up vote 1 down vote favorite
share [g+] share [fb]

After spending pretty much a non-stop 24 hours trying and failing to setup mod_security in Ubuntu 10.04 LTS - I've finally decided that I'm going to need some help (and so asked here). I've tried pretty much every tutorial I can find with a variety of rule sets - and I never seem to get the most recent version and if I finally get any build working (which is rare) then I'll just encounter a 400 Bad Request error on every page I try to access.

I've just removed all of my mod_security install stuff, and have decided I'll try again from some community instructions (since all documentation seems WAY behind).

Could anyone help or offer me instructions to setup mod_security with a decent rule set? Please Help,

Thanks In Advance,

Joe

link|improve this question
100% accept rate
feedback

1 Answer

up vote 1 down vote accepted

This is done by sudo apt-get install libapache-mod-security. Done.

link|improve this answer
I tried this - but it seems to install a reasonably old version and I'm not sure which rules to use with it (plus - when I get it working, I get 400 errors everywhere) – Joesavage1 Sep 9 '11 at 21:37
1) You installed LTS, so it is old by design (for security!) 2) Use the rules you need. How should we know what you need? 3) You didn't show any 400 error to debug ---> New question with more info, please. – mailq Sep 10 '11 at 7:31
I'd much prefer to just download a general ruleset with all of the common security exploits fixed up though - which ruleset should I use for this to work with the version of mod-security that is in the Ubuntu 10.04 apt-get repo. As for 400 error - I'll make sure that I post another question with that if I run into the error after downloading the ruleset you recommend. – Joesavage1 Sep 10 '11 at 11:18
I will never recommend any ruleset. I don't trust rulesets from any source I haven't personally reviewed. In the end you blame me recommending a ruleset not suitable for your needs or even worse one that stops legitimate users from visiting your site. – mailq Sep 10 '11 at 15:54
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.