Technology

Install Modsec On Nginx

ruhan

sudo apt install libpcre2-dev g++ flex bison curl apache2-dev doxygen libyajl-dev ssdeep liblua5.2-dev libgeoip-dev libtool dh-autoreconf libcurl4-gnutls-dev libxml2 libpcre++-dev libxml2-dev git liblmdb-dev libpkgconf3 lmdb-doc pkgconf zlib1g-dev libssl-dev -y

sudo apt install git
cd /opt && sudo git clone https://github.com/SpiderLabs/ModSecurity
cd ModSecurity
sudo git submodule init
sudo git submodule update
sudo ./build.sh
sudo ./configure
sudo make
sudo make install

cd /opt && sudo git clone –depth 1 https://github.com/SpiderLabs/ModSecurity-nginx
cd /opt && sudo wget http://nginx.org/download/nginx-1.18.0.tar.gz
sudo tar -xvzmf nginx-1.18.0.tar.gz
cd nginx-1.18.0
nginx -V

# Build Nginx with ModSecurity module
cd nginx-1.24.0/
./configure –with-compat –add-dynamic-module=../ModSecurity-nginx

make

sudo cp objs/ngx_http_modsecurity_module.so /usr/share/nginx/modules/
ls -la

sudo rm -rf /usr/share/modsecurity-crs
sudo git clone https://github.com/coreruleset/coreruleset /usr/local/modsecurity-crs
sudo mv /usr/local/modsecurity-crs/crs-setup.conf.example /usr/local/modsecurity-crs/crs-setup.conf
sudo mv /usr/local/modsecurity-crs/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example /usr/local/modsecurity-crs/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf