Upgrade to owasp-coreruleset 4.13.0
Monah Baki <[email protected]> Sat, 5 Apr 2025 16:02:09 -0400
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <CALP3=x9+Lpsw5oacV5mb9C-d1pvST8CrR5NxA8qY=yWX9F_g7A@mail.gmail.com> |
--===============2771000211339374218== Content-Type: multipart/alternative; boundary="00000000000006bee206320d7bf4" --00000000000006bee206320d7bf4 Content-Type: text/plain; charset="UTF-8" Hello all, I am running Freebsd 14.2 and I upgraded my owasp to v4.13.0. However I am seeing in my http error logs the following [Sat Apr 05 11:24:27.646852 2025] [security2:error] [pid 96152] [client 23.95.132.51:56151] ModSecurity: Access denied with code 500 (phase 1). Operator EQ matched 0 at TX. [file "/usr/local/etc/modsecurity/owasp-modsecurity-crs/rules/REQUEST-901-INITIALIZATION.conf"] [line "64"] [id "901001"] [msg "CRS is deployed without configuration! Please copy the crs-setup.conf.example template to crs-setup.conf, and include the crs-setup.conf file in your webserver configuration before including the CRS rules. See the INSTALL file in the CRS directory for detailed instructions"] [severity "CRITICAL"] [ver "OWASP_CRS/4.13.0"] [tag "OWASP_CRS"] ls /usr/local/etc/modsecurity/owasp-modsecurity-crs crs-setup.conf cat /usr/local/etc/apache24/modules.d/280_mod_security.conf IncludeOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf IncludeOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-config.conf IncludeOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-before.conf Include /usr/local/etc/modsecurity/owasp-modsecurity-crs/rules/*.conf IncludeOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-after.conf Thanks Monah --00000000000006bee206320d7bf4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>Hello all,</div><div><br></div><div>I am running Free= bsd 14.2 and=C2=A0 I upgraded my owasp to v4.13.0. However I am seeing in m= y http error logs the following</div><div><br></div><div>[Sat Apr 05 11:24:= 27.646852 2025] [security2:error] [pid 96152] [client <a href=3D"http://23.= 95.132.51:56151">23.95.132.51:56151</a>] ModSecurity: Access denied with co= de 500 (phase 1). Operator EQ matched 0 at TX. [file "/usr/local/etc/m= odsecurity/owasp-modsecurity-crs/rules/REQUEST-901-INITIALIZATION.conf"= ;] [line "64"] [id "901001"] [msg "CRS is deployed= without configuration! Please copy the crs-setup.conf.example template to = crs-setup.conf, and include the crs-setup.conf file in your webserver confi= guration before including the CRS rules. See the INSTALL file in the CRS di= rectory for detailed instructions"] [severity "CRITICAL"] [v= er "OWASP_CRS/4.13.0"] [tag "OWASP_CRS"] <br></div><div= ><br></div><div><br></div><div>ls /usr/local/etc/modsecurity/owasp-modsecur= ity-crs<br>crs-setup.conf</div><div><br></div><div>cat /usr/local/etc/apach= e24/modules.d/280_mod_security.conf</div><div>IncludeOptional /usr/local/et= c/modsecurity/owasp-modsecurity-crs/crs-setup.conf<br>IncludeOptional /usr/= local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-config.conf<br>Includ= eOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-before= .conf<br>Include /usr/local/etc/modsecurity/owasp-modsecurity-crs/rules/*.c= onf<br>IncludeOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/plu= gins/*-after.conf</div><div><br></div><div><br></div><div>Thanks</div><div>= Monah</div></div> --00000000000006bee206320d7bf4-- --===============2771000211339374218== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============2771000211339374218== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/ --===============2771000211339374218==--