Re: Upgrade to owasp-coreruleset 4.13.0
Monah Baki <[email protected]> Sat, 5 Apr 2025 16:39:30 -0400
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <CALP3=x-idBYYjz1tmRb4mP+pGR8edSA1nk0s6f9r+Laea8-McA@mail.gmail.com> |
--===============5128766181497240036== Content-Type: multipart/alternative; boundary="000000000000a63eaa06320e0152" --000000000000a63eaa06320e0152 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Christian, ls -la /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf -rw-r--r-- 1 mbaki mbaki 35639 Mar 31 11:18 /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf Also mbaki@waf:~ $ ls -la /usr/local/etc/modsecurity/owasp-modsecurity-crs/ total 320 drwxr-xr-x 9 mbaki mbaki 1024 Apr 5 10:47 . drwxr-xr-x 4 root wheel 512 Apr 5 10:57 .. -rw-r--r-- 1 mbaki mbaki 518 Mar 31 11:18 .editorconfig drwxr-xr-x 5 mbaki mbaki 512 Mar 31 11:18 .github -rw-r--r-- 1 mbaki mbaki 661 Mar 31 11:18 .gitignore -rw-r--r-- 1 mbaki mbaki 0 Mar 31 11:18 .gitmodules -rw-r--r-- 1 mbaki mbaki 315 Mar 31 11:18 .linelint.yml -rw-r--r-- 1 mbaki mbaki 432 Mar 31 11:18 .pre-commit-config.yaml -rw-r--r-- 1 mbaki mbaki 751 Mar 31 11:18 .yamllint.yml -rw-r--r-- 1 mbaki mbaki 144155 Mar 31 11:18 CHANGES.md -rw-r--r-- 1 mbaki mbaki 28523 Mar 31 11:18 CONTRIBUTING.md -rw-r--r-- 1 mbaki mbaki 6564 Mar 31 11:18 CONTRIBUTORS.md -rw-r--r-- 1 mbaki mbaki 11489 Mar 31 11:18 INSTALL.md -rw-r--r-- 1 mbaki mbaki 2783 Mar 31 11:18 KNOWN_BUGS.md -rw-r--r-- 1 mbaki mbaki 11347 Mar 31 11:18 LICENSE -rw-r--r-- 1 mbaki mbaki 2871 Mar 31 11:18 README.md -rw-r--r-- 1 mbaki mbaki 4543 Mar 31 11:18 SECURITY.md -rw-r--r-- 1 mbaki mbaki 89 Mar 31 11:18 SPONSORS.md -rw-r--r-- 1 mbaki mbaki 35639 Mar 31 11:18 crs-setup.conf drwxr-xr-x 2 mbaki mbaki 512 Mar 31 11:18 docs drwxr-xr-x 2 mbaki mbaki 512 Mar 31 11:18 plugins drwxr-xr-x 4 mbaki mbaki 2560 Mar 31 11:18 regex-assembly -rw-r--r-- 1 mbaki mbaki 222 Mar 31 11:18 renovate.json drwxr-xr-x 2 mbaki mbaki 2048 Apr 5 09:55 rules drwxr-xr-x 5 mbaki mbaki 512 Mar 31 11:18 tests drwxr-xr-x 5 mbaki mbaki 512 Mar 31 11:18 util Thanks Monah On Sat, Apr 5, 2025 at 4:26=E2=80=AFPM Christian Folini <christian.folini@n= etnea.com> wrote: > Hey Monah, > > Are you sure the file > > /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf > > exists? > > The error message clearly says it can't be read: > > CRS is deployed without configuration! > Please copy the crs-setup.conf.example template to crs-setup.conf, and > include the crs-setup.conf file in your webserver configuration before > including the CRS rules. See the INSTALL file in the CRS directory for > detailed instructions > > Best, > > Christian > > On Sat, Apr 05, 2025 at 04:02:09PM -0400, Monah Baki wrote: > > Hello all, > > > > I am running Freebsd 14.2 and I upgraded my owasp to v4.13.0. However = I > am > > seeing in my http error logs the following > > > > [Sat Apr 05 11:24:27.646852 2025] [security2:error] [pid 96152] [client > > 23.95.132.51:56151] ModSecurity: Access denied with code 500 (phase 1). > > Operator EQ matched 0 at TX. [file > > > "/usr/local/etc/modsecurity/owasp-modsecurity-crs/rules/REQUEST-901-INITI= ALIZATION.conf"] > > [line "64"] [id "901001"] [msg "CRS is deployed without configuration! > > Please copy the crs-setup.conf.example template to crs-setup.conf, and > > include the crs-setup.conf file in your webserver configuration before > > including the CRS rules. See the INSTALL file in the CRS directory for > > detailed instructions"] [severity "CRITICAL"] [ver "OWASP_CRS/4.13.0"] > [tag > > "OWASP_CRS"] > > > > > > ls /usr/local/etc/modsecurity/owasp-modsecurity-crs > > crs-setup.conf > > > > cat /usr/local/etc/apache24/modules.d/280_mod_security.conf > > IncludeOptional > > /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf > > IncludeOptional > > /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-config.conf > > IncludeOptional > > /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-before.conf > > Include /usr/local/etc/modsecurity/owasp-modsecurity-crs/rules/*.conf > > IncludeOptional > > /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-after.conf > > > > > > Thanks > > Monah > > > > _______________________________________________ > > mod-security-users mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > > http://www.modsecurity.org/projects/commercial/rules/ > > http://www.modsecurity.org/projects/commercial/support/ > > > > _______________________________________________ > mod-security-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > --000000000000a63eaa06320e0152 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>Hi Christian,</div><div><br></div><div>ls -la =C2=A0/= usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf<br>-rw-r--r-= - =C2=A01 mbaki mbaki 35639 Mar 31 11:18 /usr/local/etc/modsecurity/owasp-m= odsecurity-crs/crs-setup.conf</div><div><br></div><div><br></div><div>Also<= /div><div><br></div><div>mbaki@waf:~ $ ls -la =C2=A0/usr/local/etc/modsecur= ity/owasp-modsecurity-crs/<br>total 320<br>drwxr-xr-x =C2=A09 mbaki mbaki = =C2=A0 1024 Apr =C2=A05 10:47 .<br>drwxr-xr-x =C2=A04 root =C2=A0wheel =C2= =A0 =C2=A0512 Apr =C2=A05 10:57 ..<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2=A0= =C2=A0518 Mar 31 11:18 .editorconfig<br>drwxr-xr-x =C2=A05 mbaki mbaki =C2= =A0 =C2=A0512 Mar 31 11:18 .github<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2=A0= =C2=A0661 Mar 31 11:18 .gitignore<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2=A0= =C2=A0 =C2=A00 Mar 31 11:18 .gitmodules<br>-rw-r--r-- =C2=A01 mbaki mbaki = =C2=A0 =C2=A0315 Mar 31 11:18 .linelint.yml<br>-rw-r--r-- =C2=A01 mbaki mba= ki =C2=A0 =C2=A0432 Mar 31 11:18 .pre-commit-config.yaml<br>-rw-r--r-- =C2= =A01 mbaki mbaki =C2=A0 =C2=A0751 Mar 31 11:18 .yamllint.yml<br>-rw-r--r-- = =C2=A01 mbaki mbaki 144155 Mar 31 11:18 CHANGES.md<br>-rw-r--r-- =C2=A01 mb= aki mbaki =C2=A028523 Mar 31 11:18 CONTRIBUTING.md<br>-rw-r--r-- =C2=A01 mb= aki mbaki =C2=A0 6564 Mar 31 11:18 CONTRIBUTORS.md<br>-rw-r--r-- =C2=A01 mb= aki mbaki =C2=A011489 Mar 31 11:18 INSTALL.md<br>-rw-r--r-- =C2=A01 mbaki m= baki =C2=A0 2783 Mar 31 11:18 KNOWN_BUGS.md<br>-rw-r--r-- =C2=A01 mbaki mba= ki =C2=A011347 Mar 31 11:18 LICENSE<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2= =A0 2871 Mar 31 11:18 README.md<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2=A0 45= 43 Mar 31 11:18 SECURITY.md<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2=A0 =C2=A0= 89 Mar 31 11:18 SPONSORS.md<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2=A035639 = Mar 31 11:18 crs-setup.conf<br>drwxr-xr-x =C2=A02 mbaki mbaki =C2=A0 =C2=A0= 512 Mar 31 11:18 docs<br>drwxr-xr-x =C2=A02 mbaki mbaki =C2=A0 =C2=A0512 Ma= r 31 11:18 plugins<br>drwxr-xr-x =C2=A04 mbaki mbaki =C2=A0 2560 Mar 31 11:= 18 regex-assembly<br>-rw-r--r-- =C2=A01 mbaki mbaki =C2=A0 =C2=A0222 Mar 31= 11:18 renovate.json<br>drwxr-xr-x =C2=A02 mbaki mbaki =C2=A0 2048 Apr =C2= =A05 09:55 rules<br>drwxr-xr-x =C2=A05 mbaki mbaki =C2=A0 =C2=A0512 Mar 31 = 11:18 tests<br>drwxr-xr-x =C2=A05 mbaki mbaki =C2=A0 =C2=A0512 Mar 31 11:18= util</div><div><br></div><div><br></div><div>Thanks</div><div>Monah</div><= /div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" = class=3D"gmail_attr">On Sat, Apr 5, 2025 at 4:26=E2=80=AFPM Christian Folin= i <<a href=3D"mailto:[email protected]">christian.folini@netne= a.com</a>> wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"ma= rgin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:= 1ex">Hey Monah,<br> <br> Are you sure the file<br> <br> /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf<br> <br> exists?<br> <br> The error message clearly says it can't be read:<br> <br> CRS is deployed without configuration!<br> Please copy the crs-setup.conf.example template to crs-setup.conf, and<br> include the crs-setup.conf file in your webserver configuration before<br> including the CRS rules. See the INSTALL file in the CRS directory for<br> detailed instructions<br> <br> Best,<br> <br> Christian<br> <br> On Sat, Apr 05, 2025 at 04:02:09PM -0400, Monah Baki wrote:<br> > Hello all,<br> > <br> > I am running Freebsd 14.2 and=C2=A0 I upgraded my owasp to v4.13.0. Ho= wever I am<br> > seeing in my http error logs the following<br> > <br> > [Sat Apr 05 11:24:27.646852 2025] [security2:error] [pid 96152] [clien= t<br> > <a href=3D"http://23.95.132.51:56151" rel=3D"noreferrer" target=3D"_bl= ank">23.95.132.51:56151</a>] ModSecurity: Access denied with code 500 (phas= e 1).<br> > Operator EQ matched 0 at TX. [file<br> > "/usr/local/etc/modsecurity/owasp-modsecurity-crs/rules/REQUEST-9= 01-INITIALIZATION.conf"]<br> > [line "64"] [id "901001"] [msg "CRS is deploy= ed without configuration!<br> > Please copy the crs-setup.conf.example template to crs-setup.conf, and= <br> > include the crs-setup.conf file in your webserver configuration before= <br> > including the CRS rules. See the INSTALL file in the CRS directory for= <br> > detailed instructions"] [severity "CRITICAL"] [ver &quo= t;OWASP_CRS/4.13.0"] [tag<br> > "OWASP_CRS"]<br> > <br> > <br> > ls /usr/local/etc/modsecurity/owasp-modsecurity-crs<br> > crs-setup.conf<br> > <br> > cat /usr/local/etc/apache24/modules.d/280_mod_security.conf<br> > IncludeOptional<br> > /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf<br> > IncludeOptional<br> > /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-config.conf= <br> > IncludeOptional<br> > /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-before.conf= <br> > Include /usr/local/etc/modsecurity/owasp-modsecurity-crs/rules/*.conf<= br> > IncludeOptional<br> > /usr/local/etc/modsecurity/owasp-modsecurity-crs/plugins/*-after.conf<= br> > <br> > <br> > Thanks<br> > Monah<br> <br> <br> > _______________________________________________<br> > mod-security-users mailing list<br> > <a href=3D"mailto:[email protected]" target=3D"= _blank">[email protected]</a><br> > <a href=3D"https://lists.sourceforge.net/lists/listinfo/mod-security-u= sers" rel=3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/li= sts/listinfo/mod-security-users</a><br> > Commercial ModSecurity Rules and Support from Trustwave's SpiderLa= bs:<br> > <a href=3D"http://www.modsecurity.org/projects/commercial/rules/" rel= =3D"noreferrer" target=3D"_blank">http://www.modsecurity.org/projects/comme= rcial/rules/</a><br> > <a href=3D"http://www.modsecurity.org/projects/commercial/support/" re= l=3D"noreferrer" target=3D"_blank">http://www.modsecurity.org/projects/comm= ercial/support/</a><br> <br> <br> <br> _______________________________________________<br> mod-security-users mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blan= k">[email protected]</a><br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/mod-security-users"= rel=3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/l= istinfo/mod-security-users</a><br> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:<b= r> <a href=3D"http://www.modsecurity.org/projects/commercial/rules/" rel=3D"no= referrer" target=3D"_blank">http://www.modsecurity.org/projects/commercial/= rules/</a><br> <a href=3D"http://www.modsecurity.org/projects/commercial/support/" rel=3D"= noreferrer" target=3D"_blank">http://www.modsecurity.org/projects/commercia= l/support/</a><br> </blockquote></div> --000000000000a63eaa06320e0152-- --===============5128766181497240036== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============5128766181497240036== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/ --===============5128766181497240036==--