Mark Powell's Blog (3)

ModSecurity is an Apache module that serves as an application layer firewall. It is especially needful for those who run LAMP (Linux/Apache/mySQL/PHP) servers, because of the many SQL injection attacks and problems with PHP code in software such as WordPress and Horde. The following is a step-by-step implementation How-To. Download the ModSecurity tarball: wget http://www.modsecurity.org/download/modsecurity-apache_2.5.7.tar.gz Un-archive the tarball and cd to the source directory: $ tar -x… Continue

These are the actual steps I went through to generate the cert and key for my Apache 2 web server on the Mac. I then start Apache. openssl genrsa -des3 -rand file1:file2:file3:file4:file5 -out server.key 1024 openssl rsa -in server.key -out server.pem openssl req -new -key server.key -out server.csr openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt sudo mkdir /usr/local/apache2/conf/ssl.crt sudo mkdir /usr/local/apache2/conf/ssl.key sudo cp server.crt /… Continue

BUILD GDBM LIBRARY: ncftpget ftp://ftp.gnu.org/gnu/gdbm/gdbm-1.8.3.tar.gz tar -xvzf gdbm-1.8.3.tar.gz cd gdbm* ./configure && make sudo make install BUILD CYRUS SASL2 LIBRARY: ncftpget ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.22.tar.gz tar -xvzf cd cyrus-sasl-2.1.22.tar.gz ./configure --without-pam --enable-login --with-dblib=gdbm make sudo make install MAKE SASL LOOK AT THE SHADOW FILE FOR USERS: cat /usr/lib/sasl2/Sendmail.conf pwcheck_method: shadow PUT THESE LINES… Continue