{"id":742,"date":"2012-08-20T01:09:32","date_gmt":"2012-08-20T07:09:32","guid":{"rendered":"http:\/\/blog.supportpro.com\/?p=742"},"modified":"2018-10-04T04:32:52","modified_gmt":"2018-10-04T10:32:52","slug":"mod_security-installation-on-a-plesk-server","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/mod_security-installation-on-a-plesk-server\/","title":{"rendered":"mod_security installation on a plesk server"},"content":{"rendered":"

Check for the current version of apache installed on the server and make sure that the apache development tools have been installed on the server (i.e. httpd-devel package) using the command
\nrpm -qa | grep httpd-devel<\/p>\n

In case the apache development tools are not installed on the server, install the package via yum<\/p>\n

yum install httpd-devel<\/p><\/blockquote>\n

The devel package is necessary for addition of extra modules to apache ( since apxs [apache extension tool] comes with httpd-devel. Before installation of mod_security, ensure that the c (apache module) is installed on the server as well. The command httpd -t -D DUMP_MODULES will provide a list of all loaded apache modules.<\/p>\n

Use<\/p>\n

httpd -t -D DUMP_MODULES | grep httpd -t -D DUMP_MODULES to check for the unique_id_module<\/p><\/blockquote>\n

If the unique_id_module is not installed, download the apache source package from http:\/\/httpd.apache.org\/download.cgi (preferably the source file of current version of apache installed on the server) and use the command as below to add unique_id_module to apache<\/p>\n

apxs -iac httpd-2.2.22\/modules\/metadata\/mod_unique_id.c ( I installed unique_id_module for apache 2.2.22, in general the command can be modified as
\napxs -iac \/path\/to\/extracted\/apache\/source\/modules\/metadata\/mod_unique_id.c )<\/p><\/blockquote>\n

Now download the latest version of mod_security from http:\/\/www.modsecurity.org\/download\/ and extract the contents of the archive.
\nEnter the directory with the extracted contents and run the command<\/p>\n

.\/configure –with-apxs=\/path\/to\/apxs<\/p><\/blockquote>\n

Use the command which apxs to check for the path of the apxs binary<\/p>\n

Now run make and make install to build and install the module. After installation, add<\/p>\n

LoadFile \/usr\/lib\/libxml2.so
\nLoadFile \/usr\/lib\/liblua5.1.so
\nLoadModule security2_module modules\/mod_security2.so<\/p><\/blockquote>\n

to the apache configuration file ( httpd.conf usually present in \/etc\/httpd\/conf\/httpd.conf ) and restart apache.<\/p>\n

Note::<\/strong> Install lua package via yum if liblua5.1.so is not present in \/usr\/lib\/ , also apache should be compiled with proxy proxy_http proxy_ftp proxy_connect (for enabling mod_proxy) for mod_security to work properly.<\/p>\n

After installation mod_security can be suitably configured.<\/p>\n

If you require help, contact SupportPRO Server Admin<\/a><\/p>\n

\"Server<\/a><\/span>