Re: Upgrade to owasp-coreruleset 4.13.0

Hi Monan,


On Sat, Apr 05, 2025 at 04:02:09PM -0400, Monah Baki wrote:
> 
> ls /usr/local/etc/modsecurity/owasp-modsecurity-crs
> crs-setup.conf

as Christian wrote this is very strange.

Anyway,

are you sure your engine use this file?
 
> cat /usr/local/etc/apache24/modules.d/280_mod_security.conf

could you replace this line:

> IncludeOptional /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf

by this one:

Include /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf

so just remote the "Optional" string.

And could you show us the output of this command?

grep -A12 900990 /usr/local/etc/modsecurity/owasp-modsecurity-crs/crs-setup.conf


Thanks,


a.



_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/