Hi,

I'm trying out ASL, So far I like it. before ASL I was using CSF + LFD with mod_security installed through EasyApache and was using the delayed gotroot rules. I guess my question is do I actually need mod_security installed through EasyApache Or should this be removed? Obivously the rules are loaded through ASL so I don't really see the point of 2 mod securitys and other possible problems that can come from that.

Also as for CSF and LFD do I actually need this with ASL? It seems it has it's own firewall doesn't hurt to have a bigger onion I guess, but I just wonder about conflicts between the two.

Any advice on that would be appreciated.

Thanks for the questions. You are correct, you not need to install modsecurity thru easyapache. If you do, ASL should just overwrite it - so it shouldnt matter if you do install via easyapache, but don't do it. It could break something, so just in case no don't install it via easyapache.

What does matter is that you have mod_uniqueid enabled in easyapache. If you already have ASL installed, then you do have mod_uniqueid enabled (ASL wont install without it).



I 'm not aware of any conflicts, we dont support that kind of configuration, but I've heard folks use them together without issue. But you don't need them with ASL, ASL does all of that and more.

Thanks for the answers Mike

I already had mod_security installed so I guess I should rebuild apache without it.

Thanks again