Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a clear documentation to describe the solution?

It's very common and also necessary.

share|improve this question
add comment

1 Answer 1

up vote 0 down vote accepted

Maybe this blogpost is useful for you. It explains how to setup modsecurity2 with apache on debian BUT it is written in german. It should be understandable if you only read the "commands" which are in english anyway.

  1. Update your sources.list
  2. apt-get install libapache2-mod-security2
  3. vi /etc/apache2/apache2.conf
    Add the following:

    <IfModule mod_security2.c>
    # Basic configuration options
     SecRuleEngine On
     SecRequestBodyAccess On
     SecResponseBodyAccess Off
    
    # Handling of file uploads
    # TODO Choose a folder private to Apache.
    # SecUploadDir /opt/apache-frontend/tmp/
    SecUploadKeepFiles Off
    
  4. Restart apache /etc/init.d/apache2 restart

share|improve this answer
    
unwichtich, could you please add details on running clamav on uploaded files? –  Deer Hunter May 21 '13 at 16:10
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.