Control Web Panel

Security => Mod_Security => Topic started by: Umbus on February 19, 2018, 05:13:42 PM

Title: ModSecurity: Status engine is currently disabled
Post by: Umbus on February 19, 2018, 05:13:42 PM
When I have installed the comodo WAF,have this log:
[Mon Feb 19 12:08:16.096106 2018] [:notice] [pid 14651:tid 140564494997376] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured.
[Mon Feb 19 12:08:16.096171 2018] [:notice] [pid 14651:tid 140564494997376] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2"
[Mon Feb 19 12:08:16.096175 2018] [:notice] [pid 14651:tid 140564494997376] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
[Mon Feb 19 12:08:16.096179 2018] [:notice] [pid 14651:tid 140564494997376] ModSecurity: LIBXML compiled version="2.9.1"
[Mon Feb 19 12:08:16.096182 2018] [:notice] [pid 14651:tid 140564494997376] ModSecurity: Original server signature: Apache/2.4.29 (Unix) OpenSSL/1.0.1e-fips
[Mon Feb 19 12:08:16.096185 2018] [:notice] [pid 14651:tid 140564494997376] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.


What happens? What I need to do?
Title: Re: ModSecurity: Status engine is currently disabled
Post by: n8v8r on February 19, 2018, 05:20:33 PM
click this link
(https://s14.postimg.org/i3jkpkwkx/mod_sec.png)
Add in the configuration
Code: [Select]
SecStatusEngine OnClick Save and restart httpd
Title: Re: ModSecurity: Status engine is currently disabled
Post by: Umbus on February 19, 2018, 06:22:31 PM
I did it, now appears this message:

[Mon Feb 19 13:20:31.122146 2018] [:notice] [pid 17440:tid 140224371496832] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured.
[Mon Feb 19 13:20:31.122209 2018] [:notice] [pid 17440:tid 140224371496832] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2"
[Mon Feb 19 13:20:31.122214 2018] [:notice] [pid 17440:tid 140224371496832] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
[Mon Feb 19 13:20:31.122217 2018] [:notice] [pid 17440:tid 140224371496832] ModSecurity: LIBXML compiled version="2.9.1"
[Mon Feb 19 13:20:31.122220 2018] [:notice] [pid 17440:tid 140224371496832] ModSecurity: Original server signature: Apache/2.4.29 (Unix) OpenSSL/1.0.1e-fips
[Mon Feb 19 13:20:31.122269 2018] [:notice] [pid 17440:tid 140224371496832] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.29 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,ea1013b0e63f93571724120651efcb286e95a8dc"
[Mon Feb 19 13:20:31.466783 2018] [:notice] [pid 17440:tid 140224371496832] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/

This is normal?
Title: Re: ModSecurity: Status engine is currently disabled
Post by: n8v8r on February 19, 2018, 06:23:37 PM
yes
Title: Re: ModSecurity: Status engine is currently disabled
Post by: Umbus on February 19, 2018, 06:28:14 PM
Thank you very much for your help!  :D
Title: Re: ModSecurity: Status engine is currently disabled
Post by: shobhit on August 26, 2019, 02:30:11 PM
Hi, I request you and everyone out here to plesae post the path of configuration file name whenever you suggest anything to be added to a configuration file. It is good that you helped the guy who asked the question, but a detailed answer will help others too. I tried editing the Main Configuraiton file of mod security and got Apache crashed twice. I had to re update mod security to get the things working.
Title: Re: ModSecurity: Status engine is currently disabled
Post by: changlee on September 05, 2019, 09:59:17 AM
Is that the path please?

Edit /usr/local/apache/conf.d/mod_security.conf
Title: Re: ModSecurity: Status engine is currently disabled
Post by: cotlasweb on February 25, 2021, 07:28:37 PM
Yes that is the correct file to add it. But only reloading apache is not enough because i had to restart apache to get it working
Title: Re: ModSecurity: Status engine is currently disabled
Post by: changlee on February 26, 2021, 07:41:22 AM
Thanks!