Date: Tue, 22 Jan 2019 19:18:08 -0500 From: SoftwareInforJam <softwareinforjam@gmail.com> To: "freebsd-stable@freebsd.org" <freebsd-stable@freebsd.org> Subject: RE: Issue with mod_security3 Message-ID: <5c47b2c0.1c69fb81.ba7c2.95f3@mx.google.com> In-Reply-To: <5c476baa.1c69fb81.58970.0af8@mx.google.com> References: <5c4744cd.1c69fb81.7b84f.5450@mx.google.com> <20190122185438.GC85865@v1.leiden.byshenk.net> <5c476baa.1c69fb81.58970.0af8@mx.google.com>
index | next in thread | previous in thread | raw e-mail
Well I am making some progress I guess. Now modsecurity is installed and not orphaned. My challenge now is that I have been reading several documents and all of them say I need to add the following to nginx.conf load_module modules/ngx_http_modsecurity.so; My challenge now is I can’t seem to find this module anywhere. I am not sure what to do now. Isn’t this module needed for this to work? root@proxy:/usr/local/etc/nginx # find / -name "ngx_http_modsecurity*" /usr/ports/www/nginx/work/nginx-1.14.2/objs/addon/src/ngx_http_modsecurity_body_filter.o /usr/ports/www/nginx/work/nginx-1.14.2/objs/addon/src/ngx_http_modsecurity_rewrite.o /usr/ports/www/nginx/work/nginx-1.14.2/objs/addon/src/ngx_http_modsecurity_log.o /usr/ports/www/nginx/work/nginx-1.14.2/objs/addon/src/ngx_http_modsecurity_pre_access.o /usr/ports/www/nginx/work/nginx-1.14.2/objs/addon/src/ngx_http_modsecurity_header_filter.o /usr/ports/www/nginx/work/nginx-1.14.2/objs/addon/src/ngx_http_modsecurity_module.o /usr/ports/www/nginx/work/ModSecurity-nginx-71ede63/src/ngx_http_modsecurity_body_filter.c /usr/ports/www/nginx/work/ModSecurity-nginx-71ede63/src/ngx_http_modsecurity_common.h /usr/ports/www/nginx/work/ModSecurity-nginx-71ede63/src/ngx_http_modsecurity_header_filter.c /usr/ports/www/nginx/work/ModSecurity-nginx-71ede63/src/ngx_http_modsecurity_log.c /usr/ports/www/nginx/work/ModSecurity-nginx-71ede63/src/ngx_http_modsecurity_module.c /usr/ports/www/nginx/work/ModSecurity-nginx-71ede63/src/ngx_http_modsecurity_pre_access.c /usr/ports/www/nginx/work/ModSecurity-nginx-71ede63/src/ngx_http_modsecurity_rewrite.c Sent from Mail for Windows 10 From: SoftwareInforJam Sent: Tuesday, January 22, 2019 2:14 PM To: Gregory Byshenk; freebsd-stable@freebsd.org Subject: RE: Issue with mod_security3 Ah. Got that. Thank you. I had just assumed that the name would be the same as the name of the port. I am going to try again. Thanks again. Sent from Mail for Windows 10 From: Gregory Byshenk Sent: Tuesday, January 22, 2019 1:54 PM To: freebsd-stable@freebsd.org; SoftwareInforJam Subject: Re: Issue with mod_security3 On Tue, Jan 22, 2019 at 11:29:01AM -0500, SoftwareInforJam wrote: > I am have a queer problem with the port mod_security3. I > actually want to set it up to work with NGINX. The port > /usr/ports/www/mod_security3 exists but when I do a > # pkg install mod_security3 > I get > ???pkg: No packages available to install matching 'mod_security3' > have been found in the repositories??? > > When I do a pkg search ???mod_security*??? only > ap24-mod_security-2.9.2_3 Intrusion detection and prevention > engine. So only version 2.9 shows up. Not sure why this is > happening. Can anyone shed some light on this please? I'm no expert on mod_security, but my guess, based on reading https://www.linuxjournal.com/content/modsecurity-and-nginx, is that previous (to v3) versions of mod_security worked _only_ with apache. And it seems likely that the port has not yet been updated to the newest v3. Also based on the article, it seems that getting even mod_security v3 to work with nginx is slightly complicated, as building it depends on the specific version of nginx that is installed. -- gregory byshenk - gbyshenk@byshenk.net - Leiden, NLhelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5c47b2c0.1c69fb81.ba7c2.95f3>