Mark Powell's Page

ModSecurity is an Apache module that serves as an application layer firewall. It is especially needful for those who run LAMP (Linux/Apache/mySQL/PHP) servers, because of the many SQL injection attacks and problems with PHP code in software such as WordPress and Horde.

The following is a step-by-step implementation How-To.

Download the ModSecurity tarball:

wget http://www.modsecurity.org/download/modsecurity-apache_2.5.7.tar.gz

Un-archive the tarball and cd to the source directory:

$ tar -x… Continue

These are the actual steps I went through to generate the cert and key
for my Apache 2 web server on the Mac. I then start Apache.

openssl genrsa -des3 -rand file1:file2:file3:file4:file5 -out server.key
1024


openssl rsa -in server.key -out server.pem


openssl req -new -key server.key -out server.csr


openssl x509 -req -days 3650 -in server.csr -signkey server.key -out
server.crt


sudo mkdir /usr/local/apache2/conf/ssl.crt


sudo mkdir /usr/local/apache2/conf/ssl.key


sudo cp server.crt /… Continue

BUILD GDBM LIBRARY:

ncftpget ftp://ftp.gnu.org/gnu/gdbm/gdbm-1.8.3.tar.gz
tar -xvzf gdbm-1.8.3.tar.gz
cd gdbm*
./configure && make
sudo make install

BUILD CYRUS SASL2 LIBRARY:

ncftpget
ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.22.tar.gz
tar -xvzf cd cyrus-sasl-2.1.22.tar.gz
./configure --without-pam --enable-login --with-dblib=gdbm
make
sudo make install

MAKE SASL LOOK AT THE SHADOW FILE FOR USERS:

cat /usr/lib/sasl2/Sendmail.conf
pwcheck_method: shadow

PUT THESE LINES… Continue