FreeBSD Ports

www/mod_security 2.9.15

Intrusion detection and prevention engine

Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
a1d6fcc365
License
APACHE20
Categories
www, security
Package size
289.0 KiB, 2254.8 KiB installed

Description

ModSecurity is an embeddable web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring and real-time analysis with no changes to existing infrastructure.

It is also an open source project that aims to make the web application firewall technology available to everyone.

Install

As a binary package — by origin, or by package name:

pkg install www/mod_security
pkg install ap24-mod_security

From the ports tree:

cd /usr/ports/www/mod_security/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	ap24-mod_security>0:www/mod_security

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest2.9.152.9.152.9.62.9.10_12.9.15
FreeBSD:14:quarterly2.9.152.9.15n/a2.9.10_12.9.15
FreeBSD:15:latest2.9.152.9.15n/a2.9.10_12.9.10_1
FreeBSD:15:quarterly2.9.152.9.15n/an/an/a
FreeBSD:16:latest2.9.142.9.15n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Library 6

The full lists below include those, and their dependencies in turn.

All build dependencies 27
All run dependencies 21

No port depends on this one.

Configuration

Options name: www_mod_security

OptionDefaultDescription
DOCSoffBuild and/or install documentation
FUZZYHASHoffAllow matching contents using fuzzy hashes with ssdeep
LUAoffLua scripting language support
MLOGCoffBuild ModSecurity Log Collector
USES
apache gnome perl5 pkgconfig shebangfix autoreconf libtool:build
Service scripts
none

Message after installing

You have installed ModSecurity.
To enable ModSecurity in Apache, follow the instructions in

 /usr/local/etc/apache24/modules.d/280_mod_security.conf

Most users will use the signatures from the OWASP Core Rule Set (CRS).
For configuration instructions, see /usr/local/share/doc/mod_security2/README.

Files

pkg-plist 8
  • bin/mlogc
  • bin/mlogc-batch-load.pl
  • bin/rules-updater.pl
  • @sample %%APACHEETCDIR%%/modules.d/280_mod_security.conf.sample
  • @sample etc/ap24-mod_security/modsecurity.conf.sample
  • etc/ap24-mod_security/unicode.mapping
  • lib/
  • %%APACHEMODDIR%%/
distinfo 2
FileSizeSHA256
owasp-modsecurity-ModSecurity-v2.9.15_GH0.tar.gz3.817377e+06ae2d0e74c534e3c554a118d037d92b28c94caa033c1420ab00a4f110337c623a
libinjection-libinjection-2117822_GH0.tar.gz2.237303e+069769f3e9dcfc13f63159b7598c5f9e645c9ab08536f431e99e183773604877bf

Commit history 2

DateCommitCreditsLog message
a1d6fcc365 Jochen Neumeister www/mod_security: Update to 2.9.15
Fix several security issues (GHSA-cxqf-vgrr-xxrv, GHSA-2vqc-36qp-ccmw, GHSA-jx3r-phvx-2jmj, GHSA-qrch-pjfr-9g47, GHSA-4j47-8qcr-jf59, GHSA-5pww-8rfg-9crf). Changes: https://github.com/owasp-modsecurity/ModSecurity/blob/v2.9.15/CHANGES Sponsored by: Netzkommune GmbH
d696b9e113 Jochen Neumeister www/mod_security: Update to 2.9.14
Changes: https://github.com/owasp-modsecurity/ModSecurity/releases/tag/v2.9.14 Sponsored by: Netzkommune GmbH