Topic: Problem with Modesecurity 2.8.0 with apache 2.4.12

[regi4life]

Hello,

I've configured modsecurity with apache on Windows. I got warnings with APR and PCRE versions. So, modsecurity does not work. Please, how could you help me to resolve this problem ?

[Thu Feb 05 17:56:43.000256 2015] [:notice] [pid 1980:tid 384] ModSecurity for Apache/2.8.0 (http://www.modsecurity.org/) configured.
[Thu Feb 05 17:56:43.000256 2015] [:notice] [pid 1980:tid 384] ModSecurity: APR compiled version="1.5.0"; loaded version="1.5.1"
[Thu Feb 05 17:56:43.000256 2015] [:warn] [pid 1980:tid 384] ModSecurity: Loaded APR do not match with compiled!
[Thu Feb 05 17:56:43.000256 2015] [:notice] [pid 1980:tid 384] ModSecurity: PCRE compiled version="8.34 "; loaded version="8.36 2014-09-26"
[Thu Feb 05 17:56:43.000256 2015] [:warn] [pid 1980:tid 384] ModSecurity: Loaded PCRE do not match with compiled!

How to compile a high version of pcre ou apr on Windows ?

Below the informations of my environment :
-Windows server 2008 R2
-apache 2.4.12
-php 5.5.18
-modsecurity 2.8.0

Thank you for your help.

Regi

[Steffen]

You posted in the wrong forum. We moved it.


It works, the version difference has no influence. And a warning is not an error.

You say that it does not work. It looks like it starts fine.
What does not work ?

[glsmith]

Are you positive it is not working? There's no need to really recompile with newer versions of apr and pcre because the API in the newer versions have not changed. If they had, every other module would also have to be recompiled, what a pain that would be.

I'm running 2.4.12 x86 with mod_security 2.8.0 and it's working even though I also see;

[Mon Feb 02 02:22:21.991625 2015] [:notice] [pid 5052:tid 1488] ModSecurity for Apache/2.8.0 (http://www.modsecurity.org/) configured.
[Mon Feb 02 02:22:22.007250 2015] [:notice] [pid 5052:tid 1488] ModSecurity: APR compiled version="1.5.0"; loaded version="1.5.1"
[Mon Feb 02 02:22:22.007250 2015] [:warn] [pid 5052:tid 1488] ModSecurity: Loaded APR do not match with compiled!
[Mon Feb 02 02:22:22.007250 2015] [:notice] [pid 5052:tid 1488] ModSecurity: PCRE compiled version="8.34 "; loaded version="8.36 2014-09-26"
[Mon Feb 02 02:22:22.007250 2015] [:warn] [pid 5052:tid 1488] ModSecurity: Loaded PCRE do not match with compiled!

On another machine I have Apache 2.4.12 x64 and mod_security 2.8.0 and again, mod_security is working even though I see;

[Thu Jan 29 20:52:49.000000 2015] [:notice] [pid 3408:tid 496] ModSecurity for Apache/2.8.0 (http://www.modsecurity.org/) configured.
[Thu Jan 29 20:52:49.000000 2015] [:notice] [pid 3408:tid 496] ModSecurity: APR compiled version="1.5.0"; loaded version="1.5.1"
[Thu Jan 29 20:52:49.000000 2015] [:warn] [pid 3408:tid 496] ModSecurity: Loaded APR do not match with compiled!
[Thu Jan 29 20:52:49.000000 2015] [:notice] [pid 3408:tid 496] ModSecurity: PCRE compiled version="8.34 "; loaded version="8.36 2014-09-26"
[Thu Jan 29 20:52:49.000000 2015] [:warn] [pid 3408:tid 496] ModSecurity: Loaded PCRE do not match with compiled!


I know it's working because I have a rule specifically for testing and besides seeing a 400 error page I also see this when I trigger it on both servers;

[Thu Feb 05 13:57:02.866625 2015] [:error] [pid 5052:tid 728] [client 10.0.0.150] ModSecurity: Access denied with code 400 (phase 2). Pattern match "\\\\.\\\\./" at ARGS:abc. [file "C:/Apache24/conf/extra/httpd-security.conf"] [line "65"] [id "99999"] [msg "Drive Access"] [severity "WARNING"] [hostname "server1"] [uri "/"] [unique_id "VNPnLgoAAAkAABO8LJUAAAA3

[Thu Feb 05 13:39:34.375000 2015] [:error] [pid 3408:tid 1260] [client 10.0.0.150] ModSecurity: Access denied with code 400 (phase 2). Pattern match "\\\\.\\\\./" at ARGS:abc. [file "D:/Apache24/conf/extra/httpd-security.conf"] [line "65"] [id "99999"] [msg "Drive Access"] [severity "WARNING"] [hostname "server2"] [uri "/"] [unique_id "VNPjFsCoARQAAA1QJPAAAAA9"