Turn on Mod Security on OpenLiteSpeed Wordpress Image

[tathspts]

Hi I am trying to figure out a way to turn on mod security on openlitespeed wordpress image. I am following this tutorial
https://openlitespeed.org/mediawiki/index.php/Modules:ModSecurity-Installation

I have an error in first step where it can not find the directory. /openlitespeed_download/

I am using server image on digital ocean and openlitespeed version is 1.5.7

in theory this version should ship with mod security built in it. If I take that assumption in mind then I am unable to find file named "mod_security.so" as it is no where to be found on the server.

Can someone please help me with this?

Thank you.

 

[David]

If you can not find the mod_security.so in the lsws/modules/, you may download it from download page of our web site if you are running linux.

 

[tathspts]

I am unable to see mod_security.so on the download page. openlitespeed.org/downloads/

Can you please link me?

Also is there any tutorial I can follow to setup comodo and owasp rules for mod security on ols server?

 

[Cold-Egg]

Hi @tathspts ,

We have renewed the document, so please use openlitespeed knowledge base, e.g. https://openlitespeed.org/kb/openlitespeed-modsecurity-module/.

mod_security is a second package from our repository, you can install it by

apt-get install ols-modsecurity -y

You can also download the openlitespeed Binary and untar the file, then you should be able to copy the mod_security.so from modules folder to your existing openlitespeed>modules folder to use.

Another recommend method is to use cyberpanel image from DigitalOcean marketplace. With the control panel, you can install comodo/owasp easily by one click to switch.

Best

 

[tathspts]

thanks a lot I was able to make it work with updated tutorial, but now I am stuck at configuring it with comodo rules.

I followed this tutorial to install and setup comodo https://www.litespeedtech.com/support/wiki/doku.php/litespeed_wiki:waf:standalone

then I used this code to set up the rules https://gyazo.com/c429dc0ffb6e010ff85434ea6526af08

But it is failing test for http://$server_domain/?a=b AND 1=1

I wonder what am I doing wrong?

 

[Cold-Egg]

No problem.

How about verify the url with method 2, https://www.litespeedtech.com/support/wiki/doku.php/litespeed_wiki:waf:comodo#method_2 ?

Best

 

[tathspts]

it does not work either,

I also noticed this error in my OLS server logs.
https://gyazo.com/b50df6a8e78a44ef851582cea8ebc42e

 

[tathspts]

Turns out I needed to configure it with new Nginx/ModSec_3.0 rules which I have done and I was successfully able to configure mod security. There was not error on server.

But it still fails both tests shown here https://www.litespeedtech.com/support/wiki/doku.php/litespeed_wiki:waf:standalone

In fact I was able to delete the file bob.txt explained in Troubleshoot method.

The way I know mod security module itself is working is because did the test for phpinfo.php file as described in this step. https://openlitespeed.org/kb/openlitespeed-modsecurity-module/