Instalando o ModSecurity (mod_sec) no ubuntu ou debian (sem frescuras!)

sudo apt-get install apache2-prefork-dev libxml++2.6-dev liblua5.1-0 liblua5.1-0-dev libcurl3-dev

---

após, vá ao diretório aonde extraiu arquivos ou, se não, use:

tar -zxvf arquivo-do-modsec.tar.gz

cd arquivo-do-modsec.tar.gz

./configure

make && make all && make install

Após (caso haja erro de libs, instale uma por uma pesquisando antes com apt-cache search libnaoexistente) faça:

sudo vim /etc/apache2/mods-available/mod-security2.load

insira:

LoadFile /usr/lib/libxml2.so
LoadFile /usr/lib/liblua5.1.so
LoadModule security2_module /usr/lib/apache2/modules/mod_security2.so

"linkando as coisas"

  sudo ln -s /etc/apache2/mods-available/mod-security2.load /etc/apache2/mods-enabled


  sudo ln -s /etc/apache2/mods-available/unique_id.load /etc/apache2/mods-enabled

Vamos editar agora:

vim /etc/apache2/conf.d/modsecurity2.conf

insira:


<ifmodule mod_security2.c>
Include /etc/modsecurity/*.conf
</ifmodule>

"Criando as coisas"

sudo mkdir /etc/modsecurity
sudo mkdir /etc/modsecurity/logs
sudo touch /etc/modsecurity/logs/modsec_audit.log
sudo touch /etc/modsecurity/logs/modsec_debug.log
sudo cp *.conf /etc/modsecurity/

"ajustes finais"
sudo vim /etc/modsecurity/modsecurity_crs_10_config.conf
Informe:
SecDebugLog /etc/modsecurity/logs/modsec_debug.log
SecAuditLog /etc/modsecurity/logs/modsec_audit.log

sudo /etc/init.d/apache2 restart

cat /var/log/apache2/error.log | grep “ModSecurity for”