Simple, current how-to install mod-security on cPanel server?

Posted by linux911 on Server Fault See other posts from Server Fault or by linux911
Published on 2010-06-12T23:54:37Z Indexed on 2010/06/13 0:02 UTC
Read the original article Hit count: 228

Filed under:

cpanel

|

mod-security

Does anyone have or know of a simple, up to date how to for installing mod-security on cPanel and configuring it after install?

Every how to on the web I've found is at least two years old and is based on a mod-security addon function in cPanel which doesn't exist anymore.

There are a couple of free add ons to simplify selecting rule files (configserver's for example) but there's no documentation on which rules a cPanel system "should" be using and so on.

© Server Fault or respective owner

Related posts about cpanel

I can't find my backup for the cpanel in whm/cpanel

as seen on Pro Webmasters - Search for 'Pro Webmasters'
The Problem: I have made a complete backup from the cpanel for the whole home folder. I have placed this folder in the default home directory. Thereafter, i tried to restore this file from the WHM, but i couldn't find it. Does anyone know what causes such problems? Additional Details: I am the… >>> More
Mailman Error / Cpanel

as seen on Server Fault - Search for 'Server Fault'
Mailman is giving off this error when any changes are made to the list: ======================= Bug in Mailman version 2.1.14 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly… >>> More
fcgi php.ini override

as seen on Server Fault - Search for 'Server Fault'
I'm using cPanel on centos5 64bit installed. PHP handler is : fcgi cat /usr/local/apache/conf/php.conf output is : LoadModule fcgid_module modules/mod_fcgid.so MaxRequestsPerProcess 500 FCGIWrapper /usr/local/cpanel/cgi-sys/php5 .php5 FCGIWrapper /usr/local/cpanel/cgi-sys/php5… >>> More
Problem with Apache webserver and MySQL after installing cPanel

as seen on Server Fault - Search for 'Server Fault'
I have a Fedora machine with Apache webserver and MySQL installed with some data present in both the servers. I installed cPanel on this machine with a test license. After installing cPanel I am not able to start Apache Webserver and login to MySQL. I am getting the following error when I try to… >>> More
Too many apache processes, killing the CPU

as seen on Server Fault - Search for 'Server Fault'
I am noticed that too many apache processes killing the CPU in my dedicated server. 14193 (Trace) (Kill) nobody 0 66.1 0.0 /usr/local/apache/bin/httpd -k start -DSSL 14128 (Trace) (Kill) nobody 0 65.9 0.0 /usr/local/apache/bin/httpd -k start -DSSL 14136 (Trace) (Kill) nobody… >>> More

Related posts about mod-security

ModSecurity compile error on nginx

as seen on Server Fault - Search for 'Server Fault'
I'm trying to install ModSecurity on nginx with the following instructions : wget https://github.com/SpiderLabs/ModSecurity/archive/master.zip unzip master cd ModSecurity-master ./autogen.sh ./configure --enable-standalone-module And i got the following error : Checking plataform... Identified… >>> More
modsecurity apache mod-security.conf missing

as seen on Server Fault - Search for 'Server Fault'
Greetings Serverfaultians. I'm not a server guy as you can see from my noob score of 1 point. But maybe those more versed can help me. I'm using Ubuntu v13.10 32-bit Server and Apache2 v2.4.6 and I'm trying to set up and configure modsecurity and modevasive on an internet-exposed production/test… >>> More
How to detect brute force in mod-security

as seen on Server Fault - Search for 'Server Fault'
I checked the core rules set in the mod-security but it's didn't contain the rules related to Brute-Force Attack!!! Did anyone know how to write the rules or the existing rules for this kind of Attack! Thanks in advanced, >>> More
Necesity of ModSecurity if Apache is behind Nginx

as seen on Server Fault - Search for 'Server Fault'
I have my Apache installed behind Nginx. So every request that comes in is first handeled by Nginx. If there is dynamic content needed the request is send to Apache which listens on port 8080. Pretty basic reverse proxy setup. Now with this setup the first entry point is Nginx. Is it still needed… >>> More
Detecting Request that uses invalid Encoding using Modsecurity

as seen on Server Fault - Search for 'Server Fault'
I am trying write a virtual patch using modsecurity for my hosted web application using following rule i.e. <Location /index.php> SecDefaultAction phase:2,t:none,log,deny # Validate parameter names SecRule ARGS_NAMES "!^(articleid)$" \ "msg:'Unknown parameter: %{MATCHED_VAR_NAME}'" # Expecting… >>> More