前置条件准备
1)安装libtool
yum -y install libtool
2)安装zlib,openssl,pcre
yum install zlib zlib-devel openssl openssl-devel pcre pcre-devel
3)安装apacher
yum install httpd -y
4)运行apacher
service httpd start
service httpd configtest 检查配置文件
5)安装依赖包 pcre httpd-devel libxml2 apr
yum install httpd-devel apr apr-util-devel apr-devel pcre pcre-devel libxml2 libxml2-devel
6)检查apacher配置文件
vi /etc/httpd/conf/httpd.conf
安装modsecurity
1)tar xzvf modsecurity-2.9.1.tar.gz
2)cd modsecurity-2.9.1
3)./autogen.sh
4)./configure
5)make
6)make install
7)cp /usr/local/modsecurity/lib/mod_security2.so /etc/httpd/modules/
8)chmod 777 /etc/httpd/modules/mod_security2.so
9) cp /usr/local/src/modsecurity-2.9.1/unicode.mapping /etc/httpd/conf/
验证modsecurity安装
1)修改apacher配置文件httpd.conf
添加下面两行
LoadModule security2_module modules/mod_security2.so
2)重启Apacher
service httpd restart
成功启动后,modsecurity安装成功了。后面将讨论OWASP规则配置。
可以参考下面两个URL
http://www.2cto.com/article/201407/319878.html
http://www.freebuf.com/articles/web/8749.html
1)安装libtool
yum -y install libtool
2)安装zlib,openssl,pcre
yum install zlib zlib-devel openssl openssl-devel pcre pcre-devel
3)安装apacher
yum install httpd -y
4)运行apacher
service httpd start
service httpd configtest 检查配置文件
5)安装依赖包 pcre httpd-devel libxml2 apr
yum install httpd-devel apr apr-util-devel apr-devel pcre pcre-devel libxml2 libxml2-devel
6)检查apacher配置文件
vi /etc/httpd/conf/httpd.conf
安装modsecurity
1)tar xzvf modsecurity-2.9.1.tar.gz
2)cd modsecurity-2.9.1
3)./autogen.sh
4)./configure
5)make
6)make install
7)cp /usr/local/modsecurity/lib/mod_security2.so /etc/httpd/modules/
8)chmod 777 /etc/httpd/modules/mod_security2.so
9) cp /usr/local/src/modsecurity-2.9.1/unicode.mapping /etc/httpd/conf/
验证modsecurity安装
1)修改apacher配置文件httpd.conf
添加下面两行
LoadModule security2_module modules/mod_security2.so
LoadFile /usr/lib64/libxml2.so
#LoadModule unique_id_module modules/mod_unique_id.so 去掉注解
2)重启Apacher
service httpd restart
成功启动后,modsecurity安装成功了。后面将讨论OWASP规则配置。
可以参考下面两个URL
http://www.2cto.com/article/201407/319878.html
http://www.freebuf.com/articles/web/8749.html