Update ModSecurity Comodo ruleset fails

Remco00

Verified User
Joined
Feb 22, 2006
Messages
283
Update ModSecurity Comodo ruleset gives me:

Code:
Can't open /etc/cwaf/main.conf: No such file or directory.
Can't open /etc/cwaf/main.conf: No such file or directory.
./build: line 13703: /usr/local/cwaf/scripts/updater.pl: No such file or directory
Installation of ModSecurity Rule Set has been finished.
Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details.
 
Is that CustomBuild 2.0 rev. 1259? If not, may you try updating?
 
Hi Martinas, it is in fact the version you mentioned. Any clues about what is wrong? The initial install went fine without any problems. It is this update that is causing trouble.
 
Please check if the following solves your problem:
Code:
yum -y install perl-CPAN
 
in options.conf
modsecurity_ruleset=comodo
buy for some reasoon he install cwaf rules.

[root@server modsecurity.d]# cat /etc/modsecurity.d/comodo_rules.conf.main
IncludeOptional /etc/cwaf/cwaf.conf
Version: 2.0.0-RC7 (rev: 1263)
 
Last edited:
oh my bad. some kind of reason i thoght it's another rules :(
i see that you did a lot of changes on the script
 
Thanks Martinas, now the update works fine. Also the new Comodo plugin looks very nice. Is the ruleset generic or does it contain some specific DA settings?
 
same

It contains CWAF rules only. However, they have a forum for feature requests if you have any: https://forums.comodo.com/free-modsecurity-rules-comodo-web-application-firewall-b223.0/. Comodo ruleset support for Nginx is coming soon :)


i got cat /etc/modsecurity.d/comodo_rules.conf.main
IncludeOptional /etc/cwaf/cwaf.conf

But /etc/cwaf is empty... the directory does not exist... so http is not starting....any idea ?
|
| Version: 2.0.0 (rev: 1465) |
+--------------------------------
 
Last edited:
same

It contains CWAF rules only. However, they have a forum for feature requests if you have any: https://forums.comodo.com/free-modsecurity-rules-comodo-web-application-firewall-b223.0/. Comodo ruleset support for Nginx is coming soon :)


i got cat /etc/modsecurity.d/comodo_rules.conf.main
IncludeOptional /etc/cwaf/cwaf.conf

But /etc/waf is empty... so http is not starting

Starting httpd: httpd: Syntax error on line 50 of /etc/httpd/conf/httpd.conf: Syntax error on line 3 of /etc/httpd/conf/extra/httpd-phpmodules.conf: Syntax error on line 30 of /etc/httpd/conf/extra/httpd-modsecurity.conf: Syntax error on line 1 of /etc/modsecurity.d/comodo_rules.conf.main: Could not open configuration file /etc/cwaf/cwaf.conf: No such file or directory


+-----------------------------------------------------------+
| DirectAdmin WebServices Installer |
| Written by Martynas Bendorius and DirectAdmin |
| Version: 2.0.0 (rev: 1465)
 
this solved my problem

test these :

Code:
/etc/init.d/httpd stop
ps aux | grep httpd
kill -9 <PIDs of httpd processes>
/etc/init.d/httpd start



i got cat /etc/modsecurity.d/comodo_rules.conf.main
IncludeOptional /etc/cwaf/cwaf.conf

But /etc/waf is empty... so http is not starting

Starting httpd: httpd: Syntax error on line 50 of /etc/httpd/conf/httpd.conf: Syntax error on line 3 of /etc/httpd/conf/extra/httpd-phpmodules.conf: Syntax error on line 30 of /etc/httpd/conf/extra/httpd-modsecurity.conf: Syntax error on line 1 of /etc/modsecurity.d/comodo_rules.conf.main: Could not open configuration file /etc/cwaf/cwaf.conf: No such file or directory


+-----------------------------------------------------------+
| DirectAdmin WebServices Installer |
| Written by Martynas Bendorius and DirectAdmin |
| Version: 2.0.0 (rev: 1465)
 
Back
Top