mod_security with apache on aapanel

TDD

Any idea, how to enable mod_security on apache having aapanel?

Thanks

aaPanel_Jose

hello,
Aapanel does not integrate this module, you need to manually install and configuration. For details, please refer to this.
https://phoenixnap.com/kb/setup-configure-modsecurity-on-apache

aaP_usanuman

aaPanel_Jose do you have any future plan for integrating mod_security into aaPanel ?

18TommyBoy

I have nginx, i need modsecurity too, or this is only for Apache?

aaPanel_Jose

18TommyBoy
Nginx also has a manual installation .

TDD

When we try to install on centos 7 as per guide it gives this error:

yum install mod_security
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile

base: centos.mirrors.estointernet.in
epel: repos.del.extreme-ix.org
extras: centos.mirrors.estointernet.in
updates: centos.mirrors.estointernet.in
Resolving Dependencies
--> Running transaction check
---> Package mod_security.x86_64 0:2.9.2-1.el7 will be installed
--> Processing Dependency: httpd-mmn = 20120211x8664 for package: mod_security-2.9.2-1.el7.x86_64
--> Processing Dependency: httpd for package: mod_security-2.9.2-1.el7.x86_64
--> Processing Dependency: libaprutil-1.so.0()(64bit) for package: mod_security-2.9.2-1.el7.x86_64
--> Processing Dependency: libapr-1.so.0()(64bit) for package: mod_security-2.9.2-1.el7.x86_64
--> Running transaction check
---> Package apr.x86_64 0:1.4.8-3.el7_4.1 will be installed
---> Package apr-util.x86_64 0:1.5.2-6.el7 will be installed
---> Package mod_security.x86_64 0:2.9.2-1.el7 will be installed
--> Processing Dependency: httpd-mmn = 20120211x8664 for package: mod_security-2.9.2-1.el7.x86_64
--> Processing Dependency: httpd for package: mod_security-2.9.2-1.el7.x86_64
--> Finished Dependency Resolution
Error: Package: mod_security-2.9.2-1.el7.x86_64 (base)
Requires: httpd-mmn = 20120211x8664
Error: Package: mod_security-2.9.2-1.el7.x86_64 (base)
Requires: httpd
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest

Any idea what could be the issue ?

Thanks

jazz1611

TDD
you need install package "httpd-mmn" with version 20120211x8664

TDD

It says:
Error: Package: mod_security-2.9.2-1.el7.x86_64 (base)
Requires: httpd-mmn = 20120211x8664
Error: Package: mod_security-2.9.2-1.el7.x86_64 (base)
Requires: httpd
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest

"Requires: httpd" <--- how it is possible as httpd is already installed and apache is running on aapanel ?

Thanks

freddiehdxd

aaP_usanuman yeah also for litespeed

moslem

aaP_deewinc

ModSecurity seems to be most requested feature.

aaP_felixademola542

SOMEBODY HELP ME MANUALLY INSTALL AND CONFIGURE MODSECURITY ON aaPanel?

A web server without a modsecurity is a disaster.

I tried installing and configuring modsecurity but the way aaPanel handles Apache installation and configuration seems different. It looks complicated and frustrating looking to find config files. I decided to manually installed Apache alone on a different server without installing aaPanel and I was successful implementing modsecurity. I'm quite surprised why aaPanel didn't integrate modsecurity, a very important web application firewall, into their panel or at least make it easy to manually install and configure without much complications.

aaPanel is a great application and without modsecurity integration, makes look half baked. At least create a paid app. I still haven't been able to manually install and configure modsecurity on aaPanel. Please share your procedure here if you have success implementing it on aaPanel, That will help a lot.

Cheers

aaP_felixademola542

@aaPanel_Jose Is Apache WAF and Nginx WAF located in the "App Store" are the equivalent implementation of modsecurity for Apache and Nginx on aaPanel respectively?

If I cancel my monthly subscription after using the fantastic paid apps for a couple of months, will I still be protected or the app will be completely deactivated?

Thank you.

aaPanel_Jose

Hello aaP_felixademola542
Protection stops when subscription is interrupted