Thu, Feb 08, 2024 at 05:57:11PM +0100, Hans Mayer wrote:
>>> (actually I don't understand what does it mean "by klaubert")
>> Sorry, if I didn't explain understandable what's the issue. The maintainer
>> for "waf-fle" is klaubert. Here the link at GitHub:
>> https://github.com/klaubert/waf-fle
> oh, sorry for my dump question :), I should have looked up.
>
>> Apache with mod-sec is working fine. But waf-fle is not working any more.
>> "waf-fle" was the tool to display the alerts coming from mod-sec.
>> "waf-fle" is written in PHP and obviously using calls, which are not supported any more, like "apache_setenv()"
>>
>> So I am looking for an alternative to view the log entries generated by "mod-sec"
>>
>> I hope this explains a little bit more my issue.
> yes, definitely. Especially you mentioned that the waf-fle does
> not work with the new 8.2 PHP version.
>
> First your might try to add an older version of PHP:
>
> https://packages.sury.org/php/
>
> Sury (he is the official maintainer of PHP packages in Debian)
> supports older versions of PHP - perhaps those do not have any
> security updates, but at least work.
>
>
>
> Regards,
>
>
> a.
--------------enPyk4OqBaCuL5cnf3SylcHa
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<p><br>
</p>
<p>Hi Ervin, <br>
</p>
<p>I am not sure if I want to go with an old PHP version. I am not
the one who uses always the latest version but during my 40 years
working experience with UNIX I realized that there is a point
where old versions are hard to maintain and brings more
incompatibility than advantages. <br>
</p>
<p>In the meantime it seems that's not only the PHP version is the
issue. It is also the Apache mode which is now <span
style="color: rgb(12, 13, 14); font-family: -apple-system, "system-ui", "Segoe UI Adjusted", "Segoe UI", "Liberation Sans", sans-serif; font-size: 13px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;">FPM/FastCGI</span>
and was obviously not the case before. I will investigate a little
bit how to switch this Apache mode but in general it's time for an
other solution than "waf-fle". <br>
</p>
<p>"mod-sec" is a great tool and I don't want to loose it, just
because there is no easy tool to view the logs. <br>
</p>
<p><br>
</p>
<p>Kind regards <br>
</p>
<p>Hans <br>
</p>
<p><br>
</p>
<p>-- <br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 08.02.24 21:27, Ervin Hegedüs wrote:<br>
</div>
<blockquote type="cite"
cite="mid:[email protected]">
<pre class="moz-quote-pre" wrap="">Hi Hans,
On Thu, Feb 08, 2024 at 05:57:11PM +0100, Hans Mayer wrote:
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">(actually I don't understand what does it mean "by klaubert")
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Sorry, if I didn't explain understandable what's the issue. The maintainer
for "waf-fle" is klaubert. Here the link at GitHub:
<a class="moz-txt-link-freetext" href="https://github.com/klaubert/waf-fle">https://github.com/klaubert/waf-fle</a>
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
oh, sorry for my dump question :), I should have looked up.
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Apache with mod-sec is working fine. But waf-fle is not working any more.
"waf-fle" was the tool to display the alerts coming from mod-sec.
"waf-fle" is written in PHP and obviously using calls, which are not supported any more, like "apache_setenv()"
So I am looking for an alternative to view the log entries generated by "mod-sec"
I hope this explains a little bit more my issue.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
yes, definitely. Especially you mentioned that the waf-fle does
not work with the new 8.2 PHP version.
First your might try to add an older version of PHP:
<a class="moz-txt-link-freetext" href="https://packages.sury.org/php/">https://packages.sury.org/php/</a>
Sury (he is the official maintainer of PHP packages in Debian)
supports older versions of PHP - perhaps those do not have any
security updates, but at least work.
Regards,
a.
</pre>
</blockquote>
</body>
</html>
--------------enPyk4OqBaCuL5cnf3SylcHa--
--===============2711974301483527062==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--===============2711974301483527062==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/
--===============2711974301483527062==--