Topic: Modsecurity 2.1.2 - small install question

[flatcircle]

Just downloaded modsecurity 2.1.2 and I wondered about 2 things:

- If you run a binary *not* from the ApacheLounge, copy httpd.exe.manifest to .../apache2/bin

- Install the Visual C++ 2005 SP1 Redistributable Package (the binary is build with VC 2005 SP1)


What does this 'manifest' do? Do I have to copy this file when I used an Apache distro downloaded through www.apache.org?

- Is it really necessary to install the Visual C redist? Is loading mod_security2.so in httpd.conf not enough? Or does mod_security2.so rely on Visual C++ 2005? Thought that Visual C++ 2005 was only needed for compilation, not when there's already a .so available.

Regards.

[James Blond]

The manifest file tells your httpd.exe which dll it have to use. (the one from the Redistributable Package).
If you want to run that mod_security you have to install the Redistributable Package.

If you don't want to do that. You can download the mod_security from gknw.net . That modules is compiled with Visual Studio 6 as the apache from apache.org

[flatcircle]

So in short:

When using the Apache server & modsecurity both from apachelounge, you don't need to use the .manifest, only install the Visual C package.

Using Apache server from apache.org and modsecurity from apachelounge, install the Visual C package AND use the .manifest file.

Using Apache server from apache.org and modsecurity from (like you said): http://www.gknw.net/development/apache/httpd-2.2/win32/modules/
No need to use the manifest-file or install the Visual C package.

Can you confirm this?
Thanks.

[James Blond]

Right!

[flatcircle]

Thanks for the info!

What do you suggest? Use the rules which are included or use the rules from gotroot.com? (or both)

Regards.

[James Blond]

Should use only rules for pages you use. it makes no sence to use all rules. What kind of apps do you want to run?