Arch Linux

monash

Member

From: Hong Kong

Registered: 2011-11-10

Posts: 9

httpd modsecurity [SOLVED]

I have recently changed from a ubuntu oneiric server setup to an arch linux server setup and am enjoying the simplicity and minimalistic approach!

There is only one thing I seem unable to migrate over simply using pacman or aur - modsecurity!

I have standard security measures in place (ssh keys on a port other than 22, mod_evasive, and iptables/ufw rules in place). But I would feel safer if I could utilise apache's internal mod-security extension.

Question

Is there an "Arch Way" of installing modsecurity-2.6 and using modsecurity rules?

Any links would be appreciated :-)

Last edited by monash (2011-11-13 02:16:38)

---

Keepinitlite: AsusP5K+Nvidia210+Core2+2gbRam

teekay

Member

Registered: 2011-10-26

Posts: 271

Re: httpd modsecurity [SOLVED]

See http://aur.archlinux.org/packages.php?ID=11607 -> Comment from chiche -> 2.6.2 PKGBUILD

monash

Member

From: Hong Kong

Registered: 2011-11-10

Posts: 9

Re: httpd modsecurity [SOLVED]

Thanks teekay

When set up and tested this module seems to work well.

Use your own mod_security.conf if needed.

I included the following in my mod_security.conf to allow googlebot access to my site:

# Allow GoogleBot by user-agent…
SecRule HTTP_USER_AGENT “Google” nolog,allow
SecRule HTTP_USER_AGENT “Googlebot” nolog,allow
SecRule HTTP_USER_AGENT “GoogleBot” nolog,allow
SecRule HTTP_USER_AGENT “googlebot” nolog,allow
SecRule HTTP_USER_AGENT “Googlebot-Image” nolog,allow
SecRule HTTP_USER_AGENT “AdsBot-Google” nolog,allow
SecRule HTTP_USER_AGENT “Googlebot-Image/1.0? nolog,allow
SecRule HTTP_USER_AGENT “Googlebot/2.1? nolog,allow
SecRule HTTP_USER_AGENT “Googlebot/Test” nolog,allow
SecRule HTTP_USER_AGENT “Mediapartners-Google/2.1? nolog,allow
SecRule HTTP_USER_AGENT “Mediapartners-Google*” nolog,allow
SecRule HTTP_USER_AGENT “msnbot” nolog,allow 

Last edited by monash (2011-11-13 02:15:36)

---

Keepinitlite: AsusP5K+Nvidia210+Core2+2gbRam