Background:
Mod_Security is an open source intrusion detection and prevention engine for web applications. Operating as an Apache Web server module, the purpose of Mod_Security is to increase web application security, protecting web applications from known and unknown attacks.
Official web site: http://www.modsecurity.org
More information:
1. Log to your Web Host Manager via your favorite web browser.
2. On the left frame, scroll all the way down till you have reached the cPanel section, then click on Addon Modules.
3. A new window will appear on the right frame. Scroll down until you see modsecurity, check the Install and Keep Updated field, and click on Save.
cPanel will now begin to download Mod_Security and add a basic security scheme. Mod_Security will be added to Apache configuration file which is located at /usr/local/apache/conf/, and will include its main security configuration file which can be found at /usr/local/apache/conf/modsec.conf
That’s it. mod_security is now installed on your server. Now, all that is left for you to do is to edit and add security filters.
You can edit Mod_Security as configuration file either through Web Host Manager, or from shell (SSH).
Web Host Manager
Once the installation has been completed, a new section will be added to WHM by the name of Add-ons. Scroll down on the left frame until you see it, and click on the Mod Security link.
Note: If you are still logged to your WHM and don’t see the Add-ons section, try refreshing your browser.
Shell
cPanel includes three configuration files: modsec.conf, modsec.user.conf, and modsec.user.conf.default.
The ones that are in effect are modsec.conf, and modsec.user.conf. The file modsec.user.conf is blank by default, however, modsec.user.conf.default contains common security filters which can be applied to modsec.user.conf.
I recommend viewing modsec.user.conf.default before copying, and applying any security filters. Misconfiguration can do more harm than good.
Hope you all like this post
Recent Comments