Dear Barry,
Yes, you are right. I missed quoted the path. It now works normally. Many thanks. Btw, would you please advise how to change the following path syntax from Linux to Windows? "exec:/usr/local/apache/conf/modsec_current/base_rules/osvdb.lua" I tried to changed it as below but all of them does not work. "exec:c:\Program Files\ModSecurity IIS\owasp_crs\luaosvdb.lua" "exec: c:\Program Files\ModSecurity IIS\owasp_crs\luaosvdb.lua" "exec: "c:\Program Files\ModSecurity IIS\owasp_crs\luaosvdb.lua"" "exec: 'c:\Program Files\ModSecurity IIS\owasp_crs\luaosvdb.lua'" "exec:"c:\Program Files\ModSecurity IIS\owasp_crs\luaosvdb.lua"" "exec:'c:\Program Files\ModSecurity IIS\owasp_crs\luaosvdb.lua'" Best Regards, Gary Tam From: Barry Pollard [mailto:[email protected]] Sent: 29 August 2016 14:47 To: Gary Tam Cc: Bill Miller; [email protected] Subject: Re: [Owasp-modsecurity-core-rule-set] OWASP CRS Version 3.0 RC1 Rules 930100, 930110 Put quotes around it so it doesn't think the spaces are separate arguments? SecGeoLookupDb "C:\Program Files\ModSecurity IIS\owasp_crs\base_rules\GeoLiteCity.dat" Thanks, Barry On 29 Aug 2016, at 07:40, Gary Tam <[email protected]> wrote: Dear Bill, Thanks for your reply and information. I have just downloaded the dasebase - GeoLiteCity.dat from http://dev.maxmind.com/geoip/legacy/geolite/ and updated in the config file (i.e. modsecurity_crs_61_ip_forensics.conf). But it now shows another Syntax error as below: Syntax error in config file C:\/Program Files/ModSecurity IIS/owasp_crs/experimental_rules/modsecurity_crs_61_ip_forensics.conf, line 34: SecGeoLookupDB takes one argument, database for geographical lookups module. line 34 of modsecurity_crs_61_ip_forensics.conf SecGeoLookupDb C:\Program Files\ModSecurity IIS\owasp_crs\base_rules\GeoLiteCity.dat Would you please help again? Many thanks! Best Regards, Gary Tam From: [email protected] [mailto:[email protected]] On Behalf Of Bill Miller Sent: 29 August 2016 12:33 To: [email protected] Subject: Re: [Owasp-modsecurity-core-rule-set] OWASP CRS Version 3.0 RC1 Rules 930100, 930110 You can download the database from here https://dev.maxmind.com/geoip/legacy/geolite/ On 08/28/2016 11:20 PM, Gary Tam wrote: Dear Genius, I am a beginner in Owasp-modsecurity. I have just done the modsecurity installation on my windows server (i.e. Windows 2008 with IIS 7.5). It is observed that there is a windows event log error when enabled the "experimental_rules" as below: Syntax error in config file C:\/Program Files/ModSecurity IIS/owasp_crs/experimental_rules/modsecurity_crs_61_ip_forensics.conf, line 34: Could not open geo database "/usr/local/apache/conf/modsec_current/base_rules/GeoLiteCity.dat": The system cannot find the path specified. Of coz I know it is needed to emend the file path from linux to windows syntax, but i could not find the GeoLiteCity.dat in my windows server. Would you guys help to check and advise? Many thanks! Best Regards, Gary Tam _______________________________________________ Owasp-modsecurity-core-rule-set mailing list [email protected] https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set _______________________________________________ Owasp-modsecurity-core-rule-set mailing list [email protected] https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
_______________________________________________ Owasp-modsecurity-core-rule-set mailing list [email protected] https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
