Atomicorp

Thanks Mike Between you, you gave me the pointers to solve this. It turns out it's not a bug, it's a feature! My mod_security is built by EasyApache. EasyApache downloads and compiles mod_security from source as part of its Apache build. If you look in their changelogs, under the entry for 3.24.12 ,...

asl-lite used to be available for people with only a rules subscription. Is AUM similarly available? I use my own bash script that downloads the VERSION file, checks it with the last one installed, then downloads new rules when necessary before testing and restarting Apache. It works well - but all ...

What's AUM?

I'm using the ruleset, but not using ASL to install them. Apache 2.4.9, mod_security 2.7.7

Is a support case the best way to try and resolve this?

Looking over my audit logs to track something down, I noticed something strange that I hadn't seen before. This is a cPanel server, with the rules installed exactly as per the documentation in the Atomicorp wiki. Therefore, within my modsec2.user.conf is a line SecAuditLogStorageDir /var/asl/data/au...

I hope this is a really easy question - I've not found the answer anywhere in the wiki or FAQ. The wiki page on downloading the rules says to use http://updates.atomicorp.com/channels/rules/subscription/VERSION to work out the latest version of the rules to download. Browing through updates.atomicor...

You'll see (at the moment!) modsec-<version> and modsec-spam-<version>. The former is everything, the -spam one is just the anti-spam rules. Can I just clarify? Are the modsec-spam-vvv files a subset of the modsec-vvv files? To ask another way: If I am downloading modsec-vvv.tar.gz, do I ever need ...