Page 1 of 1

Problem Updating Mod_Security

Posted: Sun Jul 31, 2011 10:18 am
by kazanka101
When I go to check for update from the repos I get the following errors.

Code: Select all

mod_security-2.6.1-1.el5.art.x86_64 from atomic has depsolving problems
  --> Missing Dependency: asl-stream-client is needed by package mod_security-2.6.1-1.el5.art.x86_64 (atomic)
Error: Missing Dependency: asl-stream-client is needed by package mod_security-2.6.1-1.el5.art.x86_64 (atomic)
I looked and found out what ASL was but it seems it's something you need to pay for. Is there a way to upgrade to the newest version of Mod_Security without this? Is there a free version of ASL that you can install? I get this error everytime after checking for updates.

Re: Problem Updating Mod_Security

Posted: Sun Jul 31, 2011 11:55 am
by scott
Ah we'll have to do an update for the atomic repo to drop the dependency for that. THe stream client is used to support in-line malware scanning, we could probably move that dependency around a bit so it doesn't effect the non-ASL users.

Re: Problem Updating Mod_Security

Posted: Sun Jul 31, 2011 12:51 pm
by mikeshinn
Is there a free version of ASL that you can install?
There is a free trial of ASL, you can get your copy here:

https://www.atomicorp.com/products/aslfreetrial.html

Re: Problem Updating Mod_Security

Posted: Mon Aug 01, 2011 6:30 am
by kazanka101
The trial only lasts so long. It would be nice to give a free version with limited updates to certain things or something. Yet that's because I want it yet it's not worth the price. Only run 3 websites and they don't get much traffic. Just want to be up - to - date.

Re: Problem Updating Mod_Security

Posted: Mon Aug 01, 2011 12:26 pm
by mikeshinn
If you just want your rules to be up to date, then get an asl-lite license which includes the real time rules. You can do that here:

https://www.atomicorp.com/products/modsecurity.html

Otherwise, if you just want to use our free rules, they are delayed 90s from the real time rules.