store | blogs | forums | twitter | facebook | wiki | downloads | support portal
Atomic Secure Linux
It is currently Sun Nov 23, 2014 3:42 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: cPanel + mod_security
Unread postPosted: Tue Jan 24, 2012 5:51 pm 
Offline
Forum Regular
Forum Regular

Joined: Sat Jan 21, 2012 6:37 pm
Posts: 109
Location: Canada
Hi,

I'm trying out ASL, So far I like it. :) before ASL I was using CSF + LFD with mod_security installed through EasyApache and was using the delayed gotroot rules. :) I guess my question is do I actually need mod_security installed through EasyApache Or should this be removed? Obivously the rules are loaded through ASL so I don't really see the point of 2 mod securitys and other possible problems that can come from that.

Also as for CSF and LFD do I actually need this with ASL? It seems it has it's own firewall doesn't hurt to have a bigger onion I guess, but I just wonder about conflicts between the two.

Any advice on that would be appreciated. :)


Top
 Profile  
 
 Post subject: Re: cPanel + mod_security
Unread postPosted: Wed Jan 25, 2012 12:17 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3670
Location: Chantilly, VA
Quote:
do I actually need mod_security installed through EasyApache Or should this be removed?


Thanks for the questions. You are correct, you not need to install modsecurity thru easyapache. If you do, ASL should just overwrite it - so it shouldnt matter if you do install via easyapache, but don't do it. It could break something, so just in case no don't install it via easyapache.

What does matter is that you have mod_uniqueid enabled in easyapache. If you already have ASL installed, then you do have mod_uniqueid enabled (ASL wont install without it).

Quote:
Also as for CSF and LFD do I actually need this with ASL? It seems it has it's own firewall doesn't hurt to have a bigger onion I guess, but I just wonder about conflicts between the two.


I 'm not aware of any conflicts, we dont support that kind of configuration, but I've heard folks use them together without issue. But you don't need them with ASL, ASL does all of that and more.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: cPanel + mod_security
Unread postPosted: Thu Jan 26, 2012 2:04 am 
Offline
Forum Regular
Forum Regular

Joined: Sat Jan 21, 2012 6:37 pm
Posts: 109
Location: Canada
Thanks for the answers Mike :)

I already had mod_security installed so I guess I should rebuild apache without it. :)

Thanks again :)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Bing [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group