Problem Updating Mod_Security

[kazanka101]

When I go to check for update from the repos I get the following errors.

Code: Select all

mod_security-2.6.1-1.el5.art.x86_64 from atomic has depsolving problems
  --> Missing Dependency: asl-stream-client is needed by package mod_security-2.6.1-1.el5.art.x86_64 (atomic)
Error: Missing Dependency: asl-stream-client is needed by package mod_security-2.6.1-1.el5.art.x86_64 (atomic)

I looked and found out what ASL was but it seems it's something you need to pay for. Is there a way to upgrade to the newest version of Mod_Security without this? Is there a free version of ASL that you can install? I get this error everytime after checking for updates.

[scott]

Ah we'll have to do an update for the atomic repo to drop the dependency for that. THe stream client is used to support in-line malware scanning, we could probably move that dependency around a bit so it doesn't effect the non-ASL users.

[mikeshinn]

Is there a free version of ASL that you can install?

There is a free trial of ASL, you can get your copy here:

https://www.atomicorp.com/products/aslfreetrial.html

[kazanka101]

The trial only lasts so long. It would be nice to give a free version with limited updates to certain things or something. Yet that's because I want it yet it's not worth the price. Only run 3 websites and they don't get much traffic. Just want to be up - to - date.

[mikeshinn]

If you just want your rules to be up to date, then get an asl-lite license which includes the real time rules. You can do that here:

https://www.atomicorp.com/products/modsecurity.html

Otherwise, if you just want to use our free rules, they are delayed 90s from the real time rules.