Mod_security on Debian Etch

[tsmaudio]

Hi Guys
I have moved up to Debian Etch from sarge, and the
"apt-get install libapache2-mod-security" command doesn't install it now.
My apt source.list contains the same links as in the perfect set up for Debain Etch by falko (thanks falko)
http://www.howtoforge.com/perfect_setup_debian_etch_p3

Is there any issues with installing mod_security on Debian Etch, if not which is the best way to go about it?

Cheers.

[falko]

Maybe the name of the package has changed a bit. Do you see the package when you run

apt-cache search apache

?

[tsmaudio]

Hi Falko

hope you are keeping well

I have run

apt-cache search apache, and it doen't seem to be mentioned at all.

Any other sugestions on how to proceed.

thanks again

Tony

[Tenaka]

same trouble here :-( tried apt-cache search apache | grep secur and that did not yield any results that resembled what we were looking for...

[falko]

I can't find it either, which leads me to the assumption that it is included in the normal Apache package. What's the output of

ls -l /etc/apache2/mods-available

?

[tsmaudio]

This is the output of ls -l /etc/apache2/mods-available

total 324
-rw-r--r-- 1 root root 66 Mar 27 12:45 actions.load
-rw-r--r-- 1 root root 62 Apr 22 19:02 alias.load
-rw-r--r-- 1 root root 60 Mar 27 12:45 asis.load
-rw-r--r-- 1 root root 72 Apr 22 19:02 auth_basic.load
-rw-r--r-- 1 root root 74 Mar 27 12:45 auth_digest.load
-rw-r--r-- 1 root root 74 Mar 27 12:45 authn_alias.load
-rw-r--r-- 1 root root 72 Mar 27 12:45 authn_anon.load
-rw-r--r-- 1 root root 70 Mar 27 12:45 authn_dbd.load
-rw-r--r-- 1 root root 70 Mar 27 12:45 authn_dbm.load
-rw-r--r-- 1 root root 78 Mar 27 12:45 authn_default.load
-rw-r--r-- 1 root root 72 Apr 22 19:02 authn_file.load
-rw-r--r-- 1 root root 90 Mar 27 12:45 authnz_ldap.load
-rw-r--r-- 1 root root 70 Mar 27 12:45 authz_dbm.load
-rw-r--r-- 1 root root 78 Apr 22 19:02 authz_default.load
-rw-r--r-- 1 root root 82 Apr 22 19:02 authz_groupfile.load
-rw-r--r-- 1 root root 72 Apr 22 19:02 authz_host.load
-rw-r--r-- 1 root root 74 Mar 27 12:45 authz_owner.load
-rw-r--r-- 1 root root 72 Apr 22 19:02 authz_user.load
-rw-r--r-- 1 root root 70 Apr 22 19:02 autoindex.load
-rw-r--r-- 1 root root 62 Mar 27 12:45 cache.load
-rw-r--r-- 1 root root 70 Mar 27 12:45 cern_meta.load
-rw-r--r-- 1 root root 58 Apr 22 19:02 cgi.load
-rw-r--r-- 1 root root 68 Mar 27 12:45 cgid.conf
-rw-r--r-- 1 root root 60 Mar 27 12:45 cgid.load
-rw-r--r-- 1 root root 76 Mar 27 12:45 charset_lite.load
-rw-r--r-- 1 root root 58 Mar 27 12:45 dav.load
-rw-r--r-- 1 root root 36 Mar 27 12:45 dav_fs.conf
-rw-r--r-- 1 root root 79 Mar 27 12:45 dav_fs.load
-rw-r--r-- 1 root root 68 Mar 27 12:45 dav_lock.load
-rw-r--r-- 1 root root 58 Mar 27 12:45 dbd.load
-rw-r--r-- 1 root root 107 Mar 27 12:45 deflate.conf
-rw-r--r-- 1 root root 66 Mar 27 12:45 deflate.load
-rw-r--r-- 1 root root 136 Apr 22 19:02 dir.conf
-rw-r--r-- 1 root root 58 Apr 22 19:02 dir.load
-rw-r--r-- 1 root root 169 Mar 27 12:45 disk_cache.conf
-rw-r--r-- 1 root root 89 Mar 27 12:45 disk_cache.load
-rw-r--r-- 1 root root 64 Mar 27 12:45 dump_io.load
-rw-r--r-- 1 root root 58 Apr 22 19:02 env.load
-rw-r--r-- 1 root root 66 Mar 27 12:45 expires.load
-rw-r--r-- 1 root root 72 Mar 27 12:45 ext_filter.load
-rw-r--r-- 1 root root 89 Mar 27 12:45 file_cache.load
-rw-r--r-- 1 root root 64 Mar 27 12:45 filter.load
-rw-r--r-- 1 root root 66 Mar 27 12:45 headers.load
-rw-r--r-- 1 root root 62 Mar 27 12:45 ident.load
-rw-r--r-- 1 root root 68 Mar 27 12:45 imagemap.load
-rw-r--r-- 1 root root 66 Apr 22 19:02 include.load
-rw-r--r-- 1 root root 60 Mar 27 12:45 info.load
-rw-r--r-- 1 root root 60 Mar 27 12:45 ldap.load
-rw-r--r-- 1 root root 76 Mar 27 12:45 log_forensic.load
-rw-r--r-- 1 root root 185 Mar 27 12:45 mem_cache.conf
-rw-r--r-- 1 root root 87 Mar 27 12:45 mem_cache.load
-rw-r--r-- 1 root root 60 Apr 22 19:02 mime.load
-rw-r--r-- 1 root root 89 Mar 27 12:45 mime_magic.conf
-rw-r--r-- 1 root root 72 Mar 27 12:45 mime_magic.load
-rw-r--r-- 1 root root 74 Apr 22 19:02 negotiation.load
-rw-r--r-- 1 root root 60 Mar 27 10:36 perl.load
-rw-r--r-- 1 root root 133 Mar 8 08:48 php4.conf
-rw-r--r-- 1 root root 59 Mar 8 08:48 php4.load
-rw-r--r-- 1 root root 135 Apr 22 19:02 php5.conf
-rw-r--r-- 1 root root 59 Apr 22 19:02 php5.load
-rw-r--r-- 1 root root 589 Mar 27 12:45 proxy.conf
-rw-r--r-- 1 root root 62 Mar 27 12:45 proxy.load
-rw-r--r-- 1 root root 87 Mar 27 12:45 proxy_ajp.load
-rw-r--r-- 1 root root 103 Mar 27 12:45 proxy_balancer.load
-rw-r--r-- 1 root root 95 Mar 27 12:45 proxy_connect.load
-rw-r--r-- 1 root root 87 Mar 27 12:45 proxy_ftp.load
-rw-r--r-- 1 root root 89 Mar 27 12:45 proxy_http.load
-rw-r--r-- 1 root root 66 Apr 22 19:02 rewrite.load
-rw-r--r-- 1 root root 68 Apr 22 19:02 setenvif.load
-rw-r--r-- 1 root root 298 Mar 27 12:45 sick-hack-to-update-modules
-rw-r--r-- 1 root root 66 Mar 27 12:45 speling.load
-rw-r--r-- 1 root root 1781 Apr 22 19:02 ssl.conf
-rw-r--r-- 1 root root 58 Apr 22 19:02 ssl.load
-rw-r--r-- 1 root root 64 Apr 22 19:02 status.load
-rw-r--r-- 1 root root 64 Apr 22 19:02 suexec.load
-rw-r--r-- 1 root root 70 Mar 27 12:45 unique_id.load
-rw-r--r-- 1 root root 293 Mar 27 12:45 userdir.conf
-rw-r--r-- 1 root root 66 Mar 27 12:45 userdir.load
-rw-r--r-- 1 root root 70 Mar 27 12:45 usertrack.load
-rw-r--r-- 1 root root 66 Mar 27 12:45 version.load
-rw-r--r-- 1 root root 74 Mar 27 12:45 vhost_alias.load

Cheers
Tony

[falko]

No, it's not in there either...

[tsmaudio]

Hi everyone
Just wondered if anyone had any further help or advice on getting mod_security installed and working on Debian etch.

I have tried downloading the latest release from
http://www.modsecurity.org/

and followed these install instructions
http://www.modsecurity.org/documenta...tallation.html

but after making the additions to the apache2.conf as described and then restarting apache, it comes up with a failed message saying module not found.

I have done a "locate mod_security" and there is a entry now in
/usr/lib/apache2/modules/mod_security2.so

this is all that was located.


I guess this install is not quite right for Debian Etch? any ideas

Any help on how to install it would be very much appreciated.

cheers.

[Tenaka]

those links seem good, I'll give it a try these days and see if it works for me or if I come up with another idea...

[falko]

Originally Posted by tsmaudio

but after making the additions to the apache2.conf

What exactly did you add? What's the output of

apache2 -V

?